Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/E7AE94EACF7D11EBB5EE6144F8AEA228.roa
File: E7AE94EACF7D11EBB5EE6144F8AEA228.roa (raw, json)
Hash identifier: mmWeJOJt5GEae1TehZnhHpalmXhItNDMrhj9CaC35gk=
Subject key identifier: 75:1E:60:80:CC:37:9A:C8:24:06:75:56:04:3C:53:83:50:9F:85:02
Certificate issuer: /CN=F36D518DAF/serialNumber=FC945B066AE879A61BDF6FCB18859C57A2E716D0
Certificate serial: 02
Authority key identifier: FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/E7AE94EACF7D11EBB5EE6144F8AEA228.roa
Signing time: Thu 17 Jun 2021 15:08:43 +0000
ROA not before: Thu 17 Jun 2021 15:08:39 +0000
ROA not after: Sun 31 Dec 2023 15:08:39 +0000
asID: 1239
IP address blocks: 196.51.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D518DAF
Validity
Not Before: Jun 17 15:08:39 2021 GMT
Not After : Dec 31 15:08:39 2023 GMT
Subject: CN=60cb657b-9d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:9f:b2:c8:53:1b:8f:af:74:4d:2f:e3:09:
62:ea:bc:f2:2e:4c:47:00:ab:c2:3d:64:1f:be:11:
ed:15:e6:b9:a6:74:7b:9c:6b:b8:92:76:4a:71:7a:
aa:68:6f:4a:a8:fc:74:29:38:12:b1:d8:18:87:0e:
a2:29:b5:64:34:fc:2f:42:0c:30:3d:c6:fc:c5:7c:
d8:dd:2f:5f:47:52:59:b7:f5:90:82:2e:83:68:99:
2d:4d:e0:da:f3:68:05:8e:ec:04:ea:bc:b5:a5:e9:
9d:26:63:76:6a:2c:12:78:ae:81:c3:87:8d:1e:79:
4b:32:1e:4a:9d:75:20:11:d6:1e:dd:c2:b4:6b:4a:
79:e9:1f:41:32:62:34:50:7b:d9:7f:ec:bb:1b:c1:
c8:5b:3e:21:e5:61:33:e5:11:c8:ee:50:23:93:ad:
34:66:b8:97:10:55:0b:51:0a:e5:d4:af:b3:df:53:
fa:47:72:a3:41:16:c0:b7:4d:ef:64:37:5a:c9:b7:
53:2b:18:62:96:3b:99:8c:6b:08:83:b4:9f:b2:82:
71:d6:f3:ee:89:8f:9b:38:ce:0d:51:8d:25:3c:dc:
c1:62:85:72:70:61:c3:be:95:75:fa:9a:72:20:59:
1f:0e:3b:cc:bc:c2:00:6f:8d:72:f7:a7:a6:73:73:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:60:80:CC:37:9A:C8:24:06:75:56:04:3C:53:83:50:9F:85:02
X509v3 Authority Key Identifier:
keyid:FC:94:5B:06:6A:E8:79:A6:1B:DF:6F:CB:18:85:9C:57:A2:E7:16:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/_JRbBmroeaYb32_LGIWcV6LnFtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_JRbBmroeaYb32_LGIWcV6LnFtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D518D/83FDAF68CF7C11EB82E08342F8AEA228/E7AE94EACF7D11EBB5EE6144F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:d6:90:f5:e4:b5:19:3f:f5:30:9e:4f:ef:74:7e:4d:a7:5d:
19:22:da:88:13:e1:e1:0b:e1:67:5f:72:48:64:7b:c8:c9:57:
a4:a1:a2:48:cb:2c:7e:91:bd:68:a5:2f:62:f0:00:d6:76:81:
9f:19:4d:93:6f:7b:3f:cb:4c:4f:46:e2:82:45:ac:7e:f3:32:
ed:4a:7d:2c:36:40:8e:88:38:5e:45:0f:33:be:e1:58:a6:1e:
01:16:ac:5a:dd:a5:a3:63:14:9b:3d:fb:b2:cc:4d:9e:0d:67:
ca:85:c8:4a:c6:5e:52:02:df:2d:96:85:f8:ab:4b:80:5f:32:
f1:52:27:68:41:ad:63:0e:eb:44:8a:1d:00:20:2c:86:a8:46:
2b:e6:e5:e6:6f:4f:df:6e:fc:ac:92:7a:cf:93:c9:7c:97:76:
35:39:02:5d:4b:22:a4:df:83:25:26:39:28:56:97:f7:7c:fa:
bb:cc:81:db:e5:6c:a8:ea:92:2d:c7:14:59:6a:ed:07:38:57:
ed:57:ff:4e:d0:3e:75:81:eb:df:ee:75:87:73:41:45:ba:8f:
e6:12:58:41:f5:33:83:67:b9:ca:e7:89:4b:ee:b0:e8:80:92:
ce:5c:97:40:1d:72:0e:c9:ce:c0:b3:2e:09:fa:e0:5e:49:8a:
6f:f5:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:08 2025 by rpki-client