Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/9EEB88D485C211ECBF8886B15A40D577.roa
File: 9EEB88D485C211ECBF8886B15A40D577.roa (raw, json)
Hash identifier: AG/OFNlydn1rC2gtY28nm4nAlxcHZVj6rDhZ/4T9W9s=
Subject key identifier: D6:F9:B3:F0:ED:B2:28:0F:1C:04:AA:96:E5:2D:8A:E5:9C:64:85:08
Certificate issuer: /CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
Certificate serial: 039A
Authority key identifier: 07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/9EEB88D485C211ECBF8886B15A40D577.roa
Signing time: Fri 04 Feb 2022 13:59:08 +0000
ROA not before: Fri 04 Feb 2022 13:59:04 +0000
ROA not after: Sun 04 Feb 2024 13:59:04 +0000
asID: 29286
IP address blocks: 197.234.40.0/24 maxlen: 24
197.234.41.0/24 maxlen: 24
197.234.42.0/24 maxlen: 24
197.234.43.0/24 maxlen: 24
197.234.47.0/24 maxlen: 24
197.234.54.0/24 maxlen: 24
197.234.55.0/24 maxlen: 24
197.234.56.0/24 maxlen: 24
197.234.59.0/24 maxlen: 24
197.234.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
Validity
Not Before: Feb 4 13:59:04 2022 GMT
Not After : Feb 4 13:59:04 2024 GMT
Subject: CN=61fd312c-7191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:d2:4f:c4:4c:fe:0f:75:f5:b1:ba:4f:c7:
db:98:aa:ce:a5:30:19:19:0a:9c:b2:f5:dc:b4:51:
38:46:b1:88:78:b2:1d:3d:8e:85:09:fa:e5:00:d4:
24:39:4c:7a:9a:b5:08:f2:9a:3b:c0:eb:7e:0f:68:
8a:9d:33:ac:19:d0:92:e3:da:fa:22:8a:2b:b5:9b:
8f:06:1d:b7:60:fc:c9:7d:ee:62:ee:23:c0:f6:7c:
e7:83:6b:ed:ca:35:ae:d6:0a:aa:18:65:da:bb:3b:
16:94:24:44:e9:f0:84:4a:89:dc:d2:e3:4f:a7:3b:
80:b7:3e:41:19:14:4d:c0:4e:9a:c2:db:85:83:c2:
3c:20:22:cd:03:5c:3c:84:0c:b8:ab:e9:8c:3f:ff:
19:e7:e9:19:86:ae:9a:f1:59:68:1a:61:42:6c:13:
66:62:f9:a1:4f:93:f0:1d:ed:49:ef:25:97:bc:45:
66:94:8e:13:31:e2:d0:d7:99:2b:8c:7a:bc:72:b6:
09:42:94:3c:de:3e:f4:1f:5c:1b:42:cc:75:00:a4:
0b:ee:6f:32:11:96:60:f3:30:d3:93:90:66:b4:01:
1c:a8:d4:26:3a:c1:ab:ed:0b:61:f9:fc:bd:52:95:
75:ce:8b:17:8d:a2:40:21:80:23:80:b1:22:2f:21:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:B3:F0:ED:B2:28:0F:1C:04:AA:96:E5:2D:8A:E5:9C:64:85:08
X509v3 Authority Key Identifier:
keyid:07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/9EEB88D485C211ECBF8886B15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.234.40.0/22
197.234.47.0/24
197.234.54.0-197.234.56.255
197.234.59.0/24
197.234.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b9:bc:a5:eb:72:dc:b9:ae:53:1c:f2:47:f0:fc:48:b5:7d:
ce:5b:15:7c:45:fb:6a:c9:5a:da:40:51:a6:73:01:34:4a:e3:
13:de:1a:74:6f:9a:03:9d:32:3d:f7:b5:be:4a:07:65:06:42:
dc:e1:d7:b4:15:53:6d:47:7d:45:70:fa:86:3f:6d:7f:2d:29:
d8:4d:21:26:d0:77:72:ef:32:01:d2:40:7d:5f:06:c5:d8:a4:
2f:c9:e1:8b:d5:b1:af:db:8f:09:dc:c1:c8:4b:bc:2b:9d:57:
7e:cc:92:1d:3d:76:b0:53:d2:45:25:aa:6e:38:0a:1a:65:ff:
bb:3a:b2:7f:5c:ff:4d:ba:b4:27:f3:cd:d0:4d:9f:4d:ea:29:
ff:c6:3f:a8:a6:52:5a:a6:84:f2:3f:b5:21:d1:3a:3a:8d:66:
f0:19:33:1f:4a:3d:95:57:1a:20:e9:f0:1c:e7:3c:c9:25:c6:
51:8c:f3:a8:ce:0a:8d:d0:f9:f1:ba:59:a9:ab:fd:0b:57:38:
e1:7a:ce:81:26:2f:b8:94:1e:59:c9:51:31:a4:00:29:11:52:
e7:a0:47:29:0e:d7:36:5a:d0:43:12:a4:62:56:24:00:51:ba:
c4:be:e5:f1:f4:b2:ea:a8:5c:1c:39:47:4c:2e:27:ac:9b:07:
42:29:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org