Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8A8AF389B6211EEB1BB2340D25BE465.roa
File: B8A8AF389B6211EEB1BB2340D25BE465.roa (raw, json)
Hash identifier: isz4xisx0gYDxep0FzgXWdB+8TOAlk4EAGoVMgDDJ0c=
Subject key identifier: 1E:0A:CC:6A:71:CF:36:55:2F:05:D7:DE:55:D4:10:0C:B0:82:A2:E9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13E1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8A8AF389B6211EEB1BB2340D25BE465.roa
Signing time: Fri 15 Dec 2023 15:58:00 +0000
ROA not before: Fri 15 Dec 2023 15:57:57 +0000
ROA not after: Tue 31 Dec 2024 15:57:57 +0000
asID: 49981
IP address blocks: 154.16.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5089 (0x13e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 15 15:57:57 2023 GMT
Not After : Dec 31 15:57:57 2024 GMT
Subject: CN=657c7788-7cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:89:9c:27:af:28:98:3f:a0:94:c4:1e:13:
a1:b2:48:96:64:03:ba:32:18:b7:3d:44:70:51:1f:
78:00:5a:48:ee:2a:0c:af:31:1e:5c:13:b3:86:c2:
5f:db:3e:d6:63:e8:f4:78:b8:8e:9b:7d:d7:b5:f5:
70:4a:dd:65:08:79:4a:e2:f4:41:2f:4b:b3:87:ca:
ad:68:e5:ea:b7:dd:bc:a3:d6:69:eb:a7:c6:fc:63:
44:96:ca:53:67:db:eb:62:dd:91:bd:ad:bf:ae:cc:
67:26:e0:7f:99:a2:44:75:8b:40:23:0d:a0:8e:d4:
46:b5:79:f4:23:4c:91:89:27:a9:f7:a9:2c:c9:26:
b8:4b:7e:3f:24:11:b1:7d:08:36:1f:e6:f1:ed:51:
c1:ac:bf:d9:19:e0:49:66:21:a7:62:37:fd:9e:6d:
0c:3e:51:9c:33:02:64:38:91:e7:02:06:a1:70:53:
cc:b9:df:e2:e3:3a:95:69:2e:bc:15:29:b9:6b:3a:
8f:b3:5a:97:08:48:c9:1f:a1:8c:06:3d:fd:13:17:
7c:7f:21:8b:ca:ae:59:3a:b7:ae:77:58:17:7e:44:
8d:4a:85:ef:7b:44:14:d1:6b:0e:38:9f:83:f7:17:
2e:d6:16:3a:25:be:f0:88:ee:a6:4c:e2:cf:df:9b:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:CC:6A:71:CF:36:55:2F:05:D7:DE:55:D4:10:0C:B0:82:A2:E9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B8A8AF389B6211EEB1BB2340D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.32.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a8:7f:d3:fe:73:c8:57:00:c3:7b:d2:52:ff:da:e6:40:9d:
96:be:90:56:62:5e:3b:06:65:44:1b:8a:f0:b9:db:5a:19:e0:
a2:30:51:ef:e2:bb:87:d6:14:ce:c0:fb:aa:d6:15:c9:4d:1e:
1b:c3:16:17:42:06:8e:56:26:34:50:fb:d7:ef:c8:a1:fd:36:
86:b6:ca:88:91:81:ee:00:3b:28:0e:e4:dc:de:71:80:b3:d0:
25:a4:b6:7b:5e:4a:59:34:79:d2:ac:00:38:ae:28:7e:01:fd:
6d:31:6b:ba:8d:7a:97:e2:4e:2c:d3:53:38:35:61:04:06:07:
4a:e7:09:b3:1c:5e:de:96:37:28:89:a1:37:8e:44:fb:3d:a5:
bb:91:30:85:d3:30:f2:9c:30:41:fa:2d:48:98:34:38:1d:29:
6d:da:bf:c0:84:35:a7:fe:8e:29:00:e2:00:24:e9:40:94:69:
33:6e:a4:d2:db:07:25:77:6b:c4:12:46:86:78:93:ab:45:65:
d1:57:7a:6f:5a:be:61:b5:d1:21:c1:84:e7:5a:1f:ed:8a:7b:
6f:5c:01:29:a6:ab:63:ce:e3:da:d9:ad:7b:31:77:56:93:f3:
d9:2b:15:ed:bc:b1:66:29:0d:43:ed:8a:44:2a:6a:10:fe:f4:
60:ca:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:39:11 2025 by rpki-client