Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBAE01D68C8C11EB812FC77BF8AEA228.roa
File: EBAE01D68C8C11EB812FC77BF8AEA228.roa (raw, json)
Hash identifier: IWkuLvRssJ5MbO7cvkvOh1OsqNlPCrlMUmJuyh4Mm7Q=
Subject key identifier: 59:87:D6:3A:64:A0:08:5C:B5:97:34:0A:08:E0:61:39:DA:69:01:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04F8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBAE01D68C8C11EB812FC77BF8AEA228.roa
Signing time: Wed 24 Mar 2021 10:37:24 +0000
ROA not before: Wed 24 Mar 2021 10:37:20 +0000
ROA not after: Thu 24 Mar 2022 10:37:20 +0000
asID: 7922
IP address blocks: 154.16.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 10:37:20 2021 GMT
Not After : Mar 24 10:37:20 2022 GMT
Subject: CN=605b1664-bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:5d:06:3c:90:f8:3b:4a:58:48:be:8e:d5:
3f:cf:db:48:d1:1b:c5:4a:a6:6f:fe:42:4a:92:33:
a2:d0:5f:72:39:20:17:ca:ff:2c:5d:74:b6:33:e0:
5b:84:96:ce:8d:91:8f:a2:50:fc:60:42:04:0a:0e:
53:33:8a:da:4b:02:01:9a:48:ed:e6:14:a9:cf:8e:
e9:43:5b:8b:e0:6b:5d:5c:e5:bb:05:3d:35:4d:37:
e6:01:d6:8a:44:3c:b4:e6:14:12:de:7b:82:a0:20:
e3:ae:df:9d:c0:bf:89:00:f5:90:93:46:ab:2f:39:
f3:c6:12:ac:f0:a1:71:b9:e0:5f:7c:9a:39:3e:f8:
ea:27:47:61:78:a5:4a:5c:b9:9d:cb:99:f3:4f:09:
9e:a1:18:85:0e:68:0b:1a:a5:03:6c:99:b1:11:c2:
c6:17:c3:bf:2a:5a:30:00:2a:0f:8d:50:67:de:d5:
60:7b:ad:9e:d7:bf:d0:9c:bc:b6:5b:fa:22:58:ec:
64:be:9f:68:2e:5a:c3:97:aa:1a:ab:0b:6a:f1:cc:
bf:e1:13:f8:6d:94:41:05:ef:ee:cc:af:9b:c6:33:
bb:d6:9e:79:22:df:36:e9:24:4f:50:19:4f:1a:65:
28:a4:82:ed:2c:00:a0:84:6a:d9:3f:48:6f:ba:84:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:D6:3A:64:A0:08:5C:B5:97:34:0A:08:E0:61:39:DA:69:01:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EBAE01D68C8C11EB812FC77BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.77.0/24
Signature Algorithm: sha256WithRSAEncryption
88:63:8a:62:2e:a6:a1:15:ed:e1:02:de:64:00:85:87:ae:64:
62:f1:06:fb:98:96:aa:b1:ab:80:45:03:b9:0e:cc:ec:cc:f9:
4e:88:87:c3:cd:6b:ee:ce:94:dc:5d:d0:b4:24:47:6f:38:7b:
3a:a9:e6:e4:25:16:f7:cf:08:25:77:0a:f2:fe:94:ec:bf:ec:
60:d3:59:d7:60:3e:74:a7:b2:4f:8e:73:d4:d3:a8:3c:c9:56:
1a:c5:64:4b:c0:5c:d2:58:95:48:55:12:ff:e6:fd:10:bb:a7:
df:01:9a:49:23:2b:91:6a:53:a6:f2:e6:80:64:75:1f:bd:5e:
ed:e4:4f:6a:ba:25:b1:51:16:9d:48:37:a8:9a:8c:f8:1b:f7:
12:0e:f7:00:11:7c:e2:50:92:f0:52:f8:df:b6:4d:50:bf:e0:
f0:bd:37:31:a6:1e:de:59:04:4c:2e:f7:41:62:f9:8b:0c:44:
47:76:8b:7a:28:87:17:ee:b0:c8:6f:d3:bf:ab:e8:3f:54:b6:
47:d5:5d:db:a7:9a:f2:c4:73:34:e2:d1:7e:ab:d6:74:24:4b:
c7:2b:67:a5:ec:bb:98:08:69:c9:3c:4c:d7:77:32:a8:ab:20:
17:7b:df:44:a2:77:e7:0e:f7:9b:47:eb:3b:c4:a5:40:17:94:
09:8c:b8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org