Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C976F6868C8C11EB93DE9A7BF8AEA228.roa
File: C976F6868C8C11EB93DE9A7BF8AEA228.roa (raw, json)
Hash identifier: 0ulT1PqcPWMWP8OmCYBVdt9A7/HxQEdfjWiNMsHlShE=
Subject key identifier: 6C:C7:27:08:06:3A:C0:0F:13:10:76:DF:CD:89:67:F7:9E:AC:D5:14
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04F6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C976F6868C8C11EB93DE9A7BF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:36:27 +0000
ROA not before: Wed 24 Mar 2021 10:36:23 +0000
ROA not after: Thu 24 Mar 2022 10:36:23 +0000
asID: 7922
IP address blocks: 154.16.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:36:23 2021 GMT
Not After : Mar 24 10:36:23 2022 GMT
Subject: CN=605b162b-dbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:16:b4:dd:39:4e:51:96:fb:1b:bb:35:66:
3d:8b:15:2d:2d:14:27:3a:1d:6c:3e:3f:76:7c:e9:
a2:dc:41:ad:eb:ca:9a:13:b8:76:f5:71:e5:1b:62:
55:cd:79:84:78:33:9c:ad:f2:ba:86:75:0f:27:7e:
5b:77:09:90:67:67:21:f7:c1:b4:ee:e1:0a:a7:0f:
07:ec:83:24:58:cd:22:77:23:d8:0e:60:a4:4b:b5:
4d:79:ee:b7:38:3b:f7:64:a3:1d:35:72:69:6b:ce:
58:48:29:22:10:89:f5:ce:bd:cb:3b:e4:89:37:e8:
db:1c:d0:f6:57:b4:9f:12:27:b5:36:56:5a:5b:8c:
b2:c6:f6:7c:93:22:77:c9:16:b4:0e:67:f4:d9:86:
0f:b4:fe:ed:74:a3:4f:dd:fa:5c:47:a0:df:4c:60:
3b:c2:6a:1e:27:4b:57:58:9e:15:16:b2:da:53:d2:
22:1f:d2:ad:8b:3e:d0:de:9f:a7:27:dd:ad:7f:b8:
85:4a:03:f1:bd:5d:65:18:06:04:63:44:36:39:fc:
86:f2:97:7c:49:f4:3f:55:9e:96:d2:32:8c:20:ec:
5f:46:c1:85:f3:9c:99:86:a4:d3:dc:2b:2d:47:3a:
30:4f:c2:b7:a2:e0:56:4d:f0:f8:76:00:83:e1:54:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:27:08:06:3A:C0:0F:13:10:76:DF:CD:89:67:F7:9E:AC:D5:14
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C976F6868C8C11EB93DE9A7BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4c:81:b6:99:f6:bd:49:ce:71:3f:60:fb:db:0f:0e:1f:ab:
bb:57:ce:73:0e:db:52:19:4a:f8:c9:f3:16:e9:39:42:95:0c:
72:d0:36:db:78:7c:66:22:22:f9:b5:56:40:93:92:e8:22:84:
0e:73:53:48:8b:76:3b:f2:29:a0:37:e3:40:6e:b3:c7:0a:ff:
b8:2a:b6:7e:5c:1e:23:f9:0d:87:12:49:c2:14:f5:a7:14:69:
ee:42:aa:8a:55:48:68:aa:36:a1:1c:b5:e1:fb:e4:b3:ed:ab:
a2:97:28:ee:61:c2:b7:46:94:61:24:dd:e7:55:75:af:ce:55:
ae:1e:ab:e3:c4:cb:6b:20:38:f6:93:a2:d6:be:9c:65:82:ca:
c2:20:d0:a0:ca:ae:3f:f1:91:5f:13:3a:c4:af:ad:46:87:b6:
f1:ba:98:e7:ac:54:82:e1:58:26:8d:85:dc:e6:93:ca:38:be:
1c:2b:0e:be:6e:a1:21:7d:3f:5a:27:8d:2a:0f:5d:11:ce:fc:
67:af:8a:da:35:bd:cf:e5:05:4a:77:96:bd:63:70:e1:fe:1e:
54:7e:63:39:61:b3:41:5f:44:c1:2d:ff:c1:ce:30:f1:90:67:
a4:23:b8:aa:85:8f:b1:4e:74:cf:ef:9e:7f:c7:3a:19:c5:00:
a6:9c:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org