Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
File: E2D26186AD8111EBB9329427F8AEA228.roa (raw, json)
Hash identifier: W2FDTzsj4b5KGBn7Kfw9AtPIE+g67XGaAXJlNJ3jISY=
Subject key identifier: 14:B1:01:D4:16:21:B1:4E:66:0D:72:33:64:56:75:B4:AC:72:80:78
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0577
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
Signing time: Wed 05 May 2021 09:11:34 +0000
ROA not before: Wed 05 May 2021 09:11:27 +0000
ROA not after: Thu 05 May 2022 09:11:27 +0000
asID: 174
IP address blocks: 154.16.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1399 (0x577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 5 09:11:27 2021 GMT
Not After : May 5 09:11:27 2022 GMT
Subject: CN=60926145-120e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:f9:4f:38:15:3b:a1:c5:e6:b0:a3:08:a9:
7b:90:d5:c2:06:70:0d:1e:34:2c:89:67:b0:5e:e2:
cb:3d:12:d3:5a:38:32:82:2d:0f:b9:44:8f:62:1d:
42:f5:35:b9:72:8e:ac:d6:a5:78:1c:c2:c9:3c:eb:
6b:dd:7c:04:f4:1d:de:7f:89:58:1b:20:eb:39:09:
fd:23:ac:62:e5:0a:20:8c:d1:ab:a6:1f:e2:a2:d0:
6e:5f:c5:51:e0:92:0e:e2:7c:5b:a4:3a:57:dd:e2:
0c:86:f5:30:25:d6:00:1a:67:4f:c3:d1:be:23:b7:
b1:78:e8:0d:3e:64:fb:f4:58:8c:f5:15:af:f2:77:
47:97:c6:a9:cc:1f:88:c1:9b:7b:a1:2d:86:f8:ce:
fd:6a:78:5c:66:6d:76:00:5f:7d:ba:a9:c4:72:65:
a6:98:25:47:73:d5:c9:bc:dd:a9:72:5e:9f:21:45:
60:be:cd:8a:1d:18:14:5d:33:8a:9e:56:c1:0b:96:
d0:54:be:9d:92:31:69:82:14:38:17:60:f7:7b:1e:
85:8d:b1:8f:dc:70:91:ef:7b:4a:c0:1d:42:fd:e5:
84:43:3a:ef:36:ac:48:97:bc:d8:42:c8:8d:97:7b:
3f:e3:0d:cd:78:c7:4c:69:3e:06:66:32:4b:05:0a:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:01:D4:16:21:B1:4E:66:0D:72:33:64:56:75:B4:AC:72:80:78
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E2D26186AD8111EBB9329427F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.192.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3e:e7:88:8f:1c:ae:a4:92:17:a3:fa:b0:82:3e:8e:db:3c:
82:07:c5:3f:0d:fa:ce:4e:bd:ae:79:5a:dd:42:fc:e3:17:45:
af:65:a9:12:98:fe:c2:b5:91:15:49:c3:b8:35:9a:d2:2b:be:
1f:ea:1f:a6:14:21:90:b5:02:e5:e5:7e:7b:c5:94:97:f1:23:
92:20:e1:31:bc:52:0f:0e:36:fd:f9:eb:d6:c6:a3:21:10:97:
91:c5:ee:5e:6c:0e:99:26:79:a4:b7:a8:8d:3b:e5:4e:5e:43:
45:f1:95:61:cd:49:f7:bb:ad:ca:16:7c:ad:4e:6f:07:3d:0a:
07:48:6b:21:aa:7a:f3:8a:ff:76:39:c7:b8:38:d8:04:57:bd:
88:06:8c:bc:95:fd:f1:79:4b:af:e3:39:51:45:69:be:44:67:
16:7f:4b:fa:8e:cc:10:37:c2:70:f6:e4:31:b1:5e:73:31:43:
9a:13:9e:f6:5a:80:89:3b:ad:d2:97:53:dd:0d:fc:4a:07:bc:
ce:c5:c5:fa:e1:4f:a6:13:5a:2e:f5:7b:a4:65:8b:06:9d:b1:
c5:50:2f:6e:4c:b0:27:14:f0:19:fb:80:32:5b:4e:5e:e7:f4:
3e:10:dc:57:14:62:40:8b:da:a8:7f:54:6c:c5:46:ff:ef:0c:
35:36:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:59:00 2025 by rpki-client