Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3FF79EC2EEA11EBA1F32352F8AEA228.roa
File: E3FF79EC2EEA11EBA1F32352F8AEA228.roa (raw, json)
Hash identifier: tuJIFFsfpCvYO1Sobi5dWhLdlamE0NLbkQ6eEKB2Pcc=
Subject key identifier: 9A:FB:91:8D:38:93:B8:DA:9A:B6:71:D3:3D:A6:5A:02:9D:25:AF:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0425
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3FF79EC2EEA11EBA1F32352F8AEA228.roa
Signing time: Wed 25 Nov 2020 06:53:15 +0000
ROA not before: Wed 25 Nov 2020 06:53:09 +0000
ROA not after: Fri 02 Sep 2022 06:53:09 +0000
asID: 56309
IP address blocks: 154.16.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 06:53:09 2020 GMT
Not After : Sep 2 06:53:09 2022 GMT
Subject: CN=5fbdff5b-5068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:8a:9c:63:e4:04:26:82:6b:f9:6e:3f:7a:
ac:dd:59:74:cd:41:9d:3c:b4:58:fa:8d:a5:36:f2:
2f:2d:0e:27:4b:29:85:cc:15:69:f2:31:2e:f3:de:
c1:5c:3d:dd:af:7a:b4:fc:60:d9:57:e7:bc:75:0c:
a4:2c:23:2c:fd:c0:f4:65:ca:c9:67:25:cf:fa:19:
7e:69:25:38:21:c5:b6:c1:45:66:4d:0b:60:cb:cb:
7b:55:35:fa:30:f7:83:2d:e0:18:7f:b0:df:c7:f2:
09:fe:19:98:e7:c0:4f:81:78:af:14:d5:e7:dc:63:
14:36:0f:f4:f0:61:99:db:12:9b:cc:e2:ae:82:1e:
b0:49:b0:72:77:9b:eb:da:0e:d8:53:b7:ef:9c:c6:
f0:bb:a1:08:b1:fc:d8:70:dc:09:1e:a8:d2:41:24:
5e:86:c7:cc:fd:52:eb:d2:a8:a9:13:47:44:59:c3:
df:2c:e9:01:df:dc:06:24:be:58:31:0a:a2:fd:0b:
f7:71:30:72:68:07:63:b4:61:24:09:c6:f8:52:73:
eb:78:43:ea:67:5e:37:af:58:72:06:8e:dc:37:5a:
29:85:08:8f:83:43:34:a4:ee:ba:39:06:96:7a:9e:
27:5a:a1:e6:44:85:40:ae:b0:5c:7c:e4:bb:11:be:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:91:8D:38:93:B8:DA:9A:B6:71:D3:3D:A6:5A:02:9D:25:AF:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3FF79EC2EEA11EBA1F32352F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9a:47:da:a5:47:74:1f:c3:23:ff:0a:bf:38:74:14:d9:b0:
ec:d6:74:c0:da:ff:4c:5b:2f:fc:5f:2c:f0:03:df:7d:c1:0f:
20:c8:57:14:e0:5f:6d:90:5c:49:57:62:10:11:90:c1:43:05:
0e:2c:2f:84:7f:e7:ca:09:f5:c1:0b:03:7b:53:4a:e2:60:73:
64:03:b5:80:5d:91:82:39:7c:00:52:a8:27:e9:ed:67:8f:4d:
af:b9:66:66:e8:43:b1:90:5a:e9:d8:30:bd:fd:d2:d6:ff:5d:
06:a4:18:b3:8d:9c:26:85:b6:ab:6a:8a:37:95:60:86:f9:e2:
b6:0d:81:32:d3:c2:a1:69:12:96:08:c3:cc:38:4f:0f:09:42:
33:ec:d3:f2:11:26:66:f8:23:70:ec:8a:f3:c6:78:b6:19:b9:
ad:23:6c:a5:ca:ae:47:eb:ff:ee:d1:4b:df:f7:80:c5:00:00:
b6:6d:5f:d2:fd:5f:0d:08:30:c1:b6:fe:02:84:a3:1a:c5:f0:
e2:f0:be:78:00:04:4b:df:8d:4c:80:5c:79:b5:90:e2:b0:6e:
b0:67:0a:fd:3f:17:0d:0e:fe:bf:67:f4:af:0c:1f:b2:a5:bf:
11:34:61:f8:2f:2e:ef:3c:42:88:b4:85:07:c0:62:b5:67:3c:
88:93:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org