Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/25F5392C967211ED8AE1BCE4F1222468.roa
File: 25F5392C967211ED8AE1BCE4F1222468.roa (raw, json)
Hash identifier: 0pwjoE7EtPxL2vHo1N2v8acHtkUgVZu17/m7D4IZ3WU=
Subject key identifier: BA:C4:24:CA:6D:35:48:9E:7B:48:C2:F9:C9:77:18:1F:8E:13:A2:6B
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 3D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/25F5392C967211ED8AE1BCE4F1222468.roa
Signing time: Tue 17 Jan 2023 14:20:53 +0000
ROA not before: Tue 17 Jan 2023 14:20:49 +0000
ROA not after: Tue 16 Jan 2024 14:20:49 +0000
asID: 35913
IP address blocks: 66.251.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 17 14:20:49 2023 GMT
Not After : Jan 16 14:20:49 2024 GMT
Subject: CN=63c6aec4-59a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:d0:4f:d3:91:2a:2d:1b:a1:a6:55:23:99:
59:8e:2b:b8:48:5f:e7:6c:9d:73:e2:be:f4:db:1d:
5e:67:4b:49:82:98:b9:d8:2b:13:0f:89:f3:ce:58:
e9:da:09:6c:b4:39:32:75:66:e2:cd:e4:67:be:2c:
05:4f:57:56:29:47:d2:79:5e:88:51:d1:3d:24:41:
e1:9f:28:0e:ac:9b:42:38:d3:50:23:b0:b8:a6:89:
27:65:99:11:95:4e:4d:6c:93:34:7a:56:66:30:01:
99:ce:a5:24:b8:cf:83:66:93:ea:c3:2a:b2:1a:3f:
b7:9d:eb:dc:b0:7a:d2:27:8d:59:d1:50:97:6d:1f:
03:4c:37:b7:bc:67:42:ae:3e:68:af:f0:a7:bc:67:
a4:be:e5:63:dc:31:03:75:dc:af:d6:58:0e:66:98:
2e:93:5a:85:12:1b:49:cb:e8:30:c7:31:ec:06:48:
2a:be:18:15:eb:3c:cd:c6:57:08:f8:b5:46:a4:89:
1a:75:96:13:c9:12:93:9b:17:bd:29:b7:b4:0e:90:
87:51:f8:71:ee:19:a9:7e:54:6f:d3:69:b5:1d:a4:
e8:13:4a:2e:e2:bc:ca:d0:21:81:d7:be:df:53:3a:
8b:7c:bf:73:71:4f:06:0c:7e:a4:9a:ef:bf:96:0b:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:24:CA:6D:35:48:9E:7B:48:C2:F9:C9:77:18:1F:8E:13:A2:6B
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/25F5392C967211ED8AE1BCE4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:af:fe:3b:9b:81:d8:8f:5f:0b:8b:75:46:08:e1:37:9b:d8:
89:8c:ac:db:10:48:8a:e6:77:46:4e:d8:c1:e0:39:69:e1:ee:
c5:80:47:b2:68:ad:a1:c2:94:a8:df:c6:90:4d:d2:ba:ed:d7:
88:3d:ed:9b:76:cf:fc:32:76:3d:ed:46:74:75:24:1e:09:2f:
a1:e1:cc:ee:0b:6f:f6:c2:d3:d6:aa:c3:fd:31:cf:6c:17:ec:
4e:f7:1a:df:63:4a:5b:d7:9c:47:86:5a:f4:75:9e:ae:d3:d6:
e2:16:97:b2:be:bb:cd:29:d4:f0:59:c7:53:84:5f:ed:76:0f:
ee:82:65:23:85:44:a2:4c:ed:f1:ec:c7:42:8b:c3:54:df:f6:
23:15:ab:9c:30:c5:d2:0b:51:9f:00:36:9f:ab:9e:e5:a5:50:
ca:88:96:2b:f2:d4:a0:dc:f8:b6:6d:74:60:af:f1:ba:79:2a:
a6:89:d6:35:0e:e0:2f:5c:1e:12:35:71:cc:32:e4:48:7d:05:
78:cd:45:6d:dd:24:fb:74:07:ea:ce:30:96:68:9c:e9:ea:00:
01:91:95:6d:02:a5:32:60:4d:c4:42:3b:57:31:78:03:6e:b9:
dc:64:4b:7e:b8:2e:3b:42:af:07:aa:f4:85:9d:0d:cc:47:8b:
fc:76:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org