Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C5A3D270F3F711EDA1CA3E7B4AD9E6FC.roa
File: C5A3D270F3F711EDA1CA3E7B4AD9E6FC.roa (raw, json)
Hash identifier: YjZL5jATd/lkm+MzvCmo3Bc7f9oebUnDxQuucq8clrE=
Subject key identifier: 2A:92:76:4F:19:0D:7B:44:F5:59:B2:5A:5F:58:4C:72:06:C8:FA:CC
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: CE
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C5A3D270F3F711EDA1CA3E7B4AD9E6FC.roa
Signing time: Tue 16 May 2023 14:41:42 +0000
ROA not before: Tue 16 May 2023 14:41:38 +0000
ROA not after: Wed 15 May 2024 14:41:38 +0000
asID: 35913
IP address blocks: 66.251.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: May 16 14:41:38 2023 GMT
Not After : May 15 14:41:38 2024 GMT
Subject: CN=64639626-b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:81:83:6f:b2:31:c1:eb:66:d9:89:47:b5:
7c:1b:05:e0:05:e6:0f:fe:ec:24:e4:bd:0c:1c:2d:
aa:7f:cc:49:d6:e2:2b:f2:61:55:2c:43:60:4c:66:
00:c5:d9:9f:43:f3:3f:79:01:8d:e6:d0:1b:ab:92:
c1:ec:f9:bb:75:dd:31:bb:10:5f:58:67:3a:b7:67:
20:38:4a:dc:51:97:54:12:43:c2:6a:2c:7c:1b:df:
37:f0:31:81:25:ce:30:23:ae:a3:90:0e:18:ff:dd:
75:08:62:87:c3:ef:2a:64:af:b5:6f:2b:03:cd:b7:
3b:52:49:af:64:41:8c:61:d2:ab:08:a5:1a:59:9b:
95:a7:93:a9:ec:ea:01:81:9b:99:35:d2:e0:c5:63:
39:8d:4c:5b:60:6f:73:8d:6a:48:5f:0e:ec:2a:51:
43:8a:ab:2d:8d:1c:7a:e3:b3:56:7f:77:1e:3c:73:
79:84:15:59:5d:86:1a:a8:73:9f:d3:ef:59:63:21:
8a:af:31:49:d3:77:fa:e0:a6:47:e5:bb:25:45:d9:
dd:4a:ee:1d:bd:4a:f9:5d:8c:15:41:04:a8:bd:03:
a6:fa:9e:6a:3a:50:55:a3:cb:ef:42:50:d9:c5:50:
a7:d9:57:24:69:02:7a:41:66:fb:df:d6:5e:3f:ae:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:92:76:4F:19:0D:7B:44:F5:59:B2:5A:5F:58:4C:72:06:C8:FA:CC
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/C5A3D270F3F711EDA1CA3E7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.164.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f8:38:1e:e4:f4:40:5c:05:93:6f:59:e3:4e:3b:f0:88:7d:
62:91:3d:d1:58:f1:ea:47:1a:63:ee:0d:2f:ac:c9:d4:dd:2a:
ce:09:5e:6f:36:a0:09:65:fd:d8:38:66:1a:cf:46:f0:b3:6f:
6c:92:dd:cf:0a:61:ff:8a:96:49:93:19:fd:39:42:5c:98:9f:
6f:60:7a:12:6f:48:61:db:8e:ef:d7:9e:15:66:c5:bd:43:0b:
c5:83:b9:84:34:19:cb:59:ad:c0:1f:f8:fd:4d:9f:98:32:03:
18:9b:ab:06:5e:8c:c9:5c:16:14:73:a9:b0:19:86:7e:44:15:
90:35:d3:cc:79:54:65:5f:bf:e6:be:b4:23:31:f0:0e:0e:ac:
9d:9c:88:d5:35:4d:aa:f6:d7:ea:ec:d2:77:56:34:2a:73:48:
f8:80:e4:4f:69:26:04:d1:fc:65:8c:3f:5a:f8:cf:c6:2d:32:
1e:f7:30:d4:e7:e3:46:46:c1:ba:5f:dd:91:d5:f9:4d:a5:f3:
17:6a:56:fe:a1:5e:c2:51:04:ad:ea:bc:03:e6:e6:5c:e4:77:
45:3c:e2:33:f3:d0:9e:83:4f:c6:d0:94:ec:12:3b:4f:18:15:
b5:ee:a0:c4:e3:95:fb:1f:b7:8a:70:ae:ee:8d:f3:39:9d:52:
b5:f9:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org