Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/64A5638A0F4A11EEA1CC3D634AD9E6FC.roa
File: 64A5638A0F4A11EEA1CC3D634AD9E6FC.roa (raw, json)
Hash identifier: 2VWbbRG+91fn7DOh8ZVDR/oJ2WxyTPLwjrgT3PEC7j4=
Subject key identifier: 1B:11:8D:E8:C3:F1:33:5C:0F:16:2B:23:3D:3A:87:44:25:93:CB:E6
Certificate issuer: /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial: 03
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Authority info access: rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/64A5638A0F4A11EEA1CC3D634AD9E6FC.roa
Signing time: Tue 20 Jun 2023 09:11:09 +0000
ROA not before: Tue 20 Jun 2023 09:11:04 +0000
ROA not after: Thu 20 Jun 2024 09:11:04 +0000
asID: 9129
IP address blocks: 195.202.64.0/19 maxlen: 24
217.199.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Validity
Not Before: Jun 20 09:11:04 2023 GMT
Not After : Jun 20 09:11:04 2024 GMT
Subject: CN=64916d2c-9415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:c2:56:90:12:99:10:8c:67:9d:70:57:cf:
bb:98:de:79:e2:c9:83:c3:85:c8:99:75:d9:47:93:
ea:bc:43:0f:ed:e5:c2:8c:f8:11:ef:ae:88:51:58:
b2:93:a0:f7:af:0f:eb:1e:8b:e4:51:17:60:38:7b:
9a:c0:84:bf:04:42:01:dd:89:b5:db:11:fe:7f:9a:
0b:ca:cd:53:81:97:dc:4e:9c:f4:57:61:14:20:6e:
5a:cc:40:63:f9:bb:1e:99:a8:96:8e:f9:17:cf:db:
e1:0e:15:2f:76:41:4d:d6:cb:34:0a:e7:71:7b:40:
7b:10:77:f5:45:8e:df:8f:a5:dd:b1:13:54:86:b7:
10:00:fb:1e:da:9f:fc:be:de:a9:ae:82:93:2e:bd:
bd:72:59:e9:66:06:3a:e4:b0:04:95:e1:5d:4a:f5:
03:b5:0e:3c:64:70:a1:b7:38:6a:17:b0:4d:a1:5d:
15:ac:2a:33:b2:00:41:3f:e6:10:74:df:40:08:f8:
a2:a6:da:da:fb:a6:33:91:d4:6d:df:c0:1e:74:79:
43:78:8c:46:11:ef:7c:f0:7b:9f:5f:88:1d:0e:fe:
ba:00:24:9e:a9:e5:d6:0e:1f:46:9f:71:39:35:8a:
00:24:bc:15:42:c2:61:d4:94:6a:cb:49:b0:66:fd:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:8D:E8:C3:F1:33:5C:0F:16:2B:23:3D:3A:87:44:25:93:CB:E6
X509v3 Authority Key Identifier:
keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/64A5638A0F4A11EEA1CC3D634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.202.64.0/19
217.199.144.0/20
Signature Algorithm: sha256WithRSAEncryption
16:37:1a:56:78:f1:db:6d:14:95:ce:66:4a:3e:03:eb:cb:a3:
90:3d:37:0f:36:5b:36:3c:63:77:dd:77:63:2b:07:3f:f0:8f:
d2:e4:fb:56:15:4c:23:ce:4b:91:e7:6f:4f:11:79:c2:e3:4b:
43:e2:b2:45:70:26:f7:1b:97:27:46:a8:c8:d6:c2:02:34:ce:
ae:a3:19:6a:cc:14:05:96:e2:1b:c5:35:02:66:6d:7d:21:23:
eb:c4:7a:17:e8:05:50:00:7a:be:e6:e3:16:a4:65:f7:88:53:
d3:96:09:21:65:42:aa:26:80:9f:55:68:f6:eb:89:36:1b:5a:
38:8c:63:ba:5e:75:5a:60:2d:90:5b:62:f5:01:f7:fa:b1:16:
72:7d:84:0f:94:53:fd:6b:96:59:e0:9a:8b:e5:72:4a:dd:e2:
c2:02:18:93:97:99:99:1c:c7:09:5d:06:19:cf:2f:f0:52:b8:
f0:33:8d:8c:9c:e5:64:3c:49:b6:43:b7:b5:f2:e2:0d:b5:e4:
90:94:6e:16:6a:e9:8c:cc:32:0f:af:35:9d:25:45:3d:f1:65:
77:77:25:94:44:6e:9d:61:ee:2d:79:de:ad:78:b3:4a:62:97:
23:41:d5:83:26:97:30:54:06:44:92:e5:0f:c3:17:67:57:3e:
dc:5d:5e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:05:22 2024 by rpki-client on console-ams.rpki-client.org