Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4E7E2649EB311EC8C23347B5A40D577.roa
File: F4E7E2649EB311EC8C23347B5A40D577.roa (raw, json)
Hash identifier: TOjGFLK6QZK97yuNDmDjIUcSLpjSC0slFJqdWBnKPh4=
Subject key identifier: B9:1A:FC:18:EC:FA:29:07:74:EA:D6:86:5A:72:CE:26:EF:2C:62:0D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07ED
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4E7E2649EB311EC8C23347B5A40D577.roa
Signing time: Tue 08 Mar 2022 07:47:09 +0000
ROA not before: Tue 08 Mar 2022 07:47:05 +0000
ROA not after: Wed 08 Mar 2023 07:47:05 +0000
asID: 396356
IP address blocks: 154.16.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 8 07:47:05 2022 GMT
Not After : Mar 8 07:47:05 2023 GMT
Subject: CN=622709fd-e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:e2:fe:05:4b:28:e1:c6:75:0d:dc:9e:01:
24:b5:0f:b2:9c:39:8d:c0:a5:07:5b:4c:e5:9f:0d:
5c:d2:d0:75:96:9b:91:4d:8a:64:f1:03:1c:42:e3:
ff:92:3e:dd:42:0b:22:c5:d7:87:a1:ae:ac:58:6a:
da:b8:c0:a1:ae:a7:8a:7f:a7:50:7a:d5:0b:9c:84:
05:9b:8c:1d:1f:33:86:a3:fb:bb:0c:f5:74:3c:51:
26:28:c6:d6:b9:db:80:51:24:22:16:3f:1e:0f:39:
82:91:6b:a1:6f:b3:35:92:70:84:1e:e2:64:67:d6:
f3:d9:ea:72:a6:84:6e:b8:94:7c:d0:24:e6:13:ba:
71:32:9b:26:3c:66:f7:22:4d:29:a2:3e:46:fe:bc:
32:d7:42:53:50:33:58:55:35:54:67:90:7c:f0:7a:
01:b0:d9:e6:4f:43:0f:d8:85:31:ee:39:09:b0:e4:
57:8b:5f:1a:b6:4a:92:3c:41:9f:5c:1b:d1:30:d6:
59:3c:b4:76:1e:0d:5f:48:41:36:67:b5:4e:7a:ad:
ee:ca:2d:51:3c:91:74:5f:6a:46:e3:35:9a:82:2a:
e1:53:3a:c8:90:55:ba:7f:c0:8c:7a:7a:4f:b5:93:
1f:2a:c1:08:a7:72:b4:d8:e3:5d:e5:86:66:0e:a4:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:FC:18:EC:FA:29:07:74:EA:D6:86:5A:72:CE:26:EF:2C:62:0D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4E7E2649EB311EC8C23347B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:f9:18:de:8c:c4:83:09:93:27:7a:0d:0d:63:84:f0:fb:
59:83:86:52:f7:36:44:69:79:f3:6c:cc:a0:aa:9b:57:da:23:
f5:5a:f0:08:51:7d:77:69:74:0c:bd:ac:3c:1e:f3:5b:7d:18:
ca:e4:95:68:19:d8:07:8b:f9:35:f1:e3:04:54:1a:54:65:e5:
bd:94:99:b3:a8:ce:e1:e0:cf:d7:c6:cf:d3:ab:ee:6f:8f:7e:
95:13:07:9d:79:de:5c:be:2e:5c:37:58:92:61:88:56:2b:14:
b0:ff:85:1f:a1:f4:27:14:44:a0:46:4f:0f:62:f0:cb:97:a3:
a2:ec:00:c1:0a:94:14:a7:04:0b:e5:f1:56:84:af:c0:78:9f:
cd:e5:87:32:a8:ae:7e:1f:6f:4d:73:a4:7f:1f:9b:d5:d5:89:
7a:02:09:69:7c:3d:a1:e8:d9:d2:6a:8a:42:4e:35:9c:64:4e:
f3:e3:4d:95:b3:7e:f5:ff:4f:02:dc:20:6b:ae:3d:37:69:00:
f9:ee:41:ff:8e:eb:a5:f8:88:f2:9b:94:00:e2:0c:9b:82:87:
09:0f:3f:75:93:53:7d:80:e2:37:c6:df:f2:f8:ac:7f:a8:ce:
9f:9a:88:82:3a:5d:2c:3c:4b:ae:58:38:d0:84:77:85:be:a1:
60:ff:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org