Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF438A2424A11EC87416760D8A014CE.roa
File: DDF438A2424A11EC87416760D8A014CE.roa (raw, json)
Hash identifier: AbylxT4JlfnvmIkAUz7WjV/iyzkeaxyXyvJe4nId/dg=
Subject key identifier: 8A:5D:37:F6:1D:11:15:5D:00:0C:77:9D:31:0F:55:E8:5C:04:0B:90
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 06F2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF438A2424A11EC87416760D8A014CE.roa
Signing time: Wed 10 Nov 2021 17:23:06 +0000
ROA not before: Wed 10 Nov 2021 17:23:02 +0000
ROA not after: Thu 10 Nov 2022 17:23:02 +0000
asID: 7029
IP address blocks: 154.16.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 10 17:23:02 2021 GMT
Not After : Nov 10 17:23:02 2022 GMT
Subject: CN=618bfffa-6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:32:41:4d:a5:d2:1c:e3:2a:4b:92:8c:09:
f9:4b:68:fa:f2:50:e3:da:3c:21:2d:75:9c:d3:72:
d9:61:9f:78:a4:aa:ad:9d:62:55:4e:ad:11:74:e4:
6a:e1:c8:38:bf:d8:4a:91:19:61:6a:4a:e7:00:19:
f7:06:fd:bf:fb:f6:fb:dd:39:fd:36:1b:63:d2:71:
ba:4d:6b:52:b1:c3:9c:71:91:59:47:19:e9:cd:c5:
a0:f9:19:99:69:f5:25:5b:21:aa:96:24:d1:a6:05:
cb:fc:09:0e:7f:fd:e1:7c:9f:a9:03:d1:0d:e1:d3:
ad:23:5e:62:69:9b:5e:dd:a6:33:89:0e:14:74:f0:
68:5f:d4:f8:78:78:98:37:70:17:82:b3:be:6c:d1:
7e:dc:87:86:c4:57:5b:ce:e0:ca:87:c5:e6:af:e9:
d8:4c:92:e2:9c:9f:76:e8:62:de:64:7e:99:ef:c7:
a9:78:14:47:b1:c3:30:a9:bd:d6:35:80:36:6a:73:
3f:39:6b:08:62:bb:a8:7d:1c:bc:fa:49:15:28:d4:
61:e9:7c:a7:ef:61:39:3e:bd:0e:57:39:62:c1:94:
05:10:a8:67:aa:04:50:55:fa:62:af:d4:ca:23:d9:
0c:53:2d:85:d7:f5:a4:25:d1:e3:66:92:fb:a4:70:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:37:F6:1D:11:15:5D:00:0C:77:9D:31:0F:55:E8:5C:04:0B:90
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DDF438A2424A11EC87416760D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:72:34:ff:47:99:2f:10:14:f3:0d:fb:5e:6f:e0:8f:c9:a0:
5b:6e:a0:f9:2c:b1:5a:2f:6d:5d:8d:2a:3b:cc:b3:ec:ac:61:
d9:65:6b:f9:e8:49:81:8b:81:64:23:1d:c3:39:c0:c8:35:fd:
70:93:3b:fa:97:1f:36:27:ac:fb:c4:06:64:fa:bb:bf:7e:9e:
92:8c:34:df:19:cf:3a:7c:6c:5b:56:db:0d:ef:5b:69:50:b4:
6f:11:aa:9d:0b:22:6d:1e:53:d0:43:c2:a3:a4:23:f7:32:01:
c5:b9:9e:b2:c6:ca:a3:06:9d:4c:04:b6:50:3d:99:9e:60:52:
ff:c1:ca:36:b6:e9:9b:59:e9:6f:b2:ef:6c:1d:56:c7:4e:ba:
79:1f:53:9f:fe:74:0d:39:85:40:98:69:1a:68:65:ab:54:31:
c6:ad:c3:f0:dc:09:ee:2e:60:e9:c7:7b:2f:75:6d:b0:ca:05:
78:2d:76:0e:52:a3:fb:48:54:d7:2d:df:5a:79:cc:e5:c0:ae:
16:b0:a9:94:84:c8:cc:5a:45:b0:cc:01:78:21:55:0e:c2:aa:
66:1c:a0:f1:86:07:70:8b:d1:7b:af:df:48:5c:4c:a7:fd:44:
dd:34:5d:b9:cb:df:bc:23:4c:c9:b1:dc:b7:94:39:cd:4c:95:
27:c5:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org