Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/55D99A9C6A4211EBA5C97F3CF8AEA228.roa
File: 55D99A9C6A4211EBA5C97F3CF8AEA228.roa (raw, json)
Hash identifier: MF+81Ld6kjBadulkyhoA+5IaToNOWXue6HZA8mKBoQA=
Subject key identifier: 47:BA:DD:B3:56:0D:F3:DF:B9:06:17:F3:B4:96:F1:10:59:A6:4D:D9
Certificate issuer: /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial: 04
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/55D99A9C6A4211EBA5C97F3CF8AEA228.roa
Signing time: Mon 08 Feb 2021 19:17:51 +0000
ROA not before: Mon 08 Feb 2021 19:17:47 +0000
ROA not after: Wed 08 Feb 2023 19:17:47 +0000
asID: 22386
IP address blocks: 196.29.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Validity
Not Before: Feb 8 19:17:47 2021 GMT
Not After : Feb 8 19:17:47 2023 GMT
Subject: CN=60218e5f-0cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:42:e6:a1:44:bf:7a:cf:5e:85:bb:a0:53:
00:f2:31:5c:79:e2:0a:74:bd:bd:41:71:c0:70:69:
94:13:e7:cf:d3:6b:2f:f7:98:c5:4c:27:f4:16:57:
07:af:c5:7a:36:93:ff:90:0f:56:5b:86:65:d2:46:
cc:7c:fc:30:be:80:3c:54:f7:22:d2:34:ff:75:ef:
88:ab:05:90:e4:dd:15:98:08:16:50:28:90:73:ce:
c2:51:8a:c9:71:72:99:e2:3c:4d:c6:a3:11:00:57:
5a:28:99:2f:f5:26:82:7b:11:0c:c7:de:b5:97:a3:
45:d4:a4:b3:74:11:51:b5:5f:25:80:61:ed:4a:5d:
c7:53:8f:a6:17:cd:e0:4a:cb:7a:c6:e1:91:a5:0d:
6f:3f:50:ec:82:e7:a1:a3:bd:93:1e:f3:d7:d2:97:
a4:32:1e:cd:0b:be:af:95:b8:f6:20:e7:f6:e0:f6:
1b:a4:ce:c6:61:3d:a4:dd:27:f0:bd:ae:db:94:d4:
9d:37:93:42:a0:09:9d:d5:27:53:3d:cf:67:8f:b6:
e1:19:81:60:5c:78:f3:a3:0d:07:60:05:09:4a:0c:
ec:04:25:5a:f5:05:71:e9:8d:43:eb:d5:88:34:e2:
3c:b2:87:2f:d9:b9:83:22:1c:8a:6d:f4:30:b9:e4:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:DD:B3:56:0D:F3:DF:B9:06:17:F3:B4:96:F1:10:59:A6:4D:D9
X509v3 Authority Key Identifier:
keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/55D99A9C6A4211EBA5C97F3CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.29.250.0/23
Signature Algorithm: sha256WithRSAEncryption
27:6e:fb:9e:a2:7d:f7:f2:d8:6b:19:b8:6f:27:60:07:22:45:
e4:c6:c6:10:2f:65:2b:69:e4:9c:bf:1a:88:93:89:58:35:63:
20:bd:22:56:f6:7c:42:47:d9:e3:86:f8:e0:38:1d:9d:7c:5c:
27:40:db:f3:c0:bf:7d:44:5e:2e:55:40:e3:8a:a2:72:61:4f:
dc:ab:6b:2d:52:3a:58:f3:f0:e8:e2:75:9b:ec:47:65:43:2f:
ed:22:6d:06:d4:47:ac:b1:1c:48:76:30:b7:69:74:e5:05:1c:
18:53:d4:87:f3:76:fa:81:0a:e9:1f:7d:e4:88:d3:ee:0a:b0:
7b:5b:be:a1:2a:1a:3c:c5:79:f3:f4:41:f1:75:0c:7f:77:03:
d3:cd:cf:18:19:23:3b:22:a6:3d:e6:a4:d6:48:ab:6d:89:59:
59:46:14:e7:e7:b0:be:5c:e6:a8:dc:00:0b:6e:6f:7b:43:80:
86:66:f0:b7:50:3f:40:a6:a8:23:89:4d:da:a5:ae:a5:4c:28:
b2:65:ec:d3:fe:55:b3:5e:93:7d:da:29:32:a1:e6:34:1e:a4:
8e:47:e3:c2:0b:69:ae:42:29:f3:a4:f2:98:61:5b:c4:a9:d5:
6c:70:ae:c1:db:93:14:a7:91:13:8e:11:af:d4:91:5d:04:e7:
8b:29:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org