Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/D7A12988D36911EBB034D85CF8AEA228.roa
File: D7A12988D36911EBB034D85CF8AEA228.roa (raw, json)
Hash identifier: MvuamBWloHMS3fMlbOORoYKevibL13VeWCKJyr9Q6SM=
Subject key identifier: EE:37:A5:3D:B2:F5:CF:4D:28:38:24:49:E6:88:1D:3B:97:6F:EB:45
Certificate issuer: /CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Certificate serial: 02
Authority key identifier: ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/D7A12988D36911EBB034D85CF8AEA228.roa
Signing time: Tue 22 Jun 2021 14:55:11 +0000
ROA not before: Tue 22 Jun 2021 14:55:06 +0000
ROA not after: Thu 22 Jun 2023 14:55:06 +0000
asID: 36943
IP address blocks: 196.43.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Validity
Not Before: Jun 22 14:55:06 2021 GMT
Not After : Jun 22 14:55:06 2023 GMT
Subject: CN=60d1f9cf-e251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:15:31:f0:fd:ca:da:b2:e2:67:f4:37:97:
0a:af:79:f3:33:c4:11:5c:96:49:07:9c:37:87:f0:
c7:3b:1b:a3:b5:af:d7:8a:b5:df:ef:9a:00:b2:f4:
9e:41:5d:4d:58:36:79:d3:39:c3:04:d1:98:20:cf:
f8:18:5d:07:89:a2:ec:41:7a:96:b6:20:77:5e:dd:
f6:47:98:86:57:9a:b2:f2:ba:68:69:9f:b8:aa:8b:
a0:3c:9a:86:0f:40:14:46:c3:d9:cc:fc:75:77:2d:
50:88:3d:e1:ed:93:7e:eb:10:d7:60:ba:6e:53:62:
cb:4a:fc:a9:f5:2b:70:ff:b4:0f:0a:49:6a:56:5c:
de:2e:00:24:84:b3:ff:92:4c:c2:ea:b1:6d:a4:74:
a4:d5:2a:b0:78:76:64:2c:10:58:8f:64:04:39:d6:
71:fc:6d:4b:39:35:65:4e:7b:f3:37:24:96:f6:9e:
7f:de:29:ed:b4:3f:be:c8:e9:21:42:2d:96:a5:2c:
cd:9b:53:c4:40:6c:8d:31:4e:61:e2:d5:a7:13:1b:
53:bd:5b:57:c6:e9:49:cb:24:f6:61:79:18:8a:14:
d3:5f:57:c5:39:0b:31:ea:63:8d:26:42:76:96:ff:
17:dd:aa:2d:f0:61:8e:8c:ae:6d:9d:56:18:a2:d1:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:A5:3D:B2:F5:CF:4D:28:38:24:49:E6:88:1D:3B:97:6F:EB:45
X509v3 Authority Key Identifier:
keyid:ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/7WycK99282JlWn4Ee5dtsrDQK-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/D7A12988D36911EBB034D85CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.195.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:bb:8e:bd:11:01:5f:9f:43:0e:42:44:1d:08:2d:ee:a1:9e:
78:67:8f:09:d7:dd:a4:8b:fb:7b:80:2a:16:19:80:9f:79:0d:
48:dd:c6:de:a0:32:cb:47:26:4b:7d:2e:f6:4d:fd:f6:5b:c6:
52:45:f0:c3:bd:d8:eb:4d:b6:f1:a2:9b:56:2b:39:b3:34:47:
e3:95:0c:40:06:c4:12:eb:59:c9:48:6d:13:47:16:56:7f:8f:
0b:e1:b9:35:a9:2b:15:32:31:ad:42:20:a8:52:0f:4f:51:30:
66:bc:2b:06:35:8d:6b:91:32:8b:6d:9c:64:c9:89:5e:3d:83:
3b:0c:c9:15:67:e3:aa:05:b2:e1:44:37:d0:ab:f5:32:12:ec:
18:00:dd:cc:fe:d0:c9:0c:6e:e7:f1:e3:2a:dc:f5:2f:64:df:
a5:9b:5c:3f:7c:a9:fc:39:81:e1:91:32:70:70:e7:ff:71:99:
4f:17:f9:e7:d9:28:b6:ae:ab:d2:ac:27:4f:b8:e5:d7:86:ac:
ef:75:40:36:6a:24:ad:0e:32:e8:05:51:c5:bd:f3:51:ea:65:
19:85:32:17:bb:00:50:35:61:cf:a9:67:1e:d0:3a:fe:c9:2b:
90:40:34:1b:79:2f:4a:35:ff:f6:fc:6c:2b:21:4f:87:c8:d2:
bd:09:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org