Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/9D17C8E6711F11EBBB534D22F8AEA228.roa
File: 9D17C8E6711F11EBBB534D22F8AEA228.roa (raw, json)
Hash identifier: DzbDE12dv4w5HV6Y4I48SyXkEeTsvTCtw6ZddttirYg=
Subject key identifier: DD:5E:FD:6B:FB:C5:1B:DA:C2:BE:95:D4:EA:CE:97:A0:35:22:F4:F1
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 06
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/9D17C8E6711F11EBBB534D22F8AEA228.roa
Signing time: Wed 17 Feb 2021 12:56:56 +0000
ROA not before: Wed 17 Feb 2021 12:56:50 +0000
ROA not after: Thu 17 Feb 2022 12:56:50 +0000
asID: 37716
IP address blocks: 196.223.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Feb 17 12:56:50 2021 GMT
Not After : Feb 17 12:56:50 2022 GMT
Subject: CN=602d1298-f932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:93:f0:11:36:ad:e2:9e:3c:92:2c:6d:1d:
90:75:e7:b5:ff:dc:49:66:ca:b5:89:ff:37:25:31:
b9:2f:d2:82:5f:f6:f8:d2:94:fc:51:f0:6d:ad:08:
e5:81:73:e1:31:3a:bc:30:3a:92:76:4f:1c:77:69:
43:01:2c:91:32:00:70:6b:84:f4:ae:db:b9:30:7a:
be:48:22:76:af:f4:3f:95:ce:f0:3a:7a:d4:13:db:
69:18:2f:e3:64:ed:d1:2a:f4:08:24:e4:d9:58:9e:
e3:a5:e0:cc:44:e3:ae:5d:cf:a4:8f:a2:8b:f0:a5:
e3:4f:2b:1a:29:7c:89:ff:18:69:a9:de:8a:a3:38:
95:3c:6d:e1:06:81:32:78:e8:cd:ae:5e:75:8f:eb:
8f:ef:b7:e4:c3:fc:1a:c7:c2:9d:14:06:bb:29:2c:
d8:78:3b:f9:20:5c:c9:8e:43:68:f5:0f:5e:5d:05:
57:2e:7e:39:65:71:b4:37:e8:30:be:8c:e3:f6:7c:
ca:0d:90:c5:19:fa:14:cb:05:47:ce:64:c8:2b:46:
ea:69:fe:f2:da:b4:3c:8b:a5:cc:28:e1:e7:c4:8f:
d5:93:cc:06:15:b8:f3:c9:0d:7e:96:02:7e:88:27:
55:b2:7f:57:ca:02:ac:2e:1a:c5:d4:79:1a:51:09:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:FD:6B:FB:C5:1B:DA:C2:BE:95:D4:EA:CE:97:A0:35:22:F4:F1
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/9D17C8E6711F11EBBB534D22F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:17:e8:25:e1:33:90:d0:b4:a5:bb:fe:eb:dc:f0:1a:6f:6b:
f9:2d:c1:8e:15:83:29:d6:3a:6e:10:e2:78:12:81:e0:24:8c:
76:28:aa:29:d6:a5:cb:0f:2b:35:88:76:6c:e1:b0:b8:56:7c:
4e:1a:e0:89:74:98:ac:84:90:f9:24:06:9d:b3:0b:c9:b3:d4:
a8:c6:6b:48:f6:78:d0:f7:f4:51:d5:8a:d8:ac:59:32:bb:17:
af:1f:0a:62:16:90:51:85:55:4e:a3:5c:c8:7b:b6:07:67:5f:
ab:a6:77:66:55:25:0b:ba:bf:d4:63:fe:f2:d9:6b:bb:44:15:
63:a7:fd:41:4b:53:b9:ab:6d:ea:32:89:8d:eb:97:8a:c7:95:
22:6b:6d:9b:6f:7d:87:72:43:4f:e3:b2:27:ee:54:46:84:ab:
cf:52:05:98:70:df:0c:b0:fc:f9:19:58:2a:d4:58:2e:4e:1b:
90:ae:8d:72:30:da:e2:63:d2:dd:a6:1d:07:fd:45:21:cb:e9:
97:16:ae:3e:89:c9:cb:21:ef:a3:da:58:b0:fa:56:3c:15:dd:
0d:17:25:75:a8:46:41:63:f7:90:10:2e:bf:92:49:9f:bb:d3:
2b:aa:c4:13:b3:cb:d4:c3:92:30:87:7f:d9:e8:b6:17:04:b9:
9c:0f:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org