Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DBF5F2CC9CF811EBB9BF1472F8AEA228.roa
File: DBF5F2CC9CF811EBB9BF1472F8AEA228.roa (raw, json)
Hash identifier: qya5lXqbfiXZEv+abiG5GyUfjcBc5T8rTQ5pvyIADhw=
Subject key identifier: 99:F0:D5:0A:9A:57:2B:92:88:36:41:A1:27:B1:FF:A7:96:6D:CC:D1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0556
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DBF5F2CC9CF811EBB9BF1472F8AEA228.roa
Signing time: Wed 14 Apr 2021 08:10:22 +0000
ROA not before: Wed 14 Apr 2021 08:10:16 +0000
ROA not after: Thu 14 Apr 2022 08:10:16 +0000
asID: 206092
IP address blocks: 154.16.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 14 08:10:16 2021 GMT
Not After : Apr 14 08:10:16 2022 GMT
Subject: CN=6076a36e-9981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:e5:b4:f7:fd:96:9f:5a:c8:e9:c6:4a:57:
f8:bb:5e:d0:ce:a8:48:6e:b6:33:e4:19:ca:34:db:
95:7c:db:dc:d0:76:d1:f8:f9:c3:61:21:be:ca:72:
8e:04:db:49:1e:a0:ac:ef:e7:f6:30:3e:85:7d:53:
74:3c:f4:64:e2:5a:0c:19:aa:27:15:d3:19:35:b1:
25:be:27:c2:54:5c:35:db:1a:fc:5e:63:5d:d6:8c:
43:08:f6:29:df:47:75:fb:c2:e7:37:14:4b:1c:86:
77:38:fd:ce:96:12:21:b6:b8:66:99:83:71:13:77:
2e:f8:66:98:1e:10:76:85:09:ce:38:54:7a:08:46:
93:b0:67:8b:60:8c:e5:ac:ec:66:11:33:fe:cd:15:
6d:73:79:ce:22:fa:e1:a0:90:13:92:87:e4:b1:52:
bb:8c:e7:0e:77:e1:a8:45:90:e3:41:21:19:d5:e9:
09:0a:02:0b:d1:91:2a:18:7b:64:f5:7e:3d:fc:ee:
42:31:2c:3f:1f:3e:4f:d0:1e:31:75:4c:65:fc:55:
b2:9a:55:d2:4c:0f:35:eb:cf:eb:d2:5f:13:bf:35:
cc:2f:0b:ea:cf:e8:2b:d1:fd:be:f7:1f:21:bc:61:
a1:75:e0:05:2a:72:19:ee:b4:f8:5c:12:d3:73:24:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:D5:0A:9A:57:2B:92:88:36:41:A1:27:B1:FF:A7:96:6D:CC:D1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DBF5F2CC9CF811EBB9BF1472F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.243.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9a:16:d4:01:10:9e:8f:50:c3:90:b9:e1:84:f3:a6:ff:75:
cb:9e:79:fd:a1:1e:06:0d:8d:ba:f7:b4:c4:04:0b:44:3f:d7:
1a:d2:98:d2:20:8e:9e:87:6f:c9:93:c2:fd:da:06:fb:78:34:
b6:02:dc:79:c7:4a:d6:5b:3e:c7:24:11:28:79:98:06:c9:c4:
05:02:43:69:b6:bb:4d:b0:ae:03:9e:64:b3:c4:90:b3:6a:dd:
fa:a4:d5:fb:9e:60:32:3f:ab:ce:3b:43:bc:e0:6a:fe:20:56:
55:54:b2:68:ae:17:75:6e:5a:76:51:59:00:a3:d2:b6:49:63:
de:29:ec:0e:bc:d7:32:45:ab:f8:09:95:a9:80:88:2d:1c:1a:
f9:b5:db:97:b8:04:3f:8a:31:d9:4d:82:d4:da:4f:4b:2a:fe:
ed:56:d5:33:fa:ad:78:60:2e:87:68:c1:bb:69:c8:62:10:6b:
8c:1d:38:20:dc:ea:9a:63:bb:a9:5f:9e:d4:6c:cc:6a:35:bb:
dc:da:2d:50:43:2e:2e:12:9c:82:d0:b1:7b:b0:f8:33:6b:a0:
d2:4b:2c:20:63:0f:59:ca:e3:ca:98:65:00:f2:2a:74:60:b9:
e8:82:21:9c:ba:c7:d6:14:c9:93:e1:71:c0:0e:33:be:17:ee:
41:50:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org