Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8AF2F8A8D3DC11EDAC5C2E85F1222468.roa
File: 8AF2F8A8D3DC11EDAC5C2E85F1222468.roa (raw, json)
Hash identifier: PJki6aTdFKu7TXXaw6/LdJNaq3ugJQcS2IFvFhAKqow=
Subject key identifier: EF:E0:C7:25:96:7A:7B:75:54:BB:40:0C:E9:3E:00:FC:9C:7D:95:D7
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 0331
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8AF2F8A8D3DC11EDAC5C2E85F1222468.roa
Signing time: Wed 05 Apr 2023 18:06:10 +0000
ROA not before: Wed 05 Apr 2023 18:06:05 +0000
ROA not after: Tue 30 Apr 2024 18:06:05 +0000
asID: 37716
IP address blocks: 196.60.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Apr 5 18:06:05 2023 GMT
Not After : Apr 30 18:06:05 2024 GMT
Subject: CN=642db892-17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:93:c0:03:10:8e:6e:bc:e8:2f:3b:70:16:
c3:e5:b6:8e:1a:00:9e:db:45:b3:44:1c:c3:0b:9e:
f7:44:1c:81:67:35:2a:cc:e8:a5:af:65:82:35:b3:
87:f3:f6:f1:6c:fd:cf:a9:62:93:6e:06:a8:1b:4f:
27:e4:0c:da:07:ff:4a:0e:b9:4e:7e:c5:c9:bd:80:
b7:1a:ba:34:41:2f:f6:b2:48:9f:9d:a8:d1:15:ba:
be:89:cd:f1:6e:35:61:2e:b7:16:01:d7:a4:13:b5:
5f:c7:3e:3e:dc:99:29:8a:4b:b2:9e:5c:4a:2c:0d:
e0:40:60:b8:98:c3:e8:2e:46:67:99:fc:ad:6e:84:
05:31:70:d7:fa:b9:72:96:98:5d:7e:4d:90:f9:24:
79:c7:bb:20:a4:72:92:94:29:54:66:35:56:68:a6:
c4:96:18:87:38:2f:bb:44:a5:6f:06:d3:62:0a:26:
62:a5:ff:54:cc:29:d0:c3:24:0a:dc:6e:55:c7:d9:
12:2a:7d:71:88:59:dc:f0:bd:7b:ce:fc:22:3e:b4:
12:46:53:96:ae:55:ef:95:ce:c6:41:e4:88:e2:61:
e9:1e:58:fe:25:a4:4b:95:44:17:90:94:6c:21:61:
b7:83:b8:ef:a3:77:8f:17:68:44:1b:a9:e5:cd:60:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:C7:25:96:7A:7B:75:54:BB:40:0C:E9:3E:00:FC:9C:7D:95:D7
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8AF2F8A8D3DC11EDAC5C2E85F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8b:8b:19:8f:99:6c:d9:33:f9:a5:ab:41:14:aa:64:33:e3:
0c:60:b0:24:22:9a:ff:a7:19:c7:8a:60:27:74:57:04:14:1c:
ba:7e:7b:8a:33:78:67:26:2d:ad:f0:d7:c5:a1:d4:b9:1c:61:
0a:33:fc:31:bb:76:82:0a:81:bc:f6:b9:cf:b0:27:30:68:fd:
1d:3f:8d:eb:c2:14:a1:25:da:02:3b:e6:a5:f0:86:86:89:f4:
1d:81:52:92:dc:a1:90:67:4b:c9:ac:c0:70:9f:44:19:d1:bf:
f5:c4:63:b6:b7:d1:ea:18:26:b6:c3:39:d9:94:56:d2:30:97:
53:67:f8:2a:6a:56:ae:ec:a6:e9:b9:17:bf:39:4e:7c:9c:0d:
c8:69:a0:5e:db:34:d0:37:9a:55:28:4e:b4:2d:8f:d5:e8:a9:
48:81:f6:cc:4a:03:f7:c4:c9:01:8d:5c:a9:32:0f:77:42:a1:
e9:11:bf:94:d1:d4:5d:de:88:12:98:a8:35:f5:1e:f9:89:79:
7a:dd:4d:e5:5e:65:9c:24:b5:fe:b1:e4:23:ab:59:b6:28:9f:
5b:26:04:1b:a8:93:1a:3d:67:8e:33:80:f9:e8:47:3c:ec:00:
11:21:97:b3:d5:55:ec:a9:a9:14:0a:db:1e:f0:d5:50:be:b4:
ae:3a:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org