Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/05AC204293DC11EDBCF15E93F1222468.roa
File: 05AC204293DC11EDBCF15E93F1222468.roa (raw, json)
Hash identifier: siyuEQjJrN5z10LfAyTywEPBqbAau54AQ8mykcU7z90=
Subject key identifier: 6F:3A:34:C2:2B:5B:79:DA:09:6C:5A:1E:53:0A:02:00:AC:A0:C5:DD
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0C0E
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/05AC204293DC11EDBCF15E93F1222468.roa
Signing time: Sat 14 Jan 2023 07:21:12 +0000
ROA not before: Sat 14 Jan 2023 07:21:08 +0000
ROA not after: Tue 31 Jan 2023 07:21:08 +0000
asID: 33764
IP address blocks: 196.216.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jan 14 07:21:08 2023 GMT
Not After : Jan 31 07:21:08 2023 GMT
Subject: CN=63c257e7-3321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:53:9d:af:37:0e:d3:4d:14:e2:9d:e3:da:
61:68:86:45:1b:af:aa:ab:8a:2d:ba:ae:8d:f4:65:
98:29:96:d6:0a:df:db:0d:2a:93:11:4c:67:9a:f9:
4b:02:72:d0:4d:97:d0:a8:1c:9a:d0:71:27:19:85:
e7:c9:ac:ff:aa:de:c8:e3:7e:8b:01:f4:01:1d:27:
9e:a4:96:06:88:7d:d4:b8:1d:de:02:57:90:6f:db:
f1:ad:6e:e3:cd:5b:12:55:3d:81:2a:60:3c:f5:46:
29:c5:34:6e:e8:6d:4c:61:81:95:06:a4:07:33:ea:
07:e4:a2:5c:5a:56:2d:52:0f:46:77:33:2c:79:de:
b2:ed:5a:bb:e6:06:de:7c:06:93:50:5e:64:4e:ab:
81:2f:32:bb:ff:2c:03:25:92:3d:e6:ec:b6:bb:20:
37:03:41:74:80:ab:ae:c4:27:77:33:12:c5:18:e7:
48:d9:5e:fe:81:de:eb:7a:bc:ce:2d:b5:4e:03:9d:
73:55:8c:e2:7b:bf:49:21:30:5e:ad:f9:80:92:f4:
e7:3c:13:ba:e2:c7:b3:41:4d:61:c9:a5:6f:b8:8e:
0a:f2:71:95:de:e5:49:8f:fc:ec:eb:af:b1:c2:f9:
8a:4a:85:de:fa:29:5d:4b:88:3b:34:6a:b0:25:fb:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:34:C2:2B:5B:79:DA:09:6C:5A:1E:53:0A:02:00:AC:A0:C5:DD
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/05AC204293DC11EDBCF15E93F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.2.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:fd:66:d4:7c:b2:89:df:55:4e:b4:01:0f:2c:5b:0d:d1:8c:
93:4b:1a:ad:6d:e0:ee:b6:3c:62:a6:5a:06:3a:69:c2:7f:3e:
b2:eb:00:7c:5b:f5:8a:25:20:80:32:04:e0:e2:35:b6:96:40:
be:63:83:1a:ce:a9:82:1d:4f:6a:0f:e0:1b:8b:31:98:9f:2e:
85:cd:10:c7:30:32:8c:ab:14:72:f0:ac:79:5d:67:34:96:44:
13:c7:c8:26:8e:73:e2:1f:40:d9:17:71:b5:f5:55:9b:0f:03:
b2:19:88:28:47:2f:d1:80:7b:a8:05:ea:f6:09:36:df:54:62:
20:ad:f7:10:14:0e:10:ed:77:fb:1d:4f:b7:69:63:63:6f:a3:
cb:b4:fc:0a:db:a7:8a:b4:00:8e:89:1b:53:33:2a:94:93:29:
93:1f:1a:ae:cb:38:bc:82:ff:e2:57:7c:df:68:ef:6d:af:30:
c3:3c:87:a8:59:9e:81:ad:9a:b6:36:6e:ba:4f:7b:99:ab:2f:
95:cf:8b:c3:1f:a6:d9:10:c6:73:aa:82:39:43:3c:38:48:27:
6d:9d:fd:73:21:2b:25:8a:f1:af:19:e6:52:ff:37:6f:f8:a3:
ec:fd:4b:29:4d:19:1b:db:64:68:80:d9:a5:e9:3d:7d:06:94:
48:d9:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org