Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C809ACEA0D4111ECB5C75D7CD8A014CE.roa
File: C809ACEA0D4111ECB5C75D7CD8A014CE.roa (raw, json)
Hash identifier: lrtFghx81Rx7/ueoLOY3QBBCEmnb/zUrLZtcTAOhld0=
Subject key identifier: B1:58:50:0C:3A:BB:0E:21:7E:E6:28:C4:3E:18:D9:4E:CB:7A:BB:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0658
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C809ACEA0D4111ECB5C75D7CD8A014CE.roa
Signing time: Sat 04 Sep 2021 05:34:32 +0000
ROA not before: Sat 04 Sep 2021 05:34:29 +0000
ROA not after: Sun 04 Sep 2022 05:34:29 +0000
asID: 399838
IP address blocks: 154.16.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 4 05:34:29 2021 GMT
Not After : Sep 4 05:34:29 2022 GMT
Subject: CN=61330568-4eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:e4:ae:a6:49:0a:97:f9:2f:08:e8:a2:0d:
9a:aa:91:ba:dc:eb:ab:14:13:02:3f:b8:39:74:88:
1e:2e:0c:84:b9:6f:0d:2a:e2:18:27:cf:14:7a:82:
07:ab:9c:52:c0:51:1c:8b:9b:67:fe:c2:b1:35:16:
47:fe:1a:3a:96:37:4e:27:ec:5d:a4:0d:99:a3:59:
b5:c3:9f:a1:6b:8d:d8:60:94:cd:5a:14:2e:1e:43:
e2:94:66:e8:15:f4:6b:42:4e:60:2e:e6:56:8a:66:
82:78:b0:98:76:c2:e8:5b:a5:f9:80:76:89:21:ad:
1d:88:21:ed:d7:e9:10:2c:a7:57:f4:bb:3c:eb:32:
fd:f6:6e:9c:d9:1c:e6:f2:2d:ee:4a:0e:ac:cc:51:
91:d3:e2:df:f9:a1:fd:9b:61:c5:67:40:77:bd:41:
33:5e:84:f0:db:cb:fc:bb:f3:16:78:df:8b:3b:2b:
af:dc:e0:26:5e:bf:3c:59:7d:67:da:93:16:b7:7d:
67:23:e5:c1:eb:47:a4:67:bd:5c:ac:03:e3:dd:5c:
25:3d:89:31:97:dc:23:35:25:fc:29:cc:99:7e:79:
8f:70:23:65:56:55:84:c2:27:9d:22:d0:ce:6b:47:
c7:87:52:b0:6c:0b:22:67:61:7f:88:3a:0d:0d:13:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:50:0C:3A:BB:0E:21:7E:E6:28:C4:3E:18:D9:4E:CB:7A:BB:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C809ACEA0D4111ECB5C75D7CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2d:71:8a:b7:d7:f0:eb:8c:7b:17:bb:dc:b5:57:ed:36:17:
6d:f6:36:54:99:b3:65:a0:06:70:13:6f:5a:f8:2c:c1:a6:af:
3c:63:13:4b:4c:14:20:3d:e0:12:ac:c0:2e:68:fb:eb:f3:25:
8c:48:c6:5c:35:88:e1:d0:78:55:0a:42:5f:e0:54:6d:89:c6:
59:ce:62:11:05:53:73:24:e3:55:4f:dd:75:1a:be:d5:eb:1e:
7c:29:05:74:9a:7c:7e:6b:1a:f9:2f:4f:17:29:1a:0f:cf:76:
5e:1d:66:70:a6:0b:94:81:33:1b:53:7b:73:a4:7a:55:8f:f3:
d7:7c:ec:14:ae:34:b3:0e:5c:a9:f1:33:5b:5f:98:a3:5a:a7:
4c:b4:bb:25:c8:f2:3b:20:a0:c8:db:d5:63:89:2c:e2:9b:12:
07:03:3d:95:a4:83:98:71:2d:88:4b:b1:b0:6e:df:60:ce:f1:
17:e0:fd:4c:bb:62:f1:b7:3c:1b:8a:5f:f6:b5:7d:27:7d:f3:
a1:76:5d:5b:1d:95:7b:5d:b6:13:4a:b5:e9:b6:d5:d2:f3:38:
79:83:d6:d4:e1:80:b3:5c:07:db:bf:99:0f:7f:fe:d1:d8:03:
ea:c6:15:78:c7:e1:25:5d:a5:ea:36:a4:c6:57:8e:21:14:b6:
f1:12:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org