Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/40E2FEBE587211EEB87576414AD9E6FC.roa
File: 40E2FEBE587211EEB87576414AD9E6FC.roa (raw, json)
Hash identifier: n8PJ8uRXQCbTJteaWM2E6WvLqJPccaAHe9OIMQBvlVY=
Subject key identifier: 3F:9C:5A:F9:6F:37:99:EB:90:79:AB:B4:65:D4:90:29:8F:FF:16:F2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1260
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/40E2FEBE587211EEB87576414AD9E6FC.roa
Signing time: Thu 21 Sep 2023 11:30:23 +0000
ROA not before: Thu 21 Sep 2023 11:30:19 +0000
ROA not after: Tue 24 Sep 2024 11:30:19 +0000
asID: 213074
IP address blocks: 154.16.100.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4704 (0x1260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 11:30:19 2023 GMT
Not After : Sep 24 11:30:19 2024 GMT
Subject: CN=650c294f-4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:c1:4c:31:e6:82:f7:de:13:1f:8e:bf:8e:
b8:ab:f8:63:1f:32:f2:23:db:97:8d:07:88:3c:97:
e2:b6:70:83:d1:5a:fc:71:cf:47:3c:61:74:29:51:
bc:13:98:11:a8:5a:3a:b4:29:98:38:5e:c9:28:7f:
e4:3e:96:35:e4:05:76:ba:8c:f7:81:ff:4d:f2:33:
87:b2:1f:a1:d9:f7:bc:b5:bf:c2:66:e3:ec:1d:25:
bb:12:81:26:08:7a:3e:25:4e:68:5d:dd:e8:cd:e4:
ac:72:c0:99:9d:82:4f:62:9a:63:82:32:37:49:0f:
7b:09:66:90:31:c6:fc:05:f6:fe:f9:63:21:9d:83:
e1:26:31:cf:7f:f5:43:0c:d4:63:31:05:8a:3f:ec:
21:2a:db:e4:7a:ec:fc:71:9b:b1:d1:b3:7d:0b:07:
8a:f5:e1:d9:65:e3:c8:14:05:5a:c6:57:67:a9:23:
97:38:33:bb:99:a2:bd:b1:81:e7:16:01:50:c4:e5:
32:dd:64:27:83:1a:6c:b1:71:28:2d:53:73:ea:96:
ef:83:f5:d7:44:91:20:e2:b7:85:4d:77:25:7f:59:
32:c0:f9:0e:a4:3c:44:41:a2:d8:51:24:cd:7a:41:
f4:7d:fb:01:dd:61:57:06:b8:ba:57:8a:7d:88:4e:
ce:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9C:5A:F9:6F:37:99:EB:90:79:AB:B4:65:D4:90:29:8F:FF:16:F2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/40E2FEBE587211EEB87576414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
29:8f:d5:28:3d:ca:e1:db:95:47:20:76:1e:35:1f:16:4a:b3:
d5:fd:ba:42:07:9e:5d:d6:55:00:21:33:37:37:2b:32:28:41:
77:0a:6d:a4:1b:ab:2a:35:bd:75:84:b4:98:4b:c1:69:74:19:
6f:9d:1b:41:ed:21:e6:28:16:8a:96:59:69:fc:74:26:70:5c:
18:77:5a:81:67:f3:0f:e7:bf:e8:63:96:36:71:1a:12:87:15:
a7:c2:1b:6c:6a:86:f2:f7:42:54:11:4b:81:3f:44:a3:cf:86:
98:c3:35:24:1d:23:fe:cf:d9:d2:49:71:59:93:c8:67:1f:b2:
22:b7:1a:e5:5a:3e:f1:90:f3:68:e4:4f:b9:c9:85:33:a4:5c:
2c:35:ed:6c:59:ce:ad:37:9f:70:16:ce:6d:87:ce:f5:2e:07:
12:ff:4a:16:f6:44:61:d4:f6:fa:c0:3c:b4:25:66:d8:6a:42:
74:a5:64:d2:46:8c:99:ae:bf:8a:b7:a6:f7:36:9a:55:f4:1a:
c5:b3:9d:d6:c1:20:b5:27:a0:f9:88:c5:c7:a9:e7:b3:f1:c6:
05:99:8b:c2:f2:5c:41:e7:41:4a:eb:65:28:61:35:e7:84:c5:
59:4d:d0:7a:cd:19:b1:a0:5c:7a:e4:f1:7b:9c:38:e1:53:1d:
9e:b5:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:43:16 2025 by rpki-client