Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8527D5C1AB611ECBCF9C926D8A014CE.roa
File: D8527D5C1AB611ECBCF9C926D8A014CE.roa (raw, json)
Hash identifier: 7YGq421kY2YH2V4l9TRLUA9PbzTue/sFmbdGGyErsL8=
Subject key identifier: 96:CE:5B:AD:EA:BF:C3:47:6C:3D:5D:30:F5:5A:A6:28:F3:E3:F1:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 068D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8527D5C1AB611ECBCF9C926D8A014CE.roa
Signing time: Tue 21 Sep 2021 08:35:16 +0000
ROA not before: Tue 21 Sep 2021 08:35:12 +0000
ROA not after: Wed 21 Sep 2022 08:35:12 +0000
asID: 22773
IP address blocks: 154.16.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 08:35:12 2021 GMT
Not After : Sep 21 08:35:12 2022 GMT
Subject: CN=61499944-c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:c8:f3:04:8d:b7:44:f2:ce:4b:f3:46:97:
62:b5:96:41:33:e8:3c:33:e4:54:51:a5:5a:6b:98:
16:58:2d:81:ec:24:87:54:2f:f5:20:06:93:20:10:
c0:0d:a9:86:2f:2d:ce:0d:27:17:64:95:fc:00:2e:
fd:6d:7c:6c:a7:53:29:16:eb:3a:07:90:7f:17:b6:
e9:82:97:fd:cc:b5:bf:3c:16:7b:06:52:db:d2:4a:
38:7a:85:19:4d:6e:2c:b8:88:01:50:e6:02:62:ac:
37:78:6b:6d:cd:87:e3:69:db:71:e2:09:92:f8:ac:
88:a0:af:36:08:86:3d:70:8a:7c:1b:47:a3:c9:7a:
23:4f:aa:b9:fd:a1:49:79:76:1b:3f:0e:27:b8:fb:
71:5d:e3:93:75:f1:74:d2:63:4d:dd:92:c1:2b:ae:
0b:e6:52:aa:62:f8:1f:7b:6e:8f:0f:b5:3f:1d:07:
fa:59:70:ca:46:03:b2:ab:cf:7e:94:7f:d9:b0:f5:
68:41:6a:2a:31:ae:e0:d8:ad:50:dc:16:a1:ec:cd:
4e:45:60:c5:32:43:d9:cb:84:b7:e9:6d:82:66:b2:
37:ab:12:08:ca:aa:fe:fa:6e:f3:29:55:1d:bb:a5:
7a:b8:f4:d7:99:f0:10:8f:21:4b:50:a4:72:25:96:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:5B:AD:EA:BF:C3:47:6C:3D:5D:30:F5:5A:A6:28:F3:E3:F1:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D8527D5C1AB611ECBCF9C926D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:36:44:8f:13:f5:d8:c0:03:72:04:8a:f2:3b:71:40:21:39:
e8:a7:4a:48:ff:64:b4:77:f1:2a:cf:36:f8:21:ca:b4:f6:00:
b1:0b:e7:cd:42:26:e4:69:9f:e5:0e:ae:67:48:f3:dc:13:f9:
12:68:e5:80:f2:d4:7e:5d:04:95:d1:21:aa:8b:fd:00:35:b8:
a8:97:63:20:80:6e:e2:00:81:cf:00:a8:77:d3:42:d9:b7:b0:
85:cc:4b:3d:95:49:b9:ad:5d:0b:27:25:06:9e:13:9b:cf:b7:
65:cd:c7:f7:7a:c6:af:8e:5c:e4:cd:d9:fb:92:ec:9d:a0:8d:
84:98:95:a9:ae:61:55:06:83:0f:a9:bb:4c:81:78:fe:d3:e8:
f1:82:3e:ea:27:be:9b:d0:e7:8c:66:94:8f:9a:78:c1:76:97:
86:cc:2e:7b:b8:1e:b5:8a:3d:2a:6a:d0:ce:bb:54:5f:c3:d0:
9f:eb:0f:9e:69:0f:1c:d6:ba:53:bc:c8:0f:50:bd:b7:85:ba:
12:9c:3f:df:a5:af:b2:16:3a:a1:d5:33:19:71:7a:39:2d:39:
79:0d:98:03:9e:15:50:2a:bb:9b:9b:7c:7a:54:69:5e:53:fa:
0f:b4:21:a1:ba:4b:a5:46:a1:d6:53:2e:0b:7f:30:91:49:3a:
2a:f8:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org