Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/C6C38C502C5B11EC99E16F52D8A014CE.roa
File: C6C38C502C5B11EC99E16F52D8A014CE.roa (raw, json)
Hash identifier: 8TkvCKgWFbqO0t5LWR6M8yZVsmN4s8HZHbDx40DNjLc=
Subject key identifier: 77:CE:0A:3E:17:C0:3A:78:5B:9C:3A:E4:9A:83:62:E5:4D:07:2E:B2
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 0169
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/C6C38C502C5B11EC99E16F52D8A014CE.roa
Signing time: Wed 13 Oct 2021 19:28:43 +0000
ROA not before: Wed 13 Oct 2021 19:28:39 +0000
ROA not after: Thu 13 Oct 2022 19:28:39 +0000
asID: 21003
IP address blocks: 62.68.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Oct 13 19:28:39 2021 GMT
Not After : Oct 13 19:28:39 2022 GMT
Subject: CN=6167336b-b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:e9:bc:ae:45:a8:e3:e5:3e:cc:8a:c0:9b:
56:5f:de:02:be:8e:f8:65:a9:71:98:66:b0:d0:d4:
a9:9f:06:d5:4e:ec:07:be:19:a4:7e:94:2d:a4:bc:
f0:16:fd:11:dd:38:71:b0:dd:15:22:89:73:bb:ab:
eb:d8:28:c7:50:13:7b:8a:03:3c:58:88:60:4b:71:
15:53:46:10:3c:76:e6:a3:82:68:38:f8:1c:e9:cd:
00:29:eb:8c:d2:bd:72:42:4d:1b:86:54:dc:22:d5:
d9:d1:e8:37:6e:37:62:80:52:0e:e0:71:51:1d:84:
31:48:00:36:ab:b5:24:bd:7b:26:28:94:49:b5:60:
25:48:c7:42:c5:78:a6:94:d5:88:60:6b:3b:ff:50:
5b:db:e5:06:94:47:32:da:41:24:18:ca:43:21:4f:
f4:cc:b4:b2:92:23:02:62:d8:38:3d:31:9d:83:fd:
48:06:3b:6d:ba:0f:a2:52:c2:02:ff:e8:70:be:4b:
3d:6b:bf:f7:45:c3:22:94:f1:c8:10:32:86:72:60:
55:a0:09:27:0b:c5:37:ec:c9:e6:26:99:f9:5f:bc:
9f:2c:4d:67:4b:1f:18:b2:81:2e:6c:94:79:88:ee:
60:d4:fc:17:09:f7:1f:54:00:b5:7b:2e:bb:1c:61:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:0A:3E:17:C0:3A:78:5B:9C:3A:E4:9A:83:62:E5:4D:07:2E:B2
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/C6C38C502C5B11EC99E16F52D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.68.32.0/19
Signature Algorithm: sha256WithRSAEncryption
62:b7:97:cd:63:19:36:54:7d:04:3d:c0:e5:7f:66:c5:97:f6:
cf:0e:92:fa:d4:8a:9e:9a:7b:ce:ac:34:4c:36:97:4c:a0:d2:
fc:8c:5d:3c:4b:a8:14:10:2f:7f:dc:86:13:0f:c6:b5:37:16:
f0:b7:43:08:86:fc:db:3a:f5:68:51:ec:13:47:dd:c4:85:51:
62:6a:00:75:0d:b1:16:97:89:bb:b1:7f:fd:7d:42:d6:21:7a:
92:75:31:e0:af:f7:24:e8:b6:66:5d:2d:6a:29:f2:78:ac:f0:
98:41:7f:ce:d9:09:bb:89:b3:ab:73:a0:ce:90:80:aa:fb:fb:
10:18:49:91:ac:e2:c5:3d:73:75:ee:de:74:8b:f4:a4:99:f5:
d6:06:48:77:2a:33:5d:bd:0c:64:37:41:63:43:98:bb:7a:8c:
f0:45:a6:ba:ad:6f:0e:96:99:ff:eb:6a:53:ef:11:47:13:59:
54:bf:be:ea:36:e3:1f:48:37:2c:29:c3:93:53:a1:89:d0:49:
cc:81:4e:a2:32:d1:c5:d7:60:a5:0b:ff:c7:71:22:e7:92:18:
f6:d0:51:f9:a5:fe:9c:d2:f4:bd:c5:54:72:0d:c2:2e:0e:db:
29:5e:99:e9:9f:a0:85:d5:fb:b4:64:f7:44:35:a1:aa:a8:9d:
d8:25:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org