Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/117A7BFC211F11ECAAFAA630D8A014CE.roa
File: 117A7BFC211F11ECAAFAA630D8A014CE.roa (raw, json)
Hash identifier: 3TNOXWaXbNZytXfRuUPI9I7bWQansSCN97yfTAqfdkY=
Subject key identifier: 57:57:98:EC:37:99:61:05:AD:4B:C3:21:BB:AD:AF:E9:55:5F:2A:E6
Certificate issuer: /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial: 02
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Authority info access: rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/117A7BFC211F11ECAAFAA630D8A014CE.roa
Signing time: Wed 29 Sep 2021 12:16:26 +0000
ROA not before: Wed 29 Sep 2021 12:16:23 +0000
ROA not after: Fri 29 Sep 2023 12:16:23 +0000
asID: 37443
IP address blocks: 82.101.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Validity
Not Before: Sep 29 12:16:23 2021 GMT
Not After : Sep 29 12:16:23 2023 GMT
Subject: CN=6154591a-8e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:a2:8c:3e:dd:63:20:a7:be:fb:36:39:d6:
a7:8f:a0:65:68:12:12:26:a8:ed:1e:d5:6b:f6:aa:
13:df:be:20:c7:61:a4:70:86:bf:3a:4d:ea:de:9a:
bb:a3:46:89:5e:cb:e4:9c:fc:2f:0e:3a:e2:1e:13:
4f:36:2c:c8:77:66:83:3b:62:d4:8c:15:6c:c2:56:
0e:6c:1d:21:b9:75:b4:e6:f5:6c:bf:51:a4:32:6c:
f1:9e:77:c6:1c:97:ca:40:38:61:ec:13:78:0c:10:
83:7f:21:c1:05:b3:8d:24:97:9d:d2:62:a6:17:db:
88:c3:cd:63:75:39:4c:51:45:08:39:37:92:5c:eb:
d3:84:5e:cb:3f:af:4b:ca:13:05:ee:ca:24:71:9a:
7c:29:58:28:b4:2f:09:13:52:26:b5:bc:46:7f:0a:
e8:c2:7d:00:87:1b:c2:22:eb:5c:a3:db:51:ff:df:
88:4a:6d:c5:74:f1:39:35:40:8f:3a:0a:ef:81:26:
a8:8d:f5:8b:31:eb:ec:87:ec:e5:01:0f:c0:ef:6f:
83:95:b2:89:bf:67:19:2b:d7:09:e0:42:30:c2:4f:
65:a3:39:40:ec:ec:a0:65:a4:09:79:e5:af:40:46:
82:64:a5:dc:c1:22:3b:4b:92:26:6f:de:7f:40:6e:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:57:98:EC:37:99:61:05:AD:4B:C3:21:BB:AD:AF:E9:55:5F:2A:E6
X509v3 Authority Key Identifier:
keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/117A7BFC211F11ECAAFAA630D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
82.101.128.0/18
Signature Algorithm: sha256WithRSAEncryption
51:30:36:e7:f3:3d:66:6a:3f:3c:9a:58:e9:94:d8:c2:34:0b:
ec:cc:97:0d:7a:23:89:74:7a:86:a9:ba:8b:f5:09:2d:9c:2b:
50:43:d3:5a:62:c0:48:76:00:85:b3:bb:f8:b8:3e:4d:b6:8a:
d9:10:76:6a:ee:1d:58:d9:05:66:fd:f8:75:8c:b2:54:d7:a9:
e3:9a:b7:51:3e:c6:64:54:a8:af:e1:5c:12:20:07:88:25:81:
b4:5a:25:da:0a:89:45:9a:d3:0e:e6:9c:70:8b:ef:62:bd:b6:
1e:41:93:9f:5f:03:ac:a8:a0:a5:f5:82:d4:6f:be:69:9f:f9:
13:f5:ae:b5:29:8c:8d:2e:ec:e1:17:74:cd:08:bc:88:45:00:
a4:6d:10:6c:0f:a7:7d:8d:e6:68:1b:18:4a:01:cd:b7:d3:aa:
dc:3a:92:c9:2d:81:4e:f3:8d:e4:0a:6f:d6:53:b7:20:bc:d0:
d9:d4:0a:3d:5f:98:e2:6b:65:07:56:ac:4c:3c:65:de:59:1c:
b1:2c:85:5e:17:31:69:9e:c3:07:62:31:b3:15:da:b9:34:17:
8c:fb:29:d3:58:6d:65:21:fc:a6:a2:74:7f:2f:a1:90:fa:75:
b0:7e:8c:a9:73:b8:76:7d:cb:fd:af:b3:58:8b:07:82:5a:77:
15:4d:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org