Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/33AD315E73EF11EE9D30E66C4AD9E6FC.roa
File: 33AD315E73EF11EE9D30E66C4AD9E6FC.roa (raw, json)
Hash identifier: vHs3+W3aZDlAJcphu2S0lFvh9JErYZ3c8R51E/qcmd4=
Subject key identifier: 66:D0:7F:F5:5E:D9:60:A2:1D:5F:B3:D9:BA:9D:E5:2B:74:BE:56:0F
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0398
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/33AD315E73EF11EE9D30E66C4AD9E6FC.roa
Signing time: Thu 26 Oct 2023 11:02:50 +0000
ROA not before: Thu 26 Oct 2023 11:02:46 +0000
ROA not after: Fri 26 Jan 2024 11:02:46 +0000
asID: 10753
IP address blocks: 196.44.96.0/24 maxlen: 24
196.44.125.0/24 maxlen: 24
196.44.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Oct 26 11:02:46 2023 GMT
Not After : Jan 26 11:02:46 2024 GMT
Subject: CN=653a475a-c12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:18:72:c6:e9:5a:8b:44:7e:be:1b:80:e4:
08:8f:1c:1d:e8:de:91:ad:be:75:91:8f:f6:b1:6d:
39:29:ab:85:0b:7d:43:7f:cf:a8:3d:d1:10:09:39:
01:98:95:ae:85:91:c0:7f:82:8b:d8:5e:49:28:ea:
ff:7b:a6:d1:f0:2f:17:84:fd:43:84:6b:ee:85:2a:
0a:ee:b1:da:54:3d:87:2b:79:d9:f4:42:94:73:0c:
0d:6d:b4:c3:f1:6a:0d:c5:e1:d9:e2:36:d0:6f:42:
b2:56:71:a0:56:2f:e2:45:c8:15:ef:fe:9a:19:93:
a6:dc:6c:b1:b9:e6:4f:df:03:4f:43:f8:8a:15:b9:
e1:be:4c:57:17:77:46:04:d3:4b:95:01:e9:7d:10:
1a:f7:6d:5e:95:ca:05:e6:61:3f:a9:18:fd:c9:a6:
db:b9:f6:51:d0:31:02:eb:9d:16:11:04:b8:e3:e7:
0a:4f:8e:ba:6f:6b:4f:79:44:0a:59:55:ad:43:e1:
e6:f7:9d:a6:44:98:3d:a2:d5:62:6b:7d:28:97:31:
36:db:a2:c5:9a:64:9e:88:59:99:5b:e0:bc:c5:a5:
76:11:74:27:f0:d1:67:5e:f9:92:f7:80:a9:64:e5:
78:dd:56:a5:ee:0a:49:94:b3:b2:57:40:ee:35:2b:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:7F:F5:5E:D9:60:A2:1D:5F:B3:D9:BA:9D:E5:2B:74:BE:56:0F
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/33AD315E73EF11EE9D30E66C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.96.0/24
196.44.125.0/24
196.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0c:f2:3a:2b:37:76:db:b9:a3:40:84:c7:93:66:31:ee:ad:
70:fe:4c:d8:13:30:15:d7:f0:90:0d:40:19:dd:b1:7d:69:8e:
cb:90:a0:fe:52:0e:45:d0:ae:f9:b9:05:96:d5:5e:17:e8:49:
1d:4f:89:5b:ff:df:1c:26:48:8a:21:6d:ab:68:e4:f0:8b:78:
29:a9:10:f2:5f:6e:40:4e:40:52:1a:ac:fe:20:d7:7b:5a:bb:
0f:d8:12:3c:79:93:20:d6:12:24:2e:a6:ef:25:3b:41:20:fd:
ba:8e:7b:b8:0a:10:b0:ae:13:b6:e5:13:c7:91:6f:70:ae:9f:
4f:56:13:62:57:73:cb:a4:33:08:79:47:06:22:63:9b:10:4e:
86:43:17:78:eb:e4:69:91:89:e5:a6:0d:40:d4:a7:a3:4b:5d:
2e:96:a0:5c:ea:0a:10:7b:53:5e:e3:69:6d:17:f3:19:fe:c8:
fe:77:30:92:c1:c0:d6:7d:d5:a7:4f:92:9b:14:96:8a:b4:04:
b5:ff:41:74:26:7e:2a:07:8f:50:bb:2a:4d:fb:39:19:f8:0a:
bf:3f:0f:6f:bc:25:91:c8:14:e0:dd:86:bf:d4:0e:20:9a:25:
a4:de:e3:48:29:43:be:e1:99:bc:99:58:22:84:d1:0a:b5:85:
bb:69:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 18:26:12 2024 by rpki-client on console-fra.rpki-client.org