Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3C82F7E6F2511ECAE9211E35A40D577.roa
File: E3C82F7E6F2511ECAE9211E35A40D577.roa (raw, json)
Hash identifier: v4eaFEKzGWJfAqWCNBv1RY6+G5NtmbxS1NcYVjXoeSM=
Subject key identifier: FC:AE:C4:25:C8:10:15:DA:7A:60:27:48:B7:F6:FE:44:7F:68:B6:5A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 076A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3C82F7E6F2511ECAE9211E35A40D577.roa
Signing time: Thu 06 Jan 2022 19:21:47 +0000
ROA not before: Thu 06 Jan 2022 19:21:42 +0000
ROA not after: Fri 06 Jan 2023 19:21:42 +0000
asID: 49999
IP address blocks: 154.16.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 6 19:21:42 2022 GMT
Not After : Jan 6 19:21:42 2023 GMT
Subject: CN=61d7414b-b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:95:18:bd:99:f5:de:ba:ae:9e:09:69:d5:
f8:1f:92:99:49:d8:fa:4f:33:3a:60:4a:7c:77:fc:
3b:1b:f5:4a:43:de:99:6e:8f:e2:2d:98:d0:c3:62:
5a:cd:91:ab:2f:67:58:5c:8a:a6:49:4c:8c:eb:3b:
77:3c:84:69:45:ff:c1:a8:b0:bb:e9:af:07:99:51:
e6:28:ce:a1:27:b1:f7:f2:71:a3:65:df:b6:6b:6e:
f6:1e:e9:1d:ad:ba:61:c2:93:ff:89:3b:3a:a5:2d:
29:38:90:3e:24:d3:e6:69:24:72:b7:4d:d7:ff:b3:
28:20:b1:50:e9:68:2a:4e:4c:cb:b8:22:dd:08:7b:
ae:f3:cf:bf:e3:41:e7:b6:94:84:fc:f2:81:92:71:
01:80:d4:f5:16:a1:4e:40:be:65:e8:18:1a:97:32:
33:f9:c8:24:60:20:56:03:79:4d:9b:30:cd:d2:bd:
54:ef:60:06:f6:54:a1:4c:10:32:bc:2d:3a:21:45:
8d:5a:0f:09:82:20:ed:8d:95:f2:b3:c7:22:55:15:
17:09:82:2f:b3:b8:d2:d6:13:07:1e:2a:68:0d:e6:
75:45:e8:c3:29:b6:cc:f3:50:d3:9c:eb:70:bd:5c:
05:5d:d5:6d:ed:7b:60:a0:56:82:c3:97:5b:92:1a:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:C4:25:C8:10:15:DA:7A:60:27:48:B7:F6:FE:44:7F:68:B6:5A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3C82F7E6F2511ECAE9211E35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.186.0/23
Signature Algorithm: sha256WithRSAEncryption
70:26:7b:43:22:e0:28:5b:76:25:5b:b6:96:e1:ad:0f:b2:d8:
3c:d0:cd:30:cd:a6:b0:eb:22:26:5c:22:1e:27:d6:23:b9:4f:
97:9e:20:3f:0f:a5:00:be:fb:8c:ad:36:76:95:74:6e:ab:3f:
f7:98:bb:74:41:c4:95:f6:ec:da:bc:b2:c3:2b:ef:84:4a:d0:
25:41:80:e0:77:36:af:28:53:b0:51:33:7c:ff:ef:06:f6:fb:
96:f5:d1:20:3e:f4:d9:b1:9a:db:ad:98:18:a8:c4:3d:35:b1:
f4:7d:a8:e1:e3:a5:be:74:e9:67:7a:66:dd:e5:69:d1:cc:54:
3d:d1:39:69:e8:54:4e:c2:3a:14:f7:a6:89:02:4f:db:b9:49:
50:35:05:f9:3c:74:d0:7a:d8:e8:da:42:bc:47:da:4f:8e:1d:
0c:d3:d9:e8:01:b6:a5:0b:d9:d1:50:b4:51:e3:99:6b:f7:4a:
d2:2b:14:8f:d3:79:9a:cb:33:44:7f:a8:f0:59:90:58:1f:4d:
7e:97:a7:ee:e5:65:a0:3c:6c:62:37:27:e9:d0:31:e6:36:8b:
ae:d3:4b:54:ef:61:23:bd:c9:ac:c7:c3:5e:ad:e2:45:b4:e0:
38:50:de:73:c2:29:bd:51:cf:94:c7:59:73:68:33:35:a4:ac:
41:fa:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org