Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5B8FB7C8CA511EB9C2B4017F8AEA228.roa
File: F5B8FB7C8CA511EB9C2B4017F8AEA228.roa (raw, json)
Hash identifier: 5gDAEwzUX2EI9t3JaE5dGZC7FTR/GtrT+CUtcp2vCIE=
Subject key identifier: 1A:DE:BB:45:C2:42:52:19:3D:F8:2D:6B:31:DD:09:EA:DF:FE:9C:35
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0512
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5B8FB7C8CA511EB9C2B4017F8AEA228.roa
Signing time: Wed 24 Mar 2021 13:36:39 +0000
ROA not before: Wed 24 Mar 2021 13:36:33 +0000
ROA not after: Thu 24 Mar 2022 13:36:33 +0000
asID: 33696
IP address blocks: 154.16.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298 (0x512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 24 13:36:33 2021 GMT
Not After : Mar 24 13:36:33 2022 GMT
Subject: CN=605b4066-c2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:11:ee:47:f3:c4:c8:49:39:cf:d9:d0:29:
7c:eb:4b:38:5b:9c:58:a8:16:67:a2:fc:d2:d3:18:
20:36:e3:af:47:f0:10:5b:d2:fc:0e:3e:11:6b:e1:
14:22:98:32:6b:01:90:83:ce:1d:f3:62:f6:0d:78:
ef:83:d4:eb:4d:fb:08:42:89:d0:57:e2:4c:3a:e5:
9b:f5:b3:8c:56:37:a9:23:84:9e:d2:de:6f:0d:f1:
6c:81:39:df:10:3e:a2:83:f4:de:26:4f:68:ef:4d:
11:83:e9:ba:ab:16:21:fe:d5:aa:13:3e:ec:0c:3e:
f6:30:a8:f4:72:1e:1a:d6:ab:57:46:29:cf:9c:2e:
55:e5:46:56:36:54:88:29:34:63:fd:ab:eb:76:1c:
c4:ca:4a:16:02:15:77:6c:3b:d1:2c:59:f4:1f:92:
79:bd:d2:a0:a7:c6:ac:b2:e0:a1:db:38:0a:a4:0e:
f5:c8:ae:dc:79:fb:33:12:15:c2:d0:7f:9a:d2:e0:
e1:04:7c:89:1b:cb:0f:a5:25:81:86:7a:a1:9f:5b:
8d:7a:3c:fa:9f:d0:ca:50:ac:6a:8a:8d:aa:d5:19:
04:d5:b0:c4:8e:86:71:7f:77:80:f0:be:67:12:7c:
6e:57:c5:40:91:f6:cd:9f:d4:d6:eb:9d:b9:44:51:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:BB:45:C2:42:52:19:3D:F8:2D:6B:31:DD:09:EA:DF:FE:9C:35
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5B8FB7C8CA511EB9C2B4017F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.167.0/24
Signature Algorithm: sha256WithRSAEncryption
18:31:44:9e:8f:05:6e:67:ae:7b:f4:f9:12:5f:90:7d:a2:5e:
a1:30:87:fd:3c:ef:8a:76:37:2c:04:c8:fa:cd:ef:5d:e0:71:
6e:dc:d4:63:4e:20:f2:c9:0c:af:db:f0:55:01:52:88:03:98:
80:26:6c:95:37:2f:e7:67:58:f1:22:87:8f:96:e7:ce:0f:5d:
62:fc:05:ca:00:2a:68:76:fc:24:bb:66:e9:94:81:82:7f:c2:
6f:77:d4:5c:5a:6d:44:8c:3a:3f:2e:d7:e1:f5:f1:7a:30:8c:
59:a1:54:db:b0:65:5a:50:8b:09:ba:16:40:da:58:63:b9:bb:
77:97:ae:72:b2:97:a8:87:36:fe:19:f4:a4:e6:25:00:18:23:
4a:d5:2d:cb:79:43:4b:ae:f6:f6:c8:0a:12:a8:ea:d3:19:8b:
f6:e9:38:41:74:cc:09:bf:d5:2a:cf:f9:12:7d:64:03:19:b0:
05:85:47:e0:54:83:7b:8b:66:98:fe:92:24:5f:98:0b:3f:34:
bb:fd:8f:43:46:e4:b7:46:57:05:91:4d:f4:e2:59:c3:0f:27:
5c:ca:0d:6d:1e:2c:41:58:e6:81:d0:26:90:55:ca:d5:f4:2a:
52:fb:f7:8e:a5:4c:ab:cf:18:b5:04:db:08:5c:da:23:82:35:
5f:c6:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org