Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F532AF0ADA6E11E7A1321416F8AEA228.roa
File: F532AF0ADA6E11E7A1321416F8AEA228.roa (raw, json)
Hash identifier: 6qxMU3oOmzHnA5RulGl+Oz2+ZYChgcZ45JjQshdTBGc=
Subject key identifier: 69:31:18:C6:AA:96:A3:71:10:5F:AC:2F:A3:81:69:02:EA:AB:24:28
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0403
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F532AF0ADA6E11E7A1321416F8AEA228.roa
Signing time: Wed 06 Dec 2017 10:19:36 +0000
ROA not before: Wed 06 Dec 2017 10:19:30 +0000
ROA not after: Sat 31 Dec 2022 10:19:30 +0000
asID: 37181
IP address blocks: 196.216.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Dec 6 10:19:30 2017 GMT
Not After : Dec 31 10:19:30 2022 GMT
Subject: CN=5a27c438-567f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:f7:16:f3:f3:e1:22:d4:80:32:c6:c8:74:
ef:3b:32:a5:23:27:e7:26:5c:06:a2:bc:6c:c9:61:
4b:89:57:f3:2b:8e:c9:b0:03:a6:49:78:a4:dd:3f:
6b:e5:2d:79:a4:57:21:2c:60:89:2d:03:0f:3f:51:
83:48:f3:42:74:45:9c:08:e8:e2:2b:d9:a1:bc:ca:
7d:ea:0c:e2:45:3a:e7:4b:7f:78:f3:d6:8a:d1:85:
13:d3:a5:2f:6d:d3:21:ad:3d:ec:92:e5:ea:f0:14:
9b:db:9f:d1:09:ca:48:08:76:b9:1e:4d:67:80:90:
69:0b:cc:6a:24:1a:bb:45:83:54:f2:55:85:06:27:
5d:77:9f:ac:39:b8:b1:50:a4:c9:58:57:ef:94:ae:
00:bc:af:10:b5:3f:f9:7d:31:d3:c9:c8:8d:5d:eb:
b6:d5:37:e6:9c:84:b2:82:8e:53:25:3e:ac:1a:84:
76:fa:86:ae:2b:6b:68:6d:d2:fe:be:10:f5:a8:3a:
e3:ef:df:3d:4a:1e:e3:aa:ad:d9:73:16:5c:01:33:
56:86:8b:a3:60:11:58:07:29:7b:7d:fd:e4:88:2a:
24:8f:6f:44:44:5c:0b:c1:54:68:11:da:a8:c7:6f:
41:e2:54:9a:ce:37:6e:ea:29:50:26:9e:fb:6b:cd:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:18:C6:AA:96:A3:71:10:5F:AC:2F:A3:81:69:02:EA:AB:24:28
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/F532AF0ADA6E11E7A1321416F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.216.169.0/24
Signature Algorithm: sha256WithRSAEncryption
94:30:7b:0e:b3:52:4f:89:4e:e4:97:1b:15:8b:1d:ae:c4:29:
d5:29:2c:aa:b9:43:cc:b2:0f:42:68:0a:12:31:82:ca:2a:8a:
55:7d:dd:d4:72:9d:97:fc:5e:99:e0:f9:17:3e:ef:23:aa:85:
9a:41:14:6c:74:06:b1:46:3d:df:f3:06:c3:a5:ab:79:a5:89:
40:94:2e:85:e1:29:2a:f3:af:40:b2:ad:14:ed:ee:51:0a:9b:
cc:f4:b3:f1:36:e2:8a:05:f2:bb:c3:28:06:36:03:51:4b:60:
7c:d7:ec:ac:03:7b:ec:3f:df:4e:f4:63:ff:5e:62:f7:b5:4c:
63:e7:eb:e1:12:68:c3:7d:37:1f:72:c9:33:f1:cf:dc:5a:21:
93:e8:61:41:bd:5d:1e:18:75:1c:27:40:54:5d:26:80:3c:3e:
35:bb:b3:34:57:48:9e:83:26:29:97:c6:72:57:3c:b9:98:0f:
ed:4b:c7:17:28:5c:c0:02:d7:d2:4d:8a:c0:f7:f7:f3:38:a8:
1d:ed:bd:09:da:65:6e:2e:8d:2e:9d:60:91:5c:f3:82:1c:a9:
88:c8:97:e7:99:b8:23:d1:77:12:af:9e:e8:ea:35:08:6c:f5:
54:9f:2f:67:19:3d:3e:f7:75:b6:e0:7c:8a:7b:94:72:97:ed:
18:78:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org