Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/E1E7F8A0C2C011EA9216D634F8AEA228.roa
File: E1E7F8A0C2C011EA9216D634F8AEA228.roa (raw, json)
Hash identifier: yf21rRqIYIIM/JwFf4/54P6fnYDdMbaSW6oT3Qpg1I4=
Subject key identifier: E7:C4:F8:69:52:14:3D:A4:62:CA:70:34:26:D5:F0:D2:CA:86:3C:1A
Certificate issuer: /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial: 02
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/E1E7F8A0C2C011EA9216D634F8AEA228.roa
Signing time: Fri 10 Jul 2020 15:20:27 +0000
ROA not before: Fri 10 Jul 2020 15:20:21 +0000
ROA not after: Fri 01 Jul 2022 15:20:21 +0000
asID: 36932
IP address blocks: 196.216.148.0/24 maxlen: 24
196.216.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Validity
Not Before: Jul 10 15:20:21 2020 GMT
Not After : Jul 1 15:20:21 2022 GMT
Subject: CN=5f08873b-7200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:b7:37:6d:d2:5d:e8:e4:02:7b:2b:30:3d:
5d:e6:8c:ce:9f:8d:44:31:88:d0:2f:a5:e3:13:32:
fd:5b:c9:34:49:4c:14:77:c7:59:f6:e9:72:e4:ba:
ba:1e:ab:bd:48:80:22:6e:c8:e3:70:d5:b9:3a:dd:
0b:55:60:47:4c:88:8d:90:08:d0:e1:f0:31:8f:c8:
4a:f0:64:b1:c3:92:8c:de:a5:c0:7b:02:06:24:68:
ca:d7:c9:0a:ea:6f:d2:80:42:07:29:14:94:a7:15:
ff:2c:81:15:25:29:65:29:10:ba:70:e0:54:64:da:
d5:4e:32:7e:ea:a7:a5:e8:1e:2f:ef:17:a0:b0:57:
d3:60:4f:05:61:2f:1f:2b:e3:07:d6:63:df:75:a4:
cd:94:6f:9b:5d:db:1f:53:9b:de:cb:66:20:56:c2:
78:18:ac:6f:da:44:a9:5a:fd:e2:16:d4:0b:8a:c1:
ae:32:a2:b2:f4:81:03:a5:db:43:bb:fb:08:7f:97:
72:49:53:53:85:c6:54:5e:84:8c:56:b5:46:8b:0f:
1e:ef:e7:89:e0:e3:18:21:69:1c:37:e1:7a:33:03:
41:bd:05:11:82:16:f5:09:68:aa:91:0e:55:ea:85:
c6:36:e7:1b:78:28:7c:e2:76:d7:75:4e:13:42:71:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:F8:69:52:14:3D:A4:62:CA:70:34:26:D5:F0:D2:CA:86:3C:1A
X509v3 Authority Key Identifier:
keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/E1E7F8A0C2C011EA9216D634F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.148.0/23
Signature Algorithm: sha256WithRSAEncryption
af:e9:9b:15:54:63:1a:1e:04:d2:5b:fa:a3:07:8d:7a:5c:0c:
d2:a3:24:bf:7d:b8:15:46:17:47:37:4b:dd:69:0e:f7:24:e6:
17:96:a0:3b:af:7a:5b:91:90:b0:95:f7:76:c4:5e:5f:ab:a3:
ad:a2:e0:45:07:1e:cf:8a:22:80:73:f0:4e:14:30:98:d0:8a:
d1:ad:71:4e:af:02:7f:41:05:ef:84:a3:07:62:10:f1:ea:d3:
b7:03:ae:f5:65:c1:25:d6:0f:6c:c0:2e:a9:c8:97:d3:00:79:
28:6c:21:6e:8b:c5:7f:1f:64:d3:23:63:fc:d0:8d:d8:79:d5:
18:fd:ca:91:85:58:c3:b8:a2:3d:05:23:9e:b3:5c:81:71:df:
21:0b:00:7e:1d:a1:05:d4:49:57:39:61:58:e6:e5:dc:94:bf:
f3:6c:40:85:76:0f:c1:0b:af:37:b4:97:38:c1:c7:54:21:35:
5f:29:02:77:ee:ed:88:11:f2:d6:ed:9e:03:87:97:24:55:f9:
0d:2f:c1:1a:77:17:ba:99:47:76:03:69:38:de:3a:a0:a3:51:
49:a8:a5:0d:16:8b:80:5c:2f:9c:dc:17:67:ca:11:66:f6:b1:
da:b2:f6:1b:ea:e6:40:8c:3a:57:ab:58:73:a0:d9:05:cc:7c:
1d:de:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org