Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
File: DB0DF54C85E211EDACA3FA9EF1222468.roa (raw, json)
Hash identifier: tWDSpedUu7R5Zc2RGHdBL3NACE7MlW4Seqk7tBXB7X8=
Subject key identifier: BB:58:13:FD:77:60:E3:96:1E:A8:DB:B6:51:4A:71:60:85:77:D0:15
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
Signing time: Tue 27 Dec 2022 12:34:50 +0000
ROA not before: Tue 27 Dec 2022 12:34:46 +0000
ROA not after: Fri 27 Dec 2024 12:34:46 +0000
asID: 49999
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839 (0xb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 27 12:34:46 2022 GMT
Not After : Dec 27 12:34:46 2024 GMT
Subject: CN=63aae66a-5c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:00:72:d5:b7:40:3f:e0:40:b4:53:19:d7:
3f:5f:0d:06:ea:18:8a:8e:77:d2:d6:65:49:f3:d4:
52:3e:57:a7:7e:42:1b:65:eb:b1:a6:86:9e:2d:4f:
42:7e:8a:84:df:a2:23:a8:9b:8e:80:c8:45:01:b9:
50:73:11:c7:d8:eb:83:9a:03:50:de:9c:38:e3:64:
aa:7f:4e:ca:49:3e:5a:b5:0f:c2:dd:53:0b:43:2a:
28:98:38:e3:23:a8:2b:07:32:b7:e8:a9:69:65:bb:
71:7b:c8:f6:4b:8d:f0:8c:8f:5d:3a:5d:b2:3c:65:
f9:8c:9e:7a:f4:a4:2b:9e:ad:c8:a1:06:2f:09:8f:
df:7e:73:f8:33:50:22:5d:02:14:38:15:51:5d:0b:
0b:89:cd:e2:0e:cf:04:49:70:a8:8f:77:51:43:20:
0e:69:8d:45:66:a5:5e:d5:97:04:9c:16:a7:96:15:
89:b2:39:db:f7:b7:ec:26:04:bd:32:0b:f9:69:6b:
77:d0:43:47:b1:0d:a0:c4:e3:8f:d0:1f:09:33:e6:
47:9c:7e:52:a0:12:f2:fc:b4:e0:20:e5:ce:fc:25:
bb:18:b4:a1:ac:39:25:6c:34:ca:50:5e:60:90:6d:
d4:e3:08:ad:6e:27:58:99:41:f7:5f:3e:46:58:cf:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:13:FD:77:60:E3:96:1E:A8:DB:B6:51:4A:71:60:85:77:D0:15
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB0DF54C85E211EDACA3FA9EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:91:98:66:b8:a7:b2:42:56:fc:f5:b4:64:bd:65:e7:47:fc:
a9:14:68:64:11:6e:d3:87:45:99:6f:97:d2:91:a7:82:7d:e4:
1d:c4:be:be:43:c4:8d:e1:7a:18:60:b3:75:56:d2:01:f0:c2:
f2:f1:5c:12:43:b6:80:a3:5e:b3:43:b5:ee:f0:6c:1c:24:76:
ab:63:74:a6:cf:6f:02:2e:cc:0a:b4:1a:fe:fe:0a:12:51:d6:
78:a0:27:93:35:d4:9f:54:e2:81:6a:c0:a6:67:50:25:29:fb:
7a:56:a2:cc:e3:43:72:8b:e3:42:94:4d:e1:ad:dc:30:88:52:
f6:f9:f4:90:3d:4c:db:0d:07:7b:18:a1:e8:a1:a8:e5:d4:ab:
a4:4d:b5:cd:7f:59:85:6d:8c:5e:3f:ee:e3:42:f9:20:9e:89:
41:54:18:75:8f:26:40:98:24:f6:f0:84:c1:d6:49:59:aa:df:
ba:9a:d1:5a:e0:fe:45:99:78:56:d1:49:72:e8:c8:76:55:a0:
0b:25:14:62:78:c6:a1:e2:d9:26:d4:a6:bc:b6:ae:31:0a:6c:
32:79:56:1e:f2:1a:0d:e4:d5:fe:7d:9a:5f:3f:4c:ae:e2:a6:
88:ce:50:c3:de:6c:33:b4:9b:ab:db:0b:61:76:61:bf:65:bc:
36:f7:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:44:59 2025 by rpki-client