Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/26F6E7D0095E11EEB544555B4AD9E6FC.roa
File: 26F6E7D0095E11EEB544555B4AD9E6FC.roa (raw, json)
Hash identifier: VsmFyV+STEgIHmWiTYJb7GGfsu3rmykmBJlgNHKJoq8=
Subject key identifier: 91:44:CA:92:D7:5A:ED:78:1B:E2:C4:8C:75:FF:2D:94:97:A7:E3:BE
Certificate issuer: /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial: 02
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/26F6E7D0095E11EEB544555B4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 20:17:28 +0000
ROA not before: Mon 12 Jun 2023 20:17:23 +0000
ROA not after: Wed 12 Jun 2024 20:17:23 +0000
asID: 327935
IP address blocks: 196.216.96.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Validity
Not Before: Jun 12 20:17:23 2023 GMT
Not After : Jun 12 20:17:23 2024 GMT
Subject: CN=64877d58-76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:41:e7:40:77:3d:77:b3:ca:0f:21:32:67:
27:43:a3:2d:77:7e:0d:8c:21:00:0e:dd:b3:ff:35:
61:fd:19:50:27:11:d3:45:70:46:4d:db:d4:b8:c7:
fa:52:de:5d:75:f6:75:94:1c:05:bb:ca:86:2f:2c:
e7:5c:9b:2b:d5:59:08:af:c5:2a:ed:7e:64:4d:dc:
34:4f:c2:e1:36:f0:3b:be:50:74:55:ff:60:2a:8e:
f1:cb:8f:42:5d:94:50:75:90:96:14:46:c8:f2:39:
88:f5:01:b0:8b:86:d8:2d:9b:c5:93:e2:97:1f:ce:
25:8f:6f:c6:a6:f6:8a:c6:c3:b3:dd:02:1d:91:a4:
ec:fd:8e:b4:e4:7c:c0:48:7b:86:e4:6a:3d:ac:6c:
a2:f5:82:1a:f3:eb:55:86:d2:ce:15:8b:fc:fc:05:
a3:55:8b:6c:0f:a2:d3:ef:73:f1:ad:e4:88:a7:99:
91:32:e5:d5:57:c0:4d:50:f1:2b:07:10:a8:84:81:
17:ae:53:a1:cb:64:6d:02:70:37:1d:bc:96:c9:81:
d0:90:5d:c3:5d:fd:a1:c3:58:ee:de:f0:d8:2a:99:
05:47:97:58:52:16:1f:8b:26:ff:3f:c6:a3:42:97:
c3:ed:a9:51:f2:3f:96:b2:a7:ab:50:98:f8:f5:b0:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:CA:92:D7:5A:ED:78:1B:E2:C4:8C:75:FF:2D:94:97:A7:E3:BE
X509v3 Authority Key Identifier:
keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/26F6E7D0095E11EEB544555B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.96.0/19
Signature Algorithm: sha256WithRSAEncryption
09:04:0e:91:81:bd:f9:8c:db:44:1f:ab:bd:52:18:42:a7:5d:
1f:ac:62:71:8c:5b:dc:21:3b:68:b6:4b:11:6d:e7:dc:f4:d6:
48:73:7e:6c:d4:a8:01:bd:7f:f8:5c:e5:d4:d2:bc:46:fb:03:
af:f1:39:6d:9b:a0:0c:0c:42:0b:df:66:3d:4d:16:53:ef:14:
81:28:6c:1b:fa:5d:10:9e:8e:41:c2:d7:61:bc:07:f4:58:ac:
2e:aa:0c:e6:b0:a2:f7:39:39:7e:2a:8a:c6:f7:d9:57:91:d4:
be:a7:2a:af:ca:9b:2e:1d:08:c2:c1:41:16:9c:53:de:13:c8:
d7:0b:df:4c:be:9a:0a:31:90:f6:44:c1:96:75:7f:2b:ce:d8:
a0:20:1a:5e:0c:8e:de:d3:f9:ba:a1:e1:71:c0:f0:c2:b0:3d:
2f:94:cf:88:35:46:05:7b:69:35:68:26:c2:4d:4a:b5:0a:79:
fe:94:9d:6f:82:da:23:74:e4:db:db:c6:e8:f6:cc:88:fb:4d:
8c:80:27:00:95:f5:ac:60:fd:78:3c:c5:30:16:5b:69:72:84:
44:dd:94:39:47:db:b2:ce:69:3d:72:fb:3d:f9:3e:93:9d:d5:
5d:bc:08:ab:3c:e0:a5:1d:64:f9:6a:85:0b:5e:00:e6:ef:9f:
e7:f5:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 03:23:35 2024 by rpki-client on console-ams.rpki-client.org