Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/431E8484529611ECA7BBB056D8A014CE.roa
File: 431E8484529611ECA7BBB056D8A014CE.roa (raw, json)
Hash identifier: PtO6SsiXTN6oxJlGYmYUAr8Skwn+YX1K6ey4hCsrSzI=
Subject key identifier: B2:66:E1:D5:1D:3E:98:CF:15:EE:C4:DB:32:B4:6C:2B:0E:57:1A:69
Certificate issuer: /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial: 03CA
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/431E8484529611ECA7BBB056D8A014CE.roa
Signing time: Wed 01 Dec 2021 11:03:07 +0000
ROA not before: Wed 01 Dec 2021 11:03:03 +0000
ROA not after: Fri 01 Dec 2023 11:03:03 +0000
asID: 328366
IP address blocks: 81.26.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Validity
Not Before: Dec 1 11:03:03 2021 GMT
Not After : Dec 1 11:03:03 2023 GMT
Subject: CN=61a7566b-57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:38:44:51:79:95:a7:41:39:b0:3f:e5:c2:
19:7a:4c:ab:59:5b:64:0f:65:ea:42:b6:e3:97:87:
59:4d:ae:f5:4d:94:91:25:13:f2:3e:50:61:d4:32:
cf:9f:45:da:5b:fc:01:60:cf:bd:28:b6:54:9a:e8:
1b:d2:f9:2b:23:b4:05:4d:04:09:8d:f6:08:bd:41:
1b:b4:d4:48:90:a4:61:99:9a:f9:c3:5b:6d:78:c4:
11:84:85:0c:8f:a3:f6:64:2c:f0:f8:b9:c5:0b:99:
76:d7:e9:76:6e:e3:35:a5:79:fb:d4:1b:f1:74:35:
5c:cf:fb:54:f1:d6:11:34:4a:b2:5c:4b:0b:75:56:
11:61:92:a1:22:37:26:a3:4f:33:dc:bf:c0:15:5b:
f9:9e:69:f3:0e:39:0f:3c:25:8e:a9:54:53:22:b4:
af:ba:2d:1f:30:c4:57:f0:4e:4b:4e:5a:82:e5:05:
03:6c:fe:4c:7c:1f:82:89:57:13:ea:22:b9:f1:10:
40:29:6c:7c:ed:08:87:c6:0b:13:86:ca:9b:8b:ad:
74:2d:42:4c:ac:38:92:2f:88:b3:58:14:36:79:44:
6a:a3:79:f1:0d:6a:2b:32:01:bb:00:45:fd:78:9b:
60:28:b0:a4:f3:80:e5:19:e2:c9:36:33:7c:91:c5:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:E1:D5:1D:3E:98:CF:15:EE:C4:DB:32:B4:6C:2B:0E:57:1A:69
X509v3 Authority Key Identifier:
keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/431E8484529611ECA7BBB056D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
81.26.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:95:02:90:7f:2b:ef:f5:e2:4d:3a:f1:13:8a:b1:db:9b:37:
79:6e:e6:b4:0d:50:de:6e:d0:66:a4:ec:3d:79:fe:bd:6b:ab:
8a:db:b9:f2:eb:e1:cb:9c:e7:0b:89:a1:2a:38:25:34:66:18:
bf:c6:59:53:a1:79:30:94:1d:c9:33:44:53:61:34:aa:2c:f6:
59:d3:16:f3:a3:0b:06:7b:2f:f4:7e:18:42:6d:70:b5:a6:73:
21:3d:84:50:54:73:24:99:e0:f7:a1:cc:c9:be:ed:d8:36:6e:
b0:35:e8:ad:8a:99:d5:ee:64:b9:12:a0:34:7d:46:84:ea:48:
d2:73:8a:cf:96:08:b7:2a:a4:8d:38:27:e7:f1:ea:92:a5:3f:
85:d3:bc:55:3c:16:45:ed:d5:ba:6c:bd:20:ae:0b:5d:ce:00:
02:84:36:e2:85:17:e5:ef:0a:00:6a:ea:79:17:a2:35:04:b9:
c3:49:c6:60:0a:fb:6b:d0:fa:3a:af:18:a3:5f:13:84:36:02:
56:87:86:07:88:f7:37:87:25:e0:aa:bc:b8:4b:c0:89:e9:ce:
39:f0:38:de:78:15:2f:db:57:d9:f6:8f:9f:0a:7c:20:c9:9b:
a0:86:93:ca:92:76:95:ee:ba:5a:e3:53:82:26:28:b1:b1:f6:
bf:13:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 01:22:08 2023 by rpki-client on console-ams.rpki-client.org