Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FA4E9D8C59D611EC9FCDE7B25A40D577.roa
File: FA4E9D8C59D611EC9FCDE7B25A40D577.roa (raw, json)
Hash identifier: z3jJ5kSZi7izZvBcbElZHjCwEbLFcQvQNolmouIjc1o=
Subject key identifier: A2:FE:B4:4F:15:BA:CC:D7:7C:5C:74:75:23:92:E5:66:5F:B9:AC:BD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 072C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FA4E9D8C59D611EC9FCDE7B25A40D577.roa
Signing time: Fri 10 Dec 2021 16:34:00 +0000
ROA not before: Fri 10 Dec 2021 16:33:55 +0000
ROA not after: Sat 10 Dec 2022 16:33:55 +0000
asID: 139660
IP address blocks: 154.16.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836 (0x72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 10 16:33:55 2021 GMT
Not After : Dec 10 16:33:55 2022 GMT
Subject: CN=61b38178-b3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:c2:37:5d:b3:e8:a1:53:e4:90:14:86:bb:
e5:eb:e4:b6:69:e4:a2:ca:7c:69:3d:82:92:df:93:
08:14:d7:87:b9:86:bb:88:d9:36:c9:24:be:d7:a1:
e0:a3:27:62:f8:b7:2b:33:e5:54:d3:00:8f:71:df:
fb:33:ba:72:7f:8a:73:2c:16:df:61:6a:5e:40:3b:
ac:1f:60:d5:9b:0e:83:80:b6:22:83:f0:0d:94:f9:
23:16:86:ed:14:3b:de:05:97:2c:df:e6:00:ab:89:
83:0d:09:bb:30:87:8a:64:18:20:9d:19:14:38:88:
5f:22:f7:6d:85:63:fe:a2:61:b3:3d:d9:44:d1:a4:
9c:50:63:a6:53:b8:f4:6d:95:c5:4d:fc:b8:d4:9d:
8c:96:15:a3:20:4d:14:1c:73:20:3b:dc:3d:a7:3b:
37:13:98:6f:20:2a:3d:71:a5:04:e3:11:01:dc:7c:
0c:12:bd:74:88:7e:20:16:c9:90:e8:0f:76:a2:90:
24:e0:c2:17:a2:e9:a8:ee:1d:a8:da:4c:9e:ca:11:
01:45:f8:35:77:39:78:f7:32:63:9b:9c:17:3e:ac:
bb:fd:9b:1f:85:bf:50:44:de:fe:d4:d1:e3:8e:fc:
89:40:6b:b7:b9:4c:02:30:bf:06:79:a0:69:ff:1a:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:B4:4F:15:BA:CC:D7:7C:5C:74:75:23:92:E5:66:5F:B9:AC:BD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FA4E9D8C59D611EC9FCDE7B25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:25:e4:0b:a0:d7:1e:b5:bb:50:24:a9:8a:31:f8:08:ca:8a:
5f:84:cf:ca:97:1a:de:ec:6c:70:e3:26:ca:94:c1:4e:32:66:
93:46:f3:20:cc:41:d5:28:aa:e2:3d:5a:7c:6c:b9:8c:25:f6:
a0:35:ec:0b:7d:3d:c1:2c:a9:59:59:81:85:5b:41:ef:43:bc:
7c:ef:5e:33:a9:1d:74:19:8d:77:5e:b7:8f:33:2d:79:ad:81:
f4:b4:ae:6a:52:46:3e:da:94:91:3b:55:68:16:2e:43:6e:4d:
f2:ef:49:c6:dd:fa:bb:1f:df:a5:b7:04:aa:30:d6:a4:45:3f:
e6:cf:03:0c:a6:f1:66:2b:0a:7f:fe:fc:d5:91:26:c7:df:56:
bf:d3:2f:8f:18:28:88:dd:ec:d6:f5:30:45:17:81:e3:90:fd:
c9:53:96:a0:0d:9a:95:8a:6a:99:0e:07:77:7a:59:72:77:13:
1a:c5:23:c1:25:d5:a7:31:eb:9f:c7:97:59:00:cf:f6:15:f0:
60:c5:bd:c6:0c:d3:49:fb:6a:01:cf:5c:97:9f:b0:73:87:50:
1d:c6:47:5c:11:e7:23:60:87:55:9b:c4:23:d4:b3:23:ad:1a:
23:a7:b0:10:25:7e:7f:6e:c7:47:47:dc:6f:2d:8b:b8:5a:06:
d6:d9:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org