Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8FD905FC711D11EBBFEA3D20F8AEA228.roa
File: 8FD905FC711D11EBBFEA3D20F8AEA228.roa (raw, json)
Hash identifier: +0f+QcbvA17Z/HyWw4Niqo7ZlO1D/slh4kQ8OtZNTZ4=
Subject key identifier: EE:1F:EF:6B:E0:12:9C:93:45:72:4E:4B:C9:0C:3A:0C:BF:46:31:C7
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 02
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8FD905FC711D11EBBFEA3D20F8AEA228.roa
Signing time: Wed 17 Feb 2021 12:42:15 +0000
ROA not before: Wed 17 Feb 2021 12:42:11 +0000
ROA not after: Thu 17 Feb 2022 12:42:11 +0000
asID: 328010
IP address blocks: 196.49.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Feb 17 12:42:11 2021 GMT
Not After : Feb 17 12:42:11 2022 GMT
Subject: CN=602d0f27-010b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:8c:70:f8:71:30:f9:6d:76:95:d0:49:9a:
52:c6:ce:90:1e:2a:25:9f:22:7c:0c:0a:cf:82:3c:
c5:a4:64:f1:60:76:59:9f:c2:66:48:3f:b2:33:f9:
21:66:5f:62:c0:79:fa:f0:86:ba:0c:f0:22:e1:4b:
7f:30:fb:1d:b9:f6:d5:69:e7:0e:03:d9:77:83:6c:
a6:e9:cc:53:8a:fe:15:1e:a6:a0:b8:b4:b0:4c:ef:
e4:1f:c5:01:ed:9d:90:f1:d0:28:11:81:25:66:d2:
c4:38:05:16:ac:0a:db:47:32:39:0d:0f:ff:69:84:
50:ce:5b:44:10:47:d9:0c:0a:ee:31:6c:0c:78:f8:
45:a5:12:14:02:72:e1:1b:c2:e1:51:44:26:6b:de:
dd:65:92:2f:f9:ab:35:54:b7:1a:83:80:b4:9f:20:
61:7f:f9:34:21:39:49:78:b2:75:da:60:d5:16:c4:
a3:a6:08:61:c7:b3:ad:34:2b:8c:12:56:96:82:06:
f2:7b:93:93:46:67:52:35:46:cb:95:61:78:65:79:
be:be:2b:bf:b3:27:0a:06:4c:0f:f4:b9:9a:6c:aa:
ce:3f:b6:80:c6:82:8c:15:9d:d2:bf:bb:7f:55:a3:
6d:85:f6:8c:41:7a:3f:60:67:6c:f8:d2:b8:94:26:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:EF:6B:E0:12:9C:93:45:72:4E:4B:C9:0C:3A:0C:BF:46:31:C7
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/8FD905FC711D11EBBFEA3D20F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:2e:c6:3b:15:36:41:54:59:5e:98:4e:0e:de:c3:86:24:a4:
33:ed:b2:25:ab:75:82:14:9d:fb:d3:f8:fd:61:85:3e:7f:2d:
80:cf:b9:e5:b1:d9:10:4a:a1:63:26:b5:55:10:a6:c6:07:05:
ea:f2:33:8f:da:f5:a2:d4:cc:3f:08:dd:a0:55:a1:41:cd:6b:
56:b6:7a:c4:b7:a7:9c:9c:0c:60:1e:22:2b:7c:3b:7e:a6:91:
a0:60:9e:ad:47:54:40:9d:f2:55:35:5f:76:0c:e5:ad:61:63:
13:f1:93:dc:8e:c0:4f:08:93:fa:31:fc:ff:eb:3b:da:43:5c:
c7:fa:fe:85:7f:15:3d:ca:b0:74:7d:37:ae:49:9b:64:67:e8:
95:2f:4e:88:33:65:ab:a0:82:9f:9a:e9:b3:ac:7f:03:00:80:
d2:1c:d1:3c:fe:20:49:46:15:0f:11:89:6c:34:de:ff:51:0c:
2e:4f:90:78:07:f7:19:12:c0:97:13:a5:92:a7:2b:aa:1e:2e:
31:6f:8e:be:9c:e1:9d:4b:24:c1:1e:24:05:2c:b5:65:5f:5c:
5a:06:53:05:33:63:8c:78:1b:1f:3f:e1:c4:01:58:37:28:f5:
4d:1b:d5:0d:81:f5:07:0d:3f:7a:67:3d:6b:a2:98:c0:4a:8d:
55:28:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org