Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
File: D1C7CD7EBB1111ECAEAE00CB5A40D577.roa (raw, json)
Hash identifier: rxMpLXHN+UxUplZQN3hOfUnpT69hTMz7dFn02TuXFMM=
Subject key identifier: F1:55:1C:4F:E9:AC:6C:C9:20:9E:64:8E:5B:BF:1D:EC:E4:04:71:F0
Certificate issuer: /CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Certificate serial: 10
Authority key identifier: 94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
Signing time: Wed 13 Apr 2022 10:09:35 +0000
ROA not before: Wed 13 Apr 2022 10:09:31 +0000
ROA not after: Sat 30 Apr 2022 10:09:31 +0000
asID: 22750
IP address blocks: 197.211.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369F2FAAF/serialNumber=9478315A1E5C5615A9228BBECA48A396870B847E
Validity
Not Before: Apr 13 10:09:31 2022 GMT
Not After : Apr 30 10:09:31 2022 GMT
Subject: CN=6256a15f-9604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:d0:c1:c9:9e:8a:81:46:4a:56:39:4b:c9:
f1:47:39:5c:17:a4:8a:29:16:61:86:3d:38:7a:f6:
64:eb:11:8b:fc:a7:2b:8d:99:d9:50:5e:85:ad:8b:
ca:77:c4:43:d0:e3:03:6e:44:18:fa:79:49:ec:19:
d0:7a:fe:98:a6:8d:be:50:dc:ea:20:8a:3d:10:3b:
d9:0c:3a:e2:27:f1:d4:94:fe:7f:a5:d0:b2:4e:07:
e4:78:9b:7c:27:17:ef:a4:9d:23:e2:bc:b8:83:0c:
e2:d1:ff:11:41:cd:1e:53:30:9c:bd:08:ff:3e:03:
e8:96:4c:23:de:bc:39:05:73:a5:2b:19:25:38:5f:
43:85:3e:b6:36:94:ee:a6:47:f0:4f:a2:0c:66:4b:
1e:ae:eb:86:d7:1a:2a:15:47:8a:c1:71:ad:50:16:
10:9d:4e:f1:85:42:fe:dd:64:70:ee:14:ec:14:b9:
59:e4:49:72:f4:49:e8:8b:86:4a:1b:f8:4c:0f:59:
d4:22:19:5e:fb:5a:cf:f6:c9:fe:47:d1:7a:55:7c:
5f:80:0e:1e:6d:c0:00:49:77:f2:4f:af:3b:97:2b:
a1:8e:7f:8f:41:46:6d:6b:cf:36:75:75:31:5c:84:
8e:67:e1:b6:d8:ce:a8:7c:5e:5e:f2:3a:f7:a2:4c:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:1C:4F:E9:AC:6C:C9:20:9E:64:8E:5B:BF:1D:EC:E4:04:71:F0
X509v3 Authority Key Identifier:
keyid:94:78:31:5A:1E:5C:56:15:A9:22:8B:BE:CA:48:A3:96:87:0B:84:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/lHgxWh5cVhWpIou-ykijlocLhH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lHgxWh5cVhWpIou-ykijlocLhH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F2FA/69B05CBABB0C11ECA7DC65BB5A40D577/D1C7CD7EBB1111ECAEAE00CB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.211.128.0/18
Signature Algorithm: sha256WithRSAEncryption
43:ff:ef:cd:9f:1a:95:17:e7:0c:74:23:86:8c:14:47:cc:41:
de:73:7f:63:b2:aa:d9:97:20:b1:f9:7b:74:bc:4a:df:0a:74:
17:c8:8e:b4:b8:6e:07:8e:9a:77:5d:9b:9a:e8:7a:e9:1b:36:
0b:a5:ce:f1:86:00:a2:3e:15:13:2a:f2:73:2b:69:41:76:b5:
f5:59:8d:b1:e8:67:94:5c:c2:56:f1:6a:6b:c7:9c:75:53:a0:
c7:08:d5:fa:9a:17:a3:8b:b5:10:69:d6:56:3a:48:de:a4:38:
95:26:1d:97:77:a1:a2:07:8e:9b:65:ba:28:23:1f:50:b9:64:
18:5f:dd:ff:ca:40:a0:d0:79:bb:6f:d6:85:89:df:30:ca:be:
11:2a:28:e6:7d:1d:d7:75:88:98:d9:95:d1:1b:94:ce:bd:db:
50:4a:2e:6e:b1:07:40:d6:d4:76:cf:c6:6b:4f:91:a8:61:7e:
47:07:26:3c:ac:27:b4:3f:02:68:b1:98:38:09:b0:41:34:f3:
6d:18:3a:dd:4b:9e:37:42:42:44:8d:53:3b:b7:98:0f:e5:90:
81:c6:76:01:11:18:e9:85:d5:30:dc:47:89:6c:b9:d1:67:63:
fb:d9:b4:58:40:89:72:a1:4e:cb:fd:d9:09:00:90:77:39:4a:
e2:bf:e1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org