Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B4246DC42C6211ECA402EC5CD8A014CE.roa
File: B4246DC42C6211ECA402EC5CD8A014CE.roa (raw, json)
Hash identifier: 9tyDycsxjrBx5B/Ad9fdDxWaCpOq0SbOiQSCVzpzLpI=
Subject key identifier: 98:1A:5B:D4:B5:B2:19:9C:DA:0C:22:35:26:6B:03:5F:53:69:C7:85
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 016C
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B4246DC42C6211ECA402EC5CD8A014CE.roa
Signing time: Wed 13 Oct 2021 20:18:19 +0000
ROA not before: Wed 13 Oct 2021 20:18:14 +0000
ROA not after: Thu 13 Oct 2022 20:18:14 +0000
asID: 21003
IP address blocks: 62.68.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Oct 13 20:18:14 2021 GMT
Not After : Oct 13 20:18:14 2022 GMT
Subject: CN=61673f0a-dab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:cb:11:f9:4e:5b:c7:84:13:0f:18:85:66:
89:3f:1d:70:d9:14:4e:a6:29:18:1e:f3:36:fb:05:
47:49:0e:06:9d:d6:d2:7f:a9:1e:55:43:55:0c:e2:
67:20:44:da:c6:a8:22:af:68:5c:53:3a:74:aa:1f:
43:19:72:c5:a2:f6:36:9b:8a:6f:60:78:b3:57:49:
93:08:e8:32:a9:87:b1:76:fc:f5:cc:dd:4b:cb:6d:
f6:08:23:37:aa:00:5c:28:2d:ab:89:44:47:dc:cc:
b6:62:f8:ea:f5:ea:6e:84:a9:3a:3b:90:30:56:fc:
92:c2:b1:0d:01:79:f3:9b:34:6a:af:44:d2:51:58:
58:21:a4:30:83:58:4d:b0:1a:2c:e2:51:a8:d5:21:
21:32:ef:8c:d9:4d:7c:72:75:dc:6e:b7:fd:e6:48:
63:3c:88:ce:76:fc:71:54:65:01:a8:f4:1d:a4:a7:
0f:41:dc:79:14:39:3b:98:a4:b8:5a:87:87:59:17:
fc:0e:5a:7b:9a:66:67:10:59:63:32:55:06:ac:64:
71:40:fd:75:1b:46:c4:c7:f3:21:8f:99:96:c1:a5:
f3:a7:79:7c:f2:6f:c7:85:41:5d:d3:f1:4e:c7:3d:
bd:06:17:27:e3:52:f4:27:75:62:07:a0:e9:39:6d:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:5B:D4:B5:B2:19:9C:DA:0C:22:35:26:6B:03:5F:53:69:C7:85
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/B4246DC42C6211ECA402EC5CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.68.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bf:30:70:a9:d8:5d:ee:c2:fc:e6:b2:c3:0f:41:d0:0e:f8:
d5:ba:ed:72:55:06:5a:98:2f:eb:48:32:87:9d:3a:9c:80:d4:
6a:d8:84:c8:d2:0f:f7:7e:43:fe:69:bf:ea:eb:c5:f6:d5:a0:
c0:22:74:97:4a:88:23:44:cf:80:72:07:6c:cd:88:bb:6e:e3:
2a:c3:98:b7:e2:50:07:f3:c3:da:66:f6:ae:6e:e6:70:c9:87:
50:74:ce:00:24:e0:ed:96:55:90:8a:2f:d7:ef:cd:9c:b1:44:
6e:e8:39:74:d9:5b:f4:a8:8c:ea:4b:72:aa:df:cb:87:c2:91:
58:17:7a:81:bf:e3:dc:da:c9:99:04:08:2d:12:96:f8:6d:01:
ed:08:e1:2e:b9:e3:40:b0:c5:29:32:85:ef:da:48:5d:1e:d6:
ba:59:ac:0e:b3:cb:40:c1:a4:37:71:05:b8:7c:7a:e3:77:26:
9f:cd:fa:a1:30:ff:7a:ce:45:f6:b5:7f:4f:e0:05:21:eb:bd:
62:3b:19:1f:30:52:05:a9:d9:d6:63:01:3b:6d:98:17:7d:e1:
fa:89:2e:57:53:86:fd:17:94:b8:97:17:2a:f7:92:d1:1f:9b:
c7:9a:a8:14:f1:f4:46:8b:ae:1f:81:7e:43:17:a4:c4:c5:84:
59:06:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org