Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/AE65D2F8836D11ECB5B511D75A40D577.roa
File: AE65D2F8836D11ECB5B511D75A40D577.roa (raw, json)
Hash identifier: qAYpkx4oljSH9RuspRIYad8F4fL4EPirql5rUgHYIwM=
Subject key identifier: 45:D9:FB:98:5D:3C:40:D3:92:4A:CF:DC:50:E3:D2:1F:6D:33:F6:FF
Certificate issuer: /CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Certificate serial: 02
Authority key identifier: BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/AE65D2F8836D11ECB5B511D75A40D577.roa
Signing time: Tue 01 Feb 2022 14:46:04 +0000
ROA not before: Tue 01 Feb 2022 14:46:00 +0000
ROA not after: Wed 01 Feb 2023 14:46:00 +0000
asID: 37580
IP address blocks: 197.215.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Validity
Not Before: Feb 1 14:46:00 2022 GMT
Not After : Feb 1 14:46:00 2023 GMT
Subject: CN=61f947ac-9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:8a:81:67:38:90:33:1c:80:ec:20:3f:4d:
a3:bb:33:7f:23:6f:50:10:f6:03:d1:40:90:fa:e2:
7d:af:f6:7b:09:6e:5e:fe:b6:14:b9:37:e2:c5:a8:
b5:a3:db:8f:09:0a:d5:50:6f:66:70:af:41:d0:c6:
ee:52:b4:2f:08:43:10:46:37:45:1e:08:e9:8c:84:
56:5d:b6:b5:be:3d:ea:18:35:f9:76:74:de:80:2f:
75:69:e6:e0:f3:73:da:09:d6:23:5e:19:d3:9b:41:
1a:0c:45:c6:39:08:0a:b3:be:91:cd:f0:83:a3:0e:
76:cd:52:f5:42:c1:f4:8b:2c:1d:c3:58:80:06:16:
d5:6f:92:ab:c5:52:d8:cc:c3:75:04:a4:1a:3e:d9:
2e:e5:19:ed:a3:83:fe:c0:f8:6c:5f:c9:94:3c:f8:
50:38:bc:a2:42:95:7b:69:a6:32:50:b1:28:8b:34:
dd:23:37:26:3f:5e:76:f6:0e:ce:1b:f4:7e:da:77:
7c:39:60:41:20:3a:2f:11:21:2b:cb:0b:0d:85:4b:
51:db:d2:5f:8f:4a:42:bb:33:dc:fc:3d:ef:8a:7a:
37:83:8b:a6:90:ee:73:1d:ba:e1:ed:b2:0e:78:22:
a8:58:25:1b:8a:6d:4d:a8:9f:26:51:50:e7:7a:41:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:FB:98:5D:3C:40:D3:92:4A:CF:DC:50:E3:D2:1F:6D:33:F6:FF
X509v3 Authority Key Identifier:
keyid:BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/AE65D2F8836D11ECB5B511D75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.215.216.0/22
Signature Algorithm: sha256WithRSAEncryption
89:24:28:1e:14:87:a1:7d:c5:ce:d1:c5:3e:94:e5:c1:c0:80:
0c:ff:5d:1a:49:2b:5f:4d:d7:dd:2b:a1:02:0b:0b:2f:90:71:
78:90:7e:e4:09:49:38:d3:2a:28:9a:60:e5:c7:bc:f4:66:8d:
5a:8c:bc:28:0e:39:e7:0a:45:e4:37:f3:79:ef:6e:86:db:c8:
b5:cf:39:cc:21:e5:ff:62:c1:4b:d4:28:c2:a3:8c:18:d6:2b:
6e:9a:2d:d1:c8:73:d2:69:3f:bd:22:e3:d0:67:47:f5:e8:7a:
96:fa:00:ce:5d:78:19:bf:95:89:cc:fc:f2:46:c2:f6:9b:f0:
2c:d1:17:b3:32:78:70:1e:db:f1:c4:6f:84:d2:b0:61:91:06:
33:57:17:1f:6d:22:06:08:36:bc:70:0e:3c:db:07:84:df:6a:
d9:f8:43:89:cb:9d:33:68:39:86:ce:61:ce:9e:71:04:97:a9:
b8:d9:c1:67:62:30:7b:26:e7:b4:7b:6c:a4:1d:41:fc:b2:24:
b7:51:b4:17:6c:9a:28:5b:c5:96:0f:f9:47:3d:b0:c1:93:c3:
20:85:51:bc:30:c3:96:01:70:1e:ef:0c:ff:f5:c9:54:72:ad:
61:c1:08:4c:79:72:bc:dd:46:89:a1:09:e0:a8:79:02:71:bf:
0d:d0:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org