Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/D27D884A711F11EB85318022F8AEA228.roa
File: D27D884A711F11EB85318022F8AEA228.roa (raw, json)
Hash identifier: nKkgAyQKNdIDz6kbzzVyN5y9JP4VkNfplBRE/fCW1Ik=
Subject key identifier: 1A:D0:50:C4:35:B9:A7:8E:69:27:0D:02:7E:1B:2C:02:09:D7:8F:AB
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 08
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/D27D884A711F11EB85318022F8AEA228.roa
Signing time: Wed 17 Feb 2021 12:58:26 +0000
ROA not before: Wed 17 Feb 2021 12:58:20 +0000
ROA not after: Thu 17 Feb 2022 12:58:20 +0000
asID: 37716
IP address blocks: 196.60.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Feb 17 12:58:20 2021 GMT
Not After : Feb 17 12:58:20 2022 GMT
Subject: CN=602d12f1-d210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:22:a6:8d:68:bf:63:d5:31:38:4b:43:c4:
8a:c9:34:16:0e:a2:8e:e6:27:5e:1d:74:75:be:fd:
c4:e1:5a:26:b3:88:71:12:ce:81:00:72:85:75:ad:
71:5d:9f:1f:35:77:14:85:52:31:f2:81:ad:49:aa:
bc:12:fa:0a:a9:0d:a4:e6:c5:59:7f:27:2d:da:0f:
07:cd:06:92:42:6d:b0:13:bb:14:2c:5c:74:c6:d1:
13:0b:9c:5a:10:e9:7a:48:07:90:24:b8:0b:9b:65:
12:24:fc:a0:ea:bf:9d:69:5a:31:79:bf:0b:a3:04:
72:5f:44:46:bc:24:35:22:b3:59:f4:41:b6:c9:1a:
4e:91:cd:9a:38:d9:a4:d6:a6:a0:d3:d5:5c:00:27:
bf:78:33:3d:bf:2b:b9:00:7b:76:f7:18:ac:e2:71:
39:78:50:01:1f:5c:0a:5c:46:80:ac:92:6b:94:48:
48:10:e0:e7:62:d3:40:31:ce:7f:ee:6c:4c:e6:7c:
c0:06:10:0d:84:49:47:c4:29:df:4c:38:6c:e1:38:
77:ec:78:9a:67:c0:14:15:7a:0b:40:24:0c:36:72:
96:c0:43:92:13:a6:ee:57:85:53:af:26:00:2f:d9:
44:a1:e9:0d:c7:72:94:58:19:72:d9:90:cd:5c:53:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:50:C4:35:B9:A7:8E:69:27:0D:02:7E:1B:2C:02:09:D7:8F:AB
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/D27D884A711F11EB85318022F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.76.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b1:fc:2e:9e:0f:e4:56:ce:ec:d4:8d:da:80:a1:47:41:4c:
d7:1c:17:b1:56:e8:c0:dd:fb:4c:72:22:29:15:53:63:4c:2d:
ad:ef:aa:c2:e3:84:4b:bc:06:13:24:48:6d:6f:90:ce:0c:e8:
5a:be:fa:bb:70:29:ca:7c:58:a8:1d:53:30:35:34:3f:a3:7d:
88:13:7b:c7:48:3a:24:d4:2f:49:93:ee:8f:65:03:8f:25:3a:
73:6d:3d:53:a7:cc:54:5a:99:37:93:69:6b:a3:ea:81:52:c7:
0f:08:49:2f:d3:16:26:e4:a0:eb:06:a5:1e:53:da:05:43:05:
2e:dd:63:0d:1b:8d:0a:f7:ae:4d:87:21:52:46:7e:e4:70:f4:
9b:d7:32:a9:fd:51:9b:71:96:ba:25:12:84:d3:24:da:b0:f1:
21:2a:73:c6:eb:64:c3:37:fb:d7:f0:f2:a8:61:d4:c4:b9:d9:
bf:17:67:12:8b:9f:5b:32:8f:0f:a9:a7:9e:59:28:8a:52:90:
cd:b5:57:87:03:85:59:06:36:0c:c7:58:a2:bf:19:c1:e4:55:
62:6d:94:9b:d3:5c:60:64:a2:e2:58:8e:76:aa:de:dd:1d:d1:
b6:4c:61:c2:e0:69:6a:59:96:62:72:a9:a0:e0:ab:14:10:53:
1b:89:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org