Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/BF12DF1E050111ECBB2D5508D8A014CE.roa
File: BF12DF1E050111ECBB2D5508D8A014CE.roa (raw, json)
Hash identifier: DAL6WYD85CSND/MCW9SaPM1vA+BSyiKq8z2y9Gvlj4U=
Subject key identifier: 48:B5:C0:F4:53:96:22:A8:36:82:6E:49:A1:28:D9:92:9A:85:C2:E4
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 31
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/BF12DF1E050111ECBB2D5508D8A014CE.roa
Signing time: Tue 24 Aug 2021 17:37:01 +0000
ROA not before: Tue 24 Aug 2021 17:36:57 +0000
ROA not after: Wed 23 Aug 2023 17:36:57 +0000
asID: 328913
IP address blocks: 196.49.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 24 17:36:57 2021 GMT
Not After : Aug 23 17:36:57 2023 GMT
Subject: CN=61252e3d-615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:e0:8f:55:c5:11:f9:47:00:92:f2:ae:2a:
d9:8b:00:42:25:79:d2:8f:ca:9c:ac:b5:30:b0:01:
9d:98:a9:dc:a3:34:68:82:e5:a1:03:7e:00:3f:55:
73:d4:50:bd:51:fe:cf:16:2d:11:65:44:d5:bc:27:
a0:ca:0c:ea:41:6a:2c:d9:b6:35:0b:25:a0:c6:9e:
f0:83:25:18:cd:c1:ed:60:f1:d6:3f:e2:bd:3e:1f:
c7:87:b7:bc:6d:2e:69:b9:d8:2b:3e:8f:5c:ba:3e:
d8:23:7d:64:66:77:58:64:be:cf:41:ef:b0:7c:20:
3a:4c:f6:c8:56:49:27:13:16:78:54:e1:92:86:0b:
b5:64:83:52:10:d6:c4:b0:c2:9a:bb:94:3d:11:01:
2b:64:20:d4:53:bb:e1:c5:0b:eb:9f:4a:56:14:2b:
1e:9d:c5:00:14:70:9f:d8:67:03:30:fd:7d:c4:6d:
20:0d:4f:9c:91:1c:b9:c9:4a:2a:33:5b:22:30:f3:
b0:f1:28:95:6a:ca:fb:f6:da:a6:ce:e0:17:b4:eb:
18:23:ed:2a:a0:c3:14:c5:af:b4:8d:0b:eb:8f:b6:
37:b1:34:4f:e9:f4:e4:42:da:df:f4:9e:08:e1:a2:
df:98:47:7f:8b:b6:8c:a9:57:c3:1e:6f:a5:64:f4:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:C0:F4:53:96:22:A8:36:82:6E:49:A1:28:D9:92:9A:85:C2:E4
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/BF12DF1E050111ECBB2D5508D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6b:46:72:3c:7a:0f:a5:69:8b:4e:55:52:ae:61:53:92:6d:
e9:13:da:f9:91:ae:c4:03:6f:61:6f:01:88:91:2b:a6:ee:9a:
ab:85:22:ab:ae:71:be:a5:ba:89:ca:95:b7:cb:b5:7b:6b:f7:
ee:87:5f:82:b2:a9:4d:21:29:7d:b9:f9:37:b5:d1:4c:0f:96:
69:7e:de:7b:da:4f:06:69:44:ac:c0:f5:52:68:06:2c:86:9e:
b1:2c:e5:04:16:79:31:06:6d:98:a8:2b:43:ab:ed:18:7a:21:
ba:36:f2:dc:da:24:68:28:c7:9f:01:16:0d:95:00:c5:e0:af:
a7:ce:05:db:0d:b4:54:0e:51:65:3a:01:7b:97:80:bc:74:5f:
3d:b0:59:89:51:6c:53:fb:1d:8c:4e:c0:1c:8f:62:8f:89:b0:
62:c1:30:cf:61:30:53:04:ab:4e:02:6b:b4:67:2f:ee:22:8e:
2d:0f:dd:f3:74:be:9b:57:89:b7:96:24:5a:6d:d3:97:e9:88:
29:a4:93:5c:0e:74:59:25:64:5e:a0:88:96:66:66:6c:07:6e:
25:b2:42:4e:a4:f5:76:81:ed:09:cc:d1:f7:1e:c8:65:16:97:
a2:d8:6f:ac:e5:d4:b4:19:3d:f0:83:9e:6a:f5:80:d7:b0:5e:
0a:39:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 01:57:20 2023 by rpki-client on console-fra.rpki-client.org