Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
File: E9247F54FD5711EA9B0FD43AF8AEA228.roa (raw, json)
Hash identifier: wmN70k1gK9uM9+CwWEM8tYYHwD77feYMxhZXPtvtG88=
Subject key identifier: FE:1B:91:62:D3:C4:84:72:49:00:79:DB:83:DE:81:3F:1E:4F:E2:FC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
Signing time: Wed 23 Sep 2020 04:47:41 +0000
ROA not before: Wed 23 Sep 2020 04:47:34 +0000
ROA not after: Fri 02 Sep 2022 04:47:34 +0000
asID: 174
IP address blocks: 154.16.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957 (0x3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 23 04:47:34 2020 GMT
Not After : Sep 2 04:47:34 2022 GMT
Subject: CN=5f6ad36c-43ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:fc:46:85:4c:c4:36:3a:19:1b:57:ff:b6:
d4:b9:86:fe:d4:50:48:33:6b:60:a1:8e:df:ab:89:
2e:fe:54:df:37:4e:22:69:1f:d9:76:3e:06:18:50:
a3:1c:3a:3b:74:d0:2f:00:f4:69:6c:71:33:41:0e:
38:b8:58:75:ab:6a:41:a3:ca:8f:04:fc:ba:11:d5:
39:12:bd:8a:55:d7:2c:2f:1c:0c:92:80:6e:59:ae:
2c:71:db:ea:a9:3d:96:aa:af:85:45:a5:e0:ce:29:
81:cc:4f:09:3a:3c:46:37:7b:bf:49:02:3c:e9:43:
e8:09:70:d7:19:f3:4d:fe:a6:50:39:4d:e9:97:a7:
ba:80:d2:f4:1e:bb:9e:c3:15:db:58:42:f2:03:65:
51:71:c3:8f:cb:5d:b1:d3:68:64:e8:97:8f:7a:1a:
e5:fd:7c:a2:86:bf:e7:8b:36:cc:4f:fa:c3:23:dc:
be:c2:84:ac:02:c7:c3:fc:e5:3b:8a:44:78:83:dd:
b6:77:07:65:e9:40:fc:5d:09:bf:b5:35:17:94:52:
da:1b:db:9f:a0:45:38:0e:b2:58:a0:21:1a:12:8b:
d2:94:a9:a8:ea:80:ca:da:f8:0c:73:90:02:9c:de:
a7:44:9d:cf:9d:74:d6:c5:75:52:15:6f:a7:a2:45:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:91:62:D3:C4:84:72:49:00:79:DB:83:DE:81:3F:1E:4F:E2:FC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E9247F54FD5711EA9B0FD43AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.184.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ce:8d:26:66:11:e1:eb:20:71:83:24:41:c8:a7:fb:6c:4c:
86:46:d4:c5:d1:bb:61:f6:d5:9f:50:35:96:f0:f7:08:af:aa:
0d:4a:94:d4:05:b0:5d:3e:73:33:37:f1:d8:5e:e2:7e:71:4b:
f5:e1:c3:c8:c4:8c:56:72:04:b6:84:4f:34:00:47:9a:95:f8:
ef:18:5e:2a:de:f4:75:4d:d4:a3:70:52:0d:f3:08:7f:97:19:
31:88:ea:c9:43:d4:33:7b:2b:af:a0:4e:2d:87:86:1e:26:82:
50:20:6f:17:83:04:af:ea:c5:1a:c9:57:a9:85:02:7f:6c:7d:
78:95:5d:48:ef:0d:a5:47:51:e6:91:a1:c0:67:e3:5c:a7:39:
f0:56:8a:31:61:e9:30:f7:e2:f2:4e:83:0f:62:d1:e6:66:60:
1e:c2:30:22:38:75:7b:c2:53:69:16:2e:88:e4:99:17:1e:f1:
e0:3b:db:ed:8b:85:8c:56:bc:57:98:18:10:5b:8d:0b:36:14:
c1:db:fc:53:77:c5:ab:29:f7:0a:67:7b:32:af:8c:09:f0:56:
37:2a:3e:44:a0:04:1e:b6:87:a7:80:aa:37:d2:f8:93:72:59:
c6:15:f7:f6:bc:72:be:32:d7:ac:c1:c7:67:64:21:fb:42:08:
88:e7:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:48:27 2025 by rpki-client