Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ECFD483E928011ED8F64BDE7F1222468.roa
File: ECFD483E928011ED8F64BDE7F1222468.roa (raw, json)
Hash identifier: qa3lJJF3oB2apG/L8CzZ2tQlSdXJQMs8XlyCyNJV3ic=
Subject key identifier: AD:DC:24:EA:FA:BE:F8:E5:50:D4:44:AD:B5:EB:33:12:DA:17:B7:E7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09D0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ECFD483E928011ED8F64BDE7F1222468.roa
Signing time: Thu 12 Jan 2023 13:56:35 +0000
ROA not before: Thu 12 Jan 2023 13:56:29 +0000
ROA not after: Fri 12 Jan 2024 13:56:29 +0000
asID: 35913
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2512 (0x9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 12 13:56:29 2023 GMT
Not After : Jan 12 13:56:29 2024 GMT
Subject: CN=63c01193-82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:75:51:bf:02:30:67:02:70:16:95:bf:75:
a3:7d:10:f6:c9:57:16:24:bc:6a:30:08:34:6f:24:
3c:f5:cc:bc:85:fb:d8:30:ae:5a:74:7d:65:eb:b8:
fe:c4:d9:1a:25:99:dd:da:cd:e6:25:4b:30:65:22:
89:44:ad:20:8b:d2:31:dd:2d:f1:6f:98:97:6e:38:
d7:db:bb:c5:b8:32:79:65:56:9b:6d:4c:99:a2:9b:
93:e8:bb:09:4b:ae:b1:ff:42:a4:80:ab:00:8e:de:
13:7b:7d:7d:1d:00:09:3b:8a:d1:61:64:59:9d:a2:
7c:ff:e6:07:09:32:7e:93:a9:34:32:d8:ee:5b:9c:
9e:38:68:73:7b:73:fc:48:03:2c:80:6e:06:bc:42:
1d:da:ac:fb:87:50:93:a9:27:4e:d5:85:e0:0e:9d:
fe:f2:b3:f7:6d:16:6a:e7:f1:71:98:3e:c6:5f:03:
e0:15:cf:20:36:01:9a:a3:3b:5d:36:ca:de:b5:f3:
0f:f7:4e:1e:ba:9d:89:47:df:29:10:2a:d0:f7:34:
0f:8f:78:3a:de:78:fa:6b:6a:ec:ce:0e:6a:e5:f2:
aa:91:06:8b:31:cb:c2:ed:63:57:fe:25:12:b6:52:
6d:75:51:79:16:7f:32:bd:b3:ce:60:8d:3e:d7:3e:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:24:EA:FA:BE:F8:E5:50:D4:44:AD:B5:EB:33:12:DA:17:B7:E7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ECFD483E928011ED8F64BDE7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ee:10:4d:90:ff:13:e9:da:40:5e:0a:0d:d9:7a:7d:17:49:
3f:47:ce:3f:73:c0:a9:78:17:9c:48:4c:c7:21:3c:d5:f1:b6:
53:d3:8d:80:ac:21:a0:08:2d:1d:a5:bf:90:22:3f:33:11:82:
5d:2b:9e:28:dd:97:b0:05:b8:30:c8:0d:5d:4b:d7:0f:72:28:
e4:5b:aa:cc:b6:e5:21:69:a6:97:88:2d:c7:9c:1d:59:ab:36:
37:ca:94:d0:96:bd:0d:aa:ce:5a:ed:5f:e1:2e:37:92:16:1a:
44:c3:0b:df:e2:0e:ac:0f:6f:46:12:8f:0e:e9:95:fa:e5:54:
b0:5d:4d:31:2b:ac:de:55:d3:29:16:a7:3e:88:ae:25:0f:65:
70:19:96:1a:91:83:44:19:3e:03:0a:bf:21:9f:52:f7:99:61:
b6:ac:ea:a5:50:ce:2d:9c:06:62:68:75:90:3f:2a:e6:7a:42:
8e:11:8b:98:bd:18:07:fa:73:c0:78:70:6f:8d:5f:1e:09:c6:
40:3a:7f:73:33:c3:9d:16:8d:76:75:7c:04:f6:fb:12:72:9a:
52:18:71:99:b8:2c:fb:5f:6c:9c:eb:46:49:51:d3:5c:71:2c:
29:c8:08:8f:4e:52:6f:fb:7d:a0:5f:72:93:a8:28:09:0b:38:
e7:09:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org