Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7BAFB960C1211ECB2AD491ED8A014CE.roa
File: E7BAFB960C1211ECB2AD491ED8A014CE.roa (raw, json)
Hash identifier: 73LGSMppBocCoiNlODy6RG9QfLMKNmZGeqm+n0AIil4=
Subject key identifier: 87:7C:5B:13:0D:E7:21:9F:E0:2F:33:9D:20:90:09:86:AB:7F:F0:3B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 064F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7BAFB960C1211ECB2AD491ED8A014CE.roa
Signing time: Thu 02 Sep 2021 17:26:28 +0000
ROA not before: Thu 02 Sep 2021 17:26:25 +0000
ROA not after: Fri 02 Sep 2022 17:26:25 +0000
asID: 7922
IP address blocks: 154.16.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 2 17:26:25 2021 GMT
Not After : Sep 2 17:26:25 2022 GMT
Subject: CN=61310944-84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:8d:3a:fb:bd:d3:f2:9d:de:88:d5:7f:7e:
82:59:1d:f4:31:b8:dd:57:a7:f9:fe:e4:cb:0e:b1:
d9:7d:d2:23:7a:95:4c:df:32:97:d7:e5:dd:64:b2:
ed:b7:0a:39:51:49:19:74:f8:0a:a0:3a:8a:54:a1:
ee:0a:1b:15:65:72:60:4f:b0:c7:37:09:f7:c9:33:
26:ee:63:78:59:28:d0:40:df:b9:d0:ae:3b:1a:8e:
03:ee:6d:b1:8a:54:b4:0f:a6:de:7b:4b:8d:13:cd:
0b:c9:bd:a7:42:97:e4:13:45:02:c0:a0:f4:83:76:
49:2a:21:80:25:e0:35:e5:0a:9e:35:de:6c:02:44:
35:07:75:48:db:50:b4:a6:e2:84:fd:8a:26:b2:b2:
14:18:a0:90:bb:27:ba:a5:15:81:fe:08:49:f2:84:
c0:52:59:a3:16:e8:41:45:74:b8:83:b6:97:43:d2:
45:1e:54:70:0e:7c:05:f0:77:d9:6a:40:98:37:a8:
35:32:d7:b9:9c:97:d3:91:1e:9f:ea:da:b2:aa:29:
ea:8a:e1:71:2f:e4:84:a2:f2:55:87:b9:37:23:fe:
8e:90:c4:51:e3:71:5d:91:1f:37:ec:8e:31:f8:ed:
1f:2e:9c:4b:2f:4c:65:40:cb:35:66:54:36:53:21:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:5B:13:0D:E7:21:9F:E0:2F:33:9D:20:90:09:86:AB:7F:F0:3B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E7BAFB960C1211ECB2AD491ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:38:29:fa:4a:18:80:f5:00:1a:60:d4:f5:cb:46:67:87:4a:
dd:7b:d2:b6:60:a2:b9:46:e2:0e:d8:86:e3:c7:bf:ad:dd:60:
12:29:a7:99:34:39:a5:52:4b:4e:b7:40:80:56:81:61:18:63:
fa:35:7b:b0:bc:01:e9:d7:01:73:b9:fe:49:59:12:73:08:ba:
82:da:38:a8:82:3c:e4:4a:16:a6:1c:b3:0a:e8:b9:83:ec:b3:
09:65:e4:d9:4e:16:d2:26:32:79:11:eb:3e:5c:33:72:54:d5:
22:de:ba:0d:86:05:06:cf:b2:3a:a8:ea:b4:b5:11:a7:fb:63:
1c:dd:e3:f9:fc:f5:c0:b9:01:59:17:0c:89:c0:95:4d:1b:80:
1c:6a:9a:6e:6f:3e:5b:36:bf:1e:05:d2:ea:df:0c:2c:f9:86:
3b:9a:76:33:77:25:67:4d:eb:45:25:7d:a6:32:3a:95:6a:28:
60:ad:3d:73:d8:35:ce:fd:39:87:08:73:df:ca:93:54:e8:58:
55:a6:7e:45:97:4b:af:9c:0a:58:7c:dd:df:30:2c:f0:e3:b3:
1f:39:b0:b0:f0:74:4d:ab:aa:89:bf:9a:3c:23:6c:9e:5f:f7:
91:e3:1e:bb:41:1a:1e:88:f5:82:35:25:c7:3e:60:0d:73:5d:
4f:18:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org