Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/564731F6D3DB11ED9CF7C881F1222468.roa
File: 564731F6D3DB11ED9CF7C881F1222468.roa (raw, json)
Hash identifier: r1JLJzWay8bSijDT7y4+J4wjbDoaE2GNR7lcOIRZatU=
Subject key identifier: 1F:72:14:28:F4:88:CF:C6:A4:B4:94:99:CD:8B:99:BA:11:4A:5E:78
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 032D
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/564731F6D3DB11ED9CF7C881F1222468.roa
Signing time: Wed 05 Apr 2023 17:57:32 +0000
ROA not before: Wed 05 Apr 2023 17:57:28 +0000
ROA not after: Tue 30 Apr 2024 17:57:28 +0000
asID: 37716
IP address blocks: 196.223.47.0/24 maxlen: 24
2001:43f8:b60::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Apr 5 17:57:28 2023 GMT
Not After : Apr 30 17:57:28 2024 GMT
Subject: CN=642db68c-1a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:50:a2:75:ec:ad:8a:7e:c3:fe:ce:6b:e8:
08:6c:70:17:3c:16:a2:ac:3c:17:1d:bb:53:71:9c:
c0:c4:02:61:88:b0:c9:59:01:c8:c2:35:b6:82:d8:
23:4d:5a:fb:32:b9:a1:30:cf:3f:96:af:86:9b:9c:
82:23:b7:bd:1f:eb:55:3e:7c:ce:f4:c7:81:e3:19:
55:c8:07:e3:52:9b:d9:9a:18:82:61:c1:e8:79:8d:
6a:99:d2:cf:66:55:5f:4c:0f:e5:bf:66:7c:0a:d7:
a7:c4:96:4d:2d:27:9f:b3:ce:da:b8:9c:96:ae:a4:
d8:b6:d3:cd:a8:a2:b0:f7:64:7a:cd:29:f1:44:3a:
7e:9d:2b:73:b3:27:83:0a:9c:c6:d6:0c:0f:45:b7:
da:2c:ac:0d:4f:e1:07:f9:f0:12:10:48:0e:45:cf:
b9:00:80:6d:7c:db:20:01:3a:f4:24:1c:fa:d8:19:
5d:ce:5a:a0:e4:1a:d8:ab:91:2f:76:87:ce:42:f7:
1c:2e:a1:9c:31:be:f9:c2:5c:17:28:0c:07:a8:7d:
98:2e:d4:56:66:bf:a2:d8:cc:44:b2:12:80:7f:ff:
90:41:ab:fe:96:7a:74:a4:0c:4e:3b:48:cc:83:95:
2a:26:21:70:28:a4:46:69:ef:f2:10:30:7e:db:11:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:72:14:28:F4:88:CF:C6:A4:B4:94:99:CD:8B:99:BA:11:4A:5E:78
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/564731F6D3DB11ED9CF7C881F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.47.0/24
IPv6:
2001:43f8:b60::/48
Signature Algorithm: sha256WithRSAEncryption
49:05:44:f3:10:9d:ec:94:9d:19:58:b3:05:69:1e:14:5a:52:
57:6e:a7:02:7e:b1:87:fd:46:ee:3d:c1:20:bf:ed:53:de:bd:
ab:79:8e:8b:40:c8:dc:1f:f2:e1:50:0d:55:08:7d:fa:dd:98:
71:ab:2f:4d:a8:09:5c:dd:52:2b:c7:d5:47:f4:30:32:32:c5:
59:d4:71:6a:2c:dd:4e:25:56:ec:8b:f3:15:44:8b:61:a6:c6:
90:4d:6c:7b:6a:ed:20:a4:7c:11:5d:8b:8f:57:33:cb:15:e3:
09:92:84:c7:de:95:64:27:e0:3f:83:82:90:87:e2:c5:91:26:
ef:16:29:f4:3c:f0:fa:69:00:99:f5:72:15:c7:9a:16:c6:26:
ea:0a:ce:b4:03:7a:3e:d8:90:7f:91:94:a0:7f:ba:0e:04:7c:
e1:40:ac:13:e2:fd:3f:eb:64:33:a7:fa:1d:6f:c4:a2:42:93:
08:c7:0d:b5:dc:fe:ae:db:25:c4:f0:90:47:aa:bc:fe:c6:ef:
52:5a:59:49:ca:98:3d:3f:32:70:77:94:0c:cb:69:78:f1:c7:
3b:98:23:4f:44:42:0f:af:8e:9e:9b:ab:b6:54:9d:b7:f3:96:
d9:33:4a:fc:fc:76:ed:dc:94:71:00:4a:5e:b1:ff:ec:ad:c0:
21:fc:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org