Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/370A32C493DB11EDAF076191F1222468.roa
File: 370A32C493DB11EDAF076191F1222468.roa (raw, json)
Hash identifier: /HupXa7oQS0vMCeRnI1aW5sVAcKynQ9wcl07o/OQjjA=
Subject key identifier: A9:EF:6E:97:7D:81:A6:F8:41:5B:7E:30:A1:A5:8D:D1:B8:42:A6:65
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0C0A
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/370A32C493DB11EDAF076191F1222468.roa
Signing time: Sat 14 Jan 2023 07:15:25 +0000
ROA not before: Sat 14 Jan 2023 07:15:21 +0000
ROA not after: Tue 31 Jan 2023 07:15:21 +0000
asID: 37181
IP address blocks: 196.216.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Jan 14 07:15:21 2023 GMT
Not After : Jan 31 07:15:21 2023 GMT
Subject: CN=63c2568d-35c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:98:eb:64:5c:3d:1d:95:5f:9a:24:b9:9f:
cd:b1:f5:a9:22:1d:5c:e4:f8:6c:a2:e3:4d:4a:b5:
8b:35:c5:88:86:38:07:f8:8d:b1:da:82:5a:9d:6a:
f6:3f:15:0b:76:9f:58:e9:6e:84:cf:a5:0f:e0:6d:
5e:17:9f:c8:21:61:3c:74:e2:7b:e5:fd:5a:db:8d:
84:8c:d1:43:ee:c4:2c:2b:c5:47:c5:d1:97:d6:d7:
85:47:77:b0:ec:30:38:1a:e4:87:ab:d2:46:84:c9:
12:6b:62:06:23:bb:32:61:e1:52:00:3b:e5:94:25:
19:d5:fa:20:79:ba:f9:f4:82:f9:89:24:4c:67:46:
ac:a0:50:75:74:c3:bc:bd:6d:9c:a2:d4:a9:42:9b:
86:7c:db:a9:b2:3f:50:37:ac:9e:bf:32:22:be:cb:
ba:97:1c:e2:75:13:23:1c:5b:04:77:5f:d7:dd:0a:
01:d7:d2:9e:55:5f:25:68:66:0b:76:79:54:47:6a:
b3:69:a0:22:85:bd:97:67:1f:07:cd:f5:c0:7e:7d:
6c:ef:a4:7b:8e:fe:4a:02:ca:5f:21:c2:fa:5c:bf:
7a:53:74:71:f2:41:3a:4c:86:74:2f:7c:fe:e1:ad:
b2:be:fe:75:d9:73:7c:cd:9c:38:ea:59:1e:b1:71:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:6E:97:7D:81:A6:F8:41:5B:7E:30:A1:A5:8D:D1:B8:42:A6:65
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/370A32C493DB11EDAF076191F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.169.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fb:bf:30:ba:80:a8:19:69:ea:e6:7d:82:73:85:aa:41:da:
26:e0:75:ec:38:59:78:44:bb:43:a2:b2:3f:8b:4c:55:9c:35:
c3:21:15:e7:a5:9b:48:1d:e5:06:2a:ce:d2:b5:86:37:d3:ce:
da:33:0b:f1:9b:59:38:5c:f4:0c:34:e3:31:31:ab:f7:9a:2d:
5d:f3:b3:f2:60:14:ce:62:f6:87:e4:18:1d:a1:77:04:24:d7:
7a:cb:75:00:18:fc:42:d0:95:0d:3a:3a:74:88:81:25:ce:66:
9d:d2:80:40:12:2e:55:4b:42:dd:45:23:c5:54:69:90:27:4a:
66:24:37:03:fe:84:34:e1:9d:c3:ee:50:5d:5c:da:a6:ed:d0:
50:29:dd:46:12:88:29:64:bd:87:a1:2f:91:22:33:10:a7:25:
4f:ee:01:7b:54:91:d1:22:9b:81:95:f2:5c:c6:ba:95:0f:05:
08:84:fa:f1:74:d9:62:5a:45:c4:98:14:b9:5a:93:84:94:89:
49:34:17:50:47:5c:f9:da:a6:5f:43:40:eb:b8:be:a4:7d:19:
1e:09:6d:a2:50:d1:67:f2:c7:f3:1b:92:a6:ad:cb:83:d4:c2:
27:99:de:75:82:20:96:79:1b:8d:ea:60:17:63:b5:9d:3f:64:
66:b6:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org