Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FFD16DEC0FEF11ECAADD2D30D8A014CE.roa
File: FFD16DEC0FEF11ECAADD2D30D8A014CE.roa (raw, json)
Hash identifier: qt/3C9T0mIHL38x2hO6CXMOIVZXkXhiE5LOsRdvTYqs=
Subject key identifier: 5D:DD:B1:FB:6F:55:37:F2:02:11:13:D2:25:66:FC:38:0D:14:65:64
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0664
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FFD16DEC0FEF11ECAADD2D30D8A014CE.roa
Signing time: Tue 07 Sep 2021 15:26:41 +0000
ROA not before: Tue 07 Sep 2021 15:26:36 +0000
ROA not after: Wed 07 Sep 2022 15:26:36 +0000
asID: 44592
IP address blocks: 154.16.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 7 15:26:36 2021 GMT
Not After : Sep 7 15:26:36 2022 GMT
Subject: CN=613784b0-bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:66:ec:a1:be:5e:fe:96:d1:d5:0c:ce:f0:
6e:73:08:52:fd:7f:8b:52:45:dd:f1:06:c8:0a:13:
f2:5b:19:14:77:21:da:c6:b3:9f:43:78:e8:35:1f:
04:fb:6a:98:80:60:3d:16:f8:80:e7:3e:dd:b3:78:
d1:a0:bf:9b:81:85:8f:e6:c7:17:70:6f:1c:1c:27:
a0:05:46:05:67:bd:d3:f4:d9:69:45:91:9f:7d:f8:
f7:45:f5:e1:9e:df:f3:33:e1:e7:7d:44:06:88:bf:
88:21:72:a7:7c:c5:cb:3e:ae:fa:8a:7d:04:a1:5e:
19:df:8f:1c:75:73:9b:2e:fe:94:d9:ff:3a:38:5d:
b2:ab:ae:2e:5b:c9:0c:07:8f:78:3b:81:12:ec:73:
f4:92:82:fc:69:47:4e:5a:9f:7e:1f:2a:19:3a:03:
d0:fc:9e:05:e7:59:e5:2f:47:18:33:89:76:dc:82:
16:cb:a6:70:fc:da:57:a8:79:e8:ae:82:a3:20:df:
df:e6:bb:6f:7d:33:43:72:5b:df:06:8a:ce:a5:56:
b0:8e:fd:5b:f7:64:69:eb:60:b1:7d:ec:a1:11:90:
fa:a8:5c:2b:52:69:17:2e:eb:bd:ee:ba:d1:b3:85:
53:ea:c3:bb:b0:f9:ee:50:a2:9b:83:34:06:b4:c6:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:B1:FB:6F:55:37:F2:02:11:13:D2:25:66:FC:38:0D:14:65:64
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FFD16DEC0FEF11ECAADD2D30D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.95.0/24
Signature Algorithm: sha256WithRSAEncryption
47:67:94:2a:0c:57:17:37:43:f9:ef:26:7c:39:7f:b0:84:0b:
72:37:be:7e:34:70:6c:d7:7c:1e:d6:31:9d:11:a2:17:57:3e:
e1:75:a0:4f:b8:9e:d0:8e:3b:bc:0a:f5:ec:a1:a7:e4:cc:a6:
91:44:c2:04:8d:87:ff:4e:9d:5e:ff:e7:a4:2a:1e:15:98:02:
d6:de:e4:f3:50:3c:e9:1a:8d:9a:d1:e1:bd:4b:e3:fc:c4:dd:
aa:99:9e:be:3f:e4:73:df:00:74:25:ab:1a:3b:27:6f:bb:85:
aa:12:68:30:84:ad:b6:cd:11:e3:6d:4c:71:da:3d:83:9b:c7:
f2:99:b9:71:ab:68:6a:87:dc:ec:4d:d9:26:bf:05:8f:e5:ec:
00:2e:f1:ca:ca:bd:d5:0d:c2:0f:6a:09:b1:aa:30:0f:03:64:
6f:c8:5c:08:79:d8:7c:55:f2:8b:59:6a:ed:3c:dd:8f:94:f9:
d0:bf:e5:b8:56:2c:7b:2b:9e:8e:63:c7:89:36:32:7c:4e:1c:
fe:24:38:e3:1c:8b:6a:e6:6c:4e:c1:3e:0a:4a:ed:23:41:64:
ca:f0:ce:95:ce:50:f4:81:f3:b0:1f:ca:23:21:95:ff:89:d5:
8d:f1:fe:43:37:63:3a:b2:58:7c:91:7a:ee:25:88:8a:44:e7:
4b:a6:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-ams.rpki-client.org