Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/C8E4DE481DE711EDB18B97B5F1222468.roa
File: C8E4DE481DE711EDB18B97B5F1222468.roa (raw, json)
Hash identifier: EqJlGuw8HjpvIFawXV53n+Wz2tMRztCIkbvCuWFTIE0=
Subject key identifier: 72:36:6F:99:29:07:F4:52:ED:C3:CB:86:5D:90:03:2D:68:6D:3B:43
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 11
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/C8E4DE481DE711EDB18B97B5F1222468.roa
Signing time: Wed 17 Aug 2022 04:48:06 +0000
ROA not before: Wed 17 Aug 2022 04:48:03 +0000
ROA not after: Fri 31 Mar 2023 04:48:03 +0000
asID: 25818
IP address blocks: 196.1.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Aug 17 04:48:03 2022 GMT
Not After : Mar 31 04:48:03 2023 GMT
Subject: CN=62fc7306-6ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:59:da:23:25:55:c5:4f:a1:ab:aa:21:df:
9e:b3:c5:18:34:58:20:1c:7d:40:72:07:a5:15:cd:
bb:24:3f:19:bc:9a:22:9c:e5:30:34:19:df:8b:8e:
44:9c:85:22:04:51:49:4b:4b:36:21:de:0e:ed:bb:
71:39:b2:d7:fa:b4:25:b9:1e:c6:88:dc:67:98:6c:
95:65:ea:3b:84:4e:2d:62:31:8c:6d:89:2c:5c:fe:
ab:f5:d6:bf:4b:4c:c1:3b:bf:00:d9:56:ab:70:4b:
b5:0c:fe:f9:59:d3:b6:84:81:6d:c2:b4:4b:4d:01:
86:97:ca:3a:8f:39:14:2e:9f:ab:64:51:7a:07:13:
23:a7:28:a3:93:f3:8d:35:54:a9:c4:c1:de:8f:ab:
7f:a1:07:35:f3:52:ee:90:21:85:4d:7e:09:b5:51:
ab:fe:6f:5c:8a:49:42:e5:3a:29:4e:3a:6e:71:7d:
e4:3d:4b:10:e1:d5:fa:61:7a:ec:d9:d1:e3:6e:1f:
d9:76:af:a7:f0:97:12:ae:de:8a:bb:24:5e:66:82:
ad:64:99:0a:b1:d4:34:75:ee:aa:33:79:1b:21:29:
17:35:2e:06:17:34:cb:4a:a0:2f:a3:9e:a7:fb:1e:
41:f8:70:eb:e8:4d:d6:83:92:23:b1:ad:6b:c6:c5:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:6F:99:29:07:F4:52:ED:C3:CB:86:5D:90:03:2D:68:6D:3B:43
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/C8E4DE481DE711EDB18B97B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.144.0/20
Signature Algorithm: sha256WithRSAEncryption
94:f3:00:ff:9e:63:15:44:0d:54:82:31:56:8e:95:4d:cf:39:
7f:f8:e5:d5:35:cf:fc:53:b7:c1:a3:14:5a:9a:e2:fc:ed:73:
3b:27:4d:51:a7:7f:b6:a3:f0:62:36:e8:df:7f:20:f4:2c:49:
2a:c8:48:ab:ab:3f:4f:7a:a0:d7:94:e8:b4:9f:4f:07:4d:b5:
3f:fb:0d:75:c8:3e:ee:18:c7:96:1e:e7:e1:e2:06:51:5f:29:
00:0a:63:ee:0e:62:51:50:26:d8:ca:eb:4e:d8:ea:c9:2a:be:
6a:51:93:a5:d3:eb:a9:1c:be:b1:60:a2:1b:f0:ae:8f:81:40:
11:3c:b3:00:4e:c0:89:07:08:cc:d4:65:26:b2:20:91:39:2e:
32:aa:b6:a9:db:42:7e:53:23:21:26:8d:9a:63:02:ce:ec:1f:
ef:e0:bd:d2:28:ed:e9:83:26:f1:7e:97:70:b8:a5:23:55:c9:
2a:8d:64:17:60:44:84:b7:94:10:b8:84:14:4d:5d:3e:42:c2:
82:86:b9:2a:62:a2:7a:c6:a0:f8:67:71:ab:ea:e2:5b:7a:2f:
0d:db:af:b5:bd:ae:36:ca:e8:e5:b5:3a:7f:a1:f1:95:a8:33:
de:56:16:0d:27:29:11:6e:12:4e:83:14:2e:59:61:2b:3e:fb:
ae:bc:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org