Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/34DFF16AE83611ECBBFB3E8EF1222468.roa
File: 34DFF16AE83611ECBBFB3E8EF1222468.roa (raw, json)
Hash identifier: E6GnP1dSf2caQBFkvkvUlxXM8hwyd9tzRJfv/SRQ2aY=
Subject key identifier: E6:92:91:44:CA:03:5C:1F:47:08:26:8E:44:F7:CB:5B:46:14:8F:B1
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0163
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/34DFF16AE83611ECBBFB3E8EF1222468.roa
Signing time: Thu 09 Jun 2022 20:53:25 +0000
ROA not before: Thu 09 Jun 2022 20:53:22 +0000
ROA not after: Tue 09 Aug 2022 20:53:22 +0000
asID: 1239
IP address blocks: 196.44.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Jun 9 20:53:22 2022 GMT
Not After : Aug 9 20:53:22 2022 GMT
Subject: CN=62a25dc5-f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:50:f1:ed:24:08:c9:ae:5c:3e:bc:61:e5:
f8:68:cd:7e:57:ae:75:24:5c:46:c3:a9:9b:9a:11:
7e:6a:6b:e6:f4:30:f1:9e:62:ec:fa:ec:17:b1:f9:
8c:f1:aa:04:60:e7:a4:70:6d:4c:c1:87:36:c7:1b:
49:8d:a4:fc:02:93:64:13:1b:da:29:5d:dc:40:8e:
5c:58:ae:c7:56:ee:89:a6:47:84:af:90:9d:bd:58:
9c:0b:a2:af:23:8c:6a:c5:bb:da:98:f9:9b:ac:67:
99:e5:18:4c:43:b6:23:ce:90:fd:73:ae:e4:d3:a1:
dc:7d:86:04:77:56:63:11:65:d0:3c:3e:ea:7e:6c:
e3:2d:88:91:f9:6d:60:5c:bb:58:4b:99:5c:8b:16:
d6:cd:f7:7b:26:4e:fc:df:b5:a5:56:7b:b7:7b:b9:
7d:d2:10:f3:c0:2e:d2:6b:a2:a5:55:99:29:1b:6d:
04:b9:f7:d2:08:a0:3f:61:53:e3:55:e6:b7:67:2e:
ba:03:11:a1:1d:a9:01:53:d0:b0:5c:d4:79:b3:b0:
f0:18:77:b6:99:12:db:de:99:98:ef:11:23:d0:04:
2e:a9:cb:ec:cd:12:36:10:d3:89:b9:d4:2a:03:b9:
bd:0d:65:f5:b6:db:5e:f4:b6:1b:82:49:ba:39:33:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:91:44:CA:03:5C:1F:47:08:26:8E:44:F7:CB:5B:46:14:8F:B1
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/34DFF16AE83611ECBBFB3E8EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:d2:de:0c:9c:4e:f0:8a:ea:cc:43:53:67:4e:fd:35:29:08:
1f:dc:67:c4:a0:a9:92:45:9b:65:28:12:1f:ea:32:8c:c2:49:
f6:5d:bd:43:58:bf:7c:1a:3e:2f:dd:b1:41:5e:fb:32:d4:1e:
af:1c:f3:fe:b7:41:75:39:fa:77:48:2b:53:c2:27:11:46:5a:
e5:a7:b7:bf:dd:4f:aa:ec:e3:d3:37:8c:6a:18:7c:f7:c2:8d:
03:9e:0e:89:c4:e2:f5:84:33:03:ef:b2:6e:89:9c:c2:7d:80:
bd:c6:7e:7c:ba:56:43:dd:af:41:03:5b:ef:d0:68:5a:5c:60:
95:47:11:e7:b0:c9:32:e3:86:bf:bd:da:5a:f0:43:f8:3f:7e:
6e:72:a3:85:59:a6:a0:0d:25:59:b7:96:c0:58:af:db:85:18:
b1:31:43:0f:43:47:14:04:d1:4d:52:20:66:1e:eb:a4:fe:2c:
c0:28:11:0e:b4:9f:e6:fc:97:ad:9f:1d:e0:2d:95:93:74:6d:
d3:2d:8f:fb:d8:f2:ac:69:37:57:2c:06:9a:01:de:eb:75:64:
7b:76:63:4b:17:f9:dc:bc:a6:9a:ab:69:c0:a9:8e:2e:a5:dc:
c3:8c:89:96:a6:29:3c:d3:25:55:8e:45:97:81:da:06:de:23:
50:db:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org