Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/FFF476540C2B11EEACD3A36C4AD9E6FC.roa
File: FFF476540C2B11EEACD3A36C4AD9E6FC.roa (raw, json)
Hash identifier: K6BK1AHR8z2BhUB1vcoOm1fxkF8kYiaePS/M4xfYDgk=
Subject key identifier: 8C:DB:E0:35:6D:B5:A5:0A:A2:CD:53:C0:34:4F:B8:2C:8D:2C:81:27
Certificate issuer: /CN=F362C1A2AF/serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
Certificate serial: 03
Authority key identifier: D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/FFF476540C2B11EEACD3A36C4AD9E6FC.roa
Signing time: Fri 16 Jun 2023 09:56:01 +0000
ROA not before: Fri 16 Jun 2023 09:55:56 +0000
ROA not after: Sun 30 Jun 2024 09:55:56 +0000
asID: 37426
IP address blocks: 196.43.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C1A2AF/serialNumber=D010E9200ED9EDC9DAF2C3F6DD5573D70561208F
Validity
Not Before: Jun 16 09:55:56 2023 GMT
Not After : Jun 30 09:55:56 2024 GMT
Subject: CN=648c31b1-edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:93:d8:b7:fb:8f:97:5f:8c:21:41:c2:6f:
b6:16:35:45:22:b6:94:53:0c:15:09:ca:f8:f0:6b:
87:fe:cd:5f:72:c8:93:84:8d:3e:73:ea:f2:4d:1c:
06:e6:1d:5c:00:6f:bd:32:31:e8:4e:67:5b:b3:22:
8f:66:e9:7e:69:1b:52:4e:b6:fc:ef:08:39:39:0d:
f5:fa:14:83:4c:23:97:bf:70:f3:e2:6c:2c:f5:45:
f2:a8:b0:bb:ec:b4:94:30:f5:29:c0:0c:2c:69:15:
f5:8c:8d:e6:89:a0:2b:02:a2:67:af:83:7e:16:58:
ab:34:54:fe:b8:d5:a9:bf:1c:81:63:00:f7:65:2a:
f5:c9:2c:40:b2:83:36:47:ee:38:e9:42:51:6d:8b:
33:c9:10:40:af:d8:f7:6c:2e:b2:98:22:cb:6d:41:
07:a4:f4:a7:60:50:64:f4:75:bb:75:55:b3:68:5b:
a7:ff:43:c6:68:f4:49:2c:44:27:bc:62:c8:3d:61:
1c:77:78:9a:23:be:10:a2:9a:3b:bb:b5:3f:c0:ae:
3c:ec:09:66:e4:f6:cb:bf:e8:87:32:1a:14:49:40:
50:b6:a0:2b:cf:8a:8d:f7:62:83:81:87:30:1d:ff:
27:0d:35:b5:f0:f2:12:db:40:d4:33:3a:e8:73:d8:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:E0:35:6D:B5:A5:0A:A2:CD:53:C0:34:4F:B8:2C:8D:2C:81:27
X509v3 Authority Key Identifier:
keyid:D0:10:E9:20:0E:D9:ED:C9:DA:F2:C3:F6:DD:55:73:D7:05:61:20:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/0BDpIA7Z7cna8sP23VVz1wVhII8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0BDpIA7Z7cna8sP23VVz1wVhII8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C1A2/616DF6760B5A11EEB60E47724AD9E6FC/FFF476540C2B11EEACD3A36C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ca:26:96:8a:88:2b:0e:cc:a0:c9:a5:61:fe:9c:64:35:46:
1b:f7:30:99:50:b8:d3:e8:4f:3f:05:63:55:02:7e:88:10:9d:
1b:d1:b2:a6:ba:01:9f:49:1b:65:41:9e:d3:30:25:64:3b:28:
3e:30:aa:cd:1a:11:81:4d:4c:bc:7c:21:33:44:be:b4:37:86:
35:f0:4a:00:0f:01:82:d7:a9:a3:40:94:b5:1e:9c:70:f6:dc:
ff:e6:56:44:1a:34:fd:8c:45:64:aa:fe:72:fd:7a:8b:b1:72:
82:a6:19:ba:0d:96:0a:cf:f8:b8:44:5f:99:e0:ab:2d:26:b8:
b5:fc:c7:25:53:bf:5c:32:3f:2a:bf:cc:16:0f:4a:f8:a0:a4:
67:06:2b:3c:2b:57:b9:7e:13:e2:30:20:2f:3a:5c:cc:58:ce:
bd:f4:e2:c0:09:95:a3:93:62:3e:dd:14:cd:d0:e9:31:02:3f:
96:27:f7:42:dc:ab:45:8b:a7:c6:85:f0:10:f8:c9:6a:2e:7b:
29:7c:92:e2:6e:ee:90:9e:14:5b:d2:37:cb:89:f6:71:f4:a3:
64:53:e6:99:38:76:07:3e:ac:90:a6:74:6b:60:d6:45:7a:87:
5f:55:29:e1:71:ae:b7:3e:2f:c2:38:7a:0d:0a:b8:af:90:d0:
bf:a5:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 04:03:19 2024 by rpki-client on console-ams.rpki-client.org