Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5E5408AEDA6E11E7A994AD15F8AEA228.roa
File: 5E5408AEDA6E11E7A994AD15F8AEA228.roa (raw, json)
Hash identifier: bT8bWBqaarK6a0xovTuGah3OTWdXiElv+JH7fBK+Dsw=
Subject key identifier: 84:C0:CD:DA:2A:81:AA:A3:88:3F:12:B3:53:AA:BC:4D:B0:AF:FE:EA
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 03FE
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5E5408AEDA6E11E7A994AD15F8AEA228.roa
Signing time: Wed 06 Dec 2017 10:15:24 +0000
ROA not before: Wed 06 Dec 2017 10:15:15 +0000
ROA not after: Sat 31 Dec 2022 10:15:15 +0000
asID: 37177
IP address blocks: 196.216.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Dec 6 10:15:15 2017 GMT
Not After : Dec 31 10:15:15 2022 GMT
Subject: CN=5a27c33c-fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:72:b4:d4:6a:cb:c5:c7:4e:46:9f:01:20:
70:e5:7a:48:d8:0e:2e:d2:e4:23:c9:82:b1:9e:6f:
4b:7e:23:2c:a1:53:63:91:d0:08:26:dd:1e:8a:1e:
67:84:e1:6b:b4:0e:81:74:f7:ea:40:1f:8f:10:e4:
a8:50:7a:a2:d7:f7:74:e2:4b:af:b0:d2:87:4d:56:
fd:52:ce:31:e5:56:f7:b0:86:54:5c:39:ac:8b:e7:
3b:35:ea:c6:b9:f6:2b:5d:85:d3:76:37:1d:4d:75:
8f:7d:2c:8f:be:10:4a:d4:0c:b1:fc:61:a3:37:1b:
d2:19:8c:87:69:0f:a9:f1:5e:2b:01:73:27:1f:37:
de:f7:6b:cc:a4:cc:e6:9c:80:74:40:8e:44:b9:d5:
50:20:7b:e7:48:c2:23:78:4a:07:8a:e2:7b:5b:02:
a6:ba:79:bd:13:76:f4:ce:ad:53:cf:85:c1:7e:c1:
2a:67:1e:de:04:d4:72:08:9d:84:ca:b6:ac:cd:99:
10:a8:a2:5e:3e:56:5a:82:78:4b:74:0c:14:0a:aa:
5f:32:cd:73:50:9d:41:fe:fb:85:60:75:b2:92:48:
43:0e:63:aa:15:15:3f:73:20:1e:7f:9e:63:fc:6b:
b6:eb:d5:96:66:7d:7a:2b:a9:68:de:1b:0f:4c:a8:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:CD:DA:2A:81:AA:A3:88:3F:12:B3:53:AA:BC:4D:B0:AF:FE:EA
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5E5408AEDA6E11E7A994AD15F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.216.168.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5a:7c:72:b6:6c:74:9d:aa:12:89:50:1d:37:12:62:c8:84:
61:44:4f:a0:07:7f:21:11:02:5e:46:bd:e6:b2:d3:c2:4f:0c:
bd:a9:be:a4:6b:84:54:e3:a9:98:ae:25:f7:ee:82:26:93:82:
4f:12:ad:4c:e1:33:89:76:c5:64:bf:41:03:a7:fc:d3:76:39:
b0:66:d5:0d:74:c9:09:ad:26:1a:d3:8f:f5:7a:ac:1d:85:49:
a4:97:c2:c1:9e:ea:c4:6e:46:8d:ed:6e:4f:66:18:67:2f:72:
80:5d:b8:e2:8b:0a:35:4d:91:7c:06:46:2c:24:a4:66:9c:76:
76:07:51:0f:24:66:01:6c:3e:86:cc:42:80:e3:c6:24:4f:6b:
ef:17:8a:c6:4d:42:68:31:ce:59:4d:ca:9c:17:ec:76:13:19:
25:45:fe:8a:15:23:05:3e:09:42:2b:c1:3b:eb:a2:de:59:03:
c9:b1:fb:4b:31:00:03:5b:64:76:a5:9e:68:75:ba:6f:b5:4c:
5b:28:27:55:f0:30:74:7c:a4:a1:34:46:ff:eb:7b:3f:42:2c:
12:d7:67:91:eb:94:be:b8:dd:82:c8:8e:bb:66:e4:d9:49:44:
db:6f:b2:8b:f8:80:e5:ee:75:6e:56:73:0a:b2:83:2c:a3:da:
27:cd:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org