Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/05EC91E21BD411EEAC4225694AD9E6FC.roa
File: 05EC91E21BD411EEAC4225694AD9E6FC.roa (raw, json)
Hash identifier: KQifPA9fUMJcIa0GtYe6/XIU9oAuC/NQusHp89Bczw4=
Subject key identifier: E5:71:B2:E7:4B:2C:EA:10:93:88:80:56:20:41:88:D4:60:FB:19:3E
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 031A
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/05EC91E21BD411EEAC4225694AD9E6FC.roa
Signing time: Thu 06 Jul 2023 08:06:34 +0000
ROA not before: Thu 06 Jul 2023 08:06:29 +0000
ROA not after: Fri 06 Oct 2023 08:06:29 +0000
asID: 399471
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Jul 6 08:06:29 2023 GMT
Not After : Oct 6 08:06:29 2023 GMT
Subject: CN=64a6760a-fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:22:a2:28:40:b3:f3:24:81:0b:60:ec:b2:
6c:8d:43:23:7d:55:00:5d:b9:8f:c0:4c:ce:cc:65:
10:53:b5:58:a3:d2:5c:e2:45:e9:dc:7f:9c:f2:9f:
07:1c:a7:1a:29:fc:c1:77:06:48:0f:c4:29:f8:8b:
29:6c:d6:18:d9:24:d2:8d:98:ca:24:60:5e:76:1a:
ca:88:7c:89:f7:89:87:5a:ce:93:13:2d:6b:fa:fe:
6e:2f:87:85:5b:14:5b:d5:e3:73:c4:be:b2:43:91:
a1:64:da:5f:95:3f:a0:ab:33:63:a0:98:c2:36:4d:
e2:f6:a6:5d:80:c6:92:fd:09:fc:55:b9:fc:73:88:
40:b4:67:cb:d5:d9:07:69:c9:e6:5e:56:d2:df:c0:
6e:ed:56:c3:b8:c7:f2:54:28:b0:7d:e4:4f:54:4d:
5c:1d:5a:e8:58:ed:f1:d9:5d:b0:19:82:0c:1f:ef:
27:2d:74:b3:95:2f:83:cc:e7:e5:31:a4:0e:5b:12:
6e:7f:10:f2:3b:dc:f1:be:ec:d3:3e:d3:05:5e:6a:
e0:0a:b1:d0:40:bc:dd:84:0e:3a:72:27:ec:ef:41:
12:ed:68:d3:69:a6:2a:3a:95:87:6a:58:a0:da:b7:
86:b7:50:d8:47:59:cc:c3:b3:3f:02:c1:c2:6e:5a:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:71:B2:E7:4B:2C:EA:10:93:88:80:56:20:41:88:D4:60:FB:19:3E
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/05EC91E21BD411EEAC4225694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e9:31:f2:3c:b9:35:9f:f3:87:1c:5a:7e:bc:96:4c:fe:05:
d8:5c:a7:c7:a7:ae:32:f8:e4:c9:70:3b:3d:22:2d:7f:60:2d:
07:3f:7c:95:81:9a:05:36:fb:f3:a4:2d:50:75:32:98:25:e1:
ff:55:aa:14:64:48:29:03:39:f0:31:8b:26:3e:f8:92:93:aa:
e3:35:86:5d:60:71:fa:b5:4c:87:09:9b:bd:27:8e:64:df:b5:
89:6d:ed:c5:4e:9e:86:56:93:3b:0d:68:97:b1:25:1f:50:be:
f3:e4:8f:83:2f:2f:1a:b8:26:f8:76:83:75:ee:f8:eb:32:d9:
41:cf:1c:e2:2e:22:5e:95:83:7a:1d:54:55:d8:a1:be:01:23:
ed:2c:07:21:1e:d1:f6:46:e6:6c:7d:07:0a:e8:02:f4:7f:d5:
bb:88:7c:cc:95:40:a8:7c:a4:a7:dd:7c:01:0b:cd:ed:54:2d:
da:cd:bf:65:21:89:6b:45:da:18:cf:b3:2c:d5:0f:c9:82:44:
72:0d:52:ae:1e:c7:49:25:f7:2c:74:3e:ad:cf:1c:11:50:87:
39:c8:a4:aa:5f:19:66:a6:7c:5a:af:2d:45:a8:ea:c9:98:24:
d1:4f:52:d9:82:4b:36:93:d6:3d:03:bf:d9:a8:fa:00:05:3a:
13:a3:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org