Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F149031C153E11ECAB16DF0BD8A014CE.roa
File: F149031C153E11ECAB16DF0BD8A014CE.roa (raw, json)
Hash identifier: PEy85wUPBP+OuYCjtpHr1mCsCpyz6AOn+QsfapoP0s8=
Subject key identifier: AB:73:FB:B0:95:FE:DF:B7:A4:DC:91:0C:15:C1:CC:54:1A:79:FF:C7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0674
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F149031C153E11ECAB16DF0BD8A014CE.roa
Signing time: Tue 14 Sep 2021 09:34:22 +0000
ROA not before: Tue 14 Sep 2021 09:34:19 +0000
ROA not after: Wed 14 Sep 2022 09:34:19 +0000
asID: 139660
IP address blocks: 154.16.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 14 09:34:19 2021 GMT
Not After : Sep 14 09:34:19 2022 GMT
Subject: CN=61406c9e-21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:0b:ed:f6:2d:7c:ea:04:4c:13:21:bb:8e:
d8:61:c9:49:7e:b7:89:b9:cd:8b:2a:c4:09:51:ab:
9c:89:26:fb:6e:18:0d:25:1b:7b:2e:19:d2:08:1b:
20:ef:b7:ac:49:2c:fc:51:de:81:d0:bb:d3:ae:0b:
c9:17:02:5d:3e:ed:18:27:f3:c5:ae:87:44:fe:53:
fe:c6:55:85:12:6f:27:08:8c:4b:4f:3b:ff:b5:33:
d5:73:b1:ce:78:91:68:ad:00:9a:63:e1:ce:ce:74:
e0:e4:93:b8:24:23:0b:e1:d4:4c:22:e4:31:96:bc:
9e:fa:24:be:84:5c:0e:b9:a8:74:07:72:a3:16:d2:
37:c5:f0:48:44:7d:67:cd:84:a2:13:62:01:90:a9:
73:f5:d1:db:d6:bd:d6:f3:ec:71:01:b5:cf:63:b4:
5d:16:9f:22:e8:71:4b:c2:68:ff:54:d7:ae:a1:a5:
33:c3:24:39:a3:7a:77:6a:64:66:d8:8d:40:5e:7c:
dd:52:4a:62:6d:0b:78:14:98:f8:7a:3f:60:30:c0:
7f:24:dc:90:76:b6:71:c7:0a:4c:9c:81:04:0e:09:
c5:37:43:34:eb:26:0c:92:ad:7b:a5:a5:7c:93:da:
8a:69:ee:1f:cd:52:16:28:b8:44:59:bc:32:b2:02:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:FB:B0:95:FE:DF:B7:A4:DC:91:0C:15:C1:CC:54:1A:79:FF:C7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F149031C153E11ECAB16DF0BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.238.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f6:ad:70:15:c8:66:a5:09:cc:17:a0:87:2b:5c:f0:89:39:
19:68:6a:18:c3:f3:d0:22:43:aa:63:fb:f3:37:39:79:1c:b8:
3e:30:f1:be:22:8b:43:e1:9f:ad:14:ed:27:26:c1:9f:de:63:
41:1f:ba:f4:92:c0:89:78:27:6b:5f:ff:5a:31:3f:58:40:b1:
78:bb:d8:ca:8b:a3:32:99:43:01:73:b0:bd:72:8f:b3:6d:32:
f4:67:a4:f7:9c:3a:74:f4:71:19:d7:01:70:a0:46:d5:06:9f:
93:78:18:56:24:3d:30:00:ad:87:9f:65:bc:6e:dd:10:b8:4b:
21:cc:95:6d:79:39:62:5d:8a:eb:32:bd:f9:02:5f:ae:50:b0:
22:68:82:49:29:f0:03:23:5b:50:61:f6:6c:99:fc:e6:e0:dd:
d2:e1:94:ee:7c:22:ed:38:93:a8:fe:f6:1f:8c:cf:42:21:4a:
20:bd:39:1b:23:20:ef:fc:2e:ba:72:84:6b:8d:66:f4:d1:f7:
81:42:7f:b5:74:03:ec:d3:e7:fe:ad:73:87:28:d4:e9:0d:ed:
41:90:73:17:77:d7:31:ef:72:ec:00:97:50:59:ff:05:27:55:
07:6a:1f:f6:13:17:c4:67:d8:6f:ec:62:1f:52:93:c0:b4:af:
03:3d:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org