Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
File: 515F25FC35E011EDA23382DCF1222468.roa (raw, json)
Hash identifier: hoBFWS5pw46fzoBHJqwPoZhYu8IvDi4OCLlmU9Ji3oc=
Subject key identifier: A1:1D:F8:29:C9:A1:52:8E:17:0E:5D:48:56:E2:8B:91:F6:E7:5C:10
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 01CE
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
Signing time: Fri 16 Sep 2022 16:55:07 +0000
ROA not before: Fri 16 Sep 2022 16:55:01 +0000
ROA not after: Fri 16 Dec 2022 16:55:01 +0000
asID: 29465
IP address blocks: 196.44.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Sep 16 16:55:01 2022 GMT
Not After : Dec 16 16:55:01 2022 GMT
Subject: CN=6324aa6b-822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:b5:74:14:2a:20:7b:00:43:26:19:42:a4:
0b:9c:45:7b:e4:5e:1f:db:f8:4b:12:56:08:a3:27:
a8:ed:91:f0:b3:9c:58:9f:20:14:c8:2a:89:60:7a:
8d:a8:f1:a8:36:8c:91:41:09:d2:c6:14:90:0e:0e:
c8:ef:b6:c1:c2:87:70:ef:20:a1:ca:78:45:a7:bc:
33:cc:05:18:26:de:6a:df:bb:8e:b2:57:80:5a:d5:
af:0c:94:1f:49:fb:fd:d6:e2:fb:db:8c:e5:59:6c:
b9:90:28:0c:05:a8:6c:71:02:84:0a:49:76:8d:8f:
a3:55:51:e3:6d:49:c0:69:d2:33:eb:f5:96:48:e7:
ed:fc:5a:34:78:8e:1f:ec:26:ac:e3:a0:4c:fe:f5:
89:0d:59:99:c2:e5:7e:bb:4a:e4:12:7c:ef:43:7d:
64:09:aa:b0:3a:2f:58:be:2b:fd:c9:62:aa:3f:f6:
7d:5e:96:41:2d:65:11:ac:d4:8b:c5:75:92:82:8b:
5b:59:8e:7c:cf:4f:40:09:c0:be:03:d4:51:b8:d5:
d3:f2:a6:dc:82:55:2f:52:1f:6a:88:c7:49:e9:81:
29:f8:c4:62:3f:55:42:cd:9a:20:bb:57:be:65:60:
2b:f1:ec:ea:fa:f6:42:e0:ed:b3:fe:f0:78:f9:4c:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:F8:29:C9:A1:52:8E:17:0E:5D:48:56:E2:8B:91:F6:E7:5C:10
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/515F25FC35E011EDA23382DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.117.0/24
Signature Algorithm: sha256WithRSAEncryption
32:53:ed:86:fa:b2:76:d6:45:a4:84:19:67:67:98:d1:71:6f:
37:4c:37:72:f4:b5:0d:9d:4f:cf:08:0b:47:03:b1:b2:2c:06:
9c:63:0c:bb:37:59:b3:26:52:82:d5:af:0c:c1:5e:d9:db:b7:
39:00:66:88:1a:32:a1:86:a0:88:ce:78:34:14:f1:55:7e:3e:
89:81:dd:35:4d:91:7d:43:da:e8:de:5c:9d:d6:05:74:4c:2c:
91:95:09:b8:22:33:73:d7:ff:5e:ee:60:94:d8:00:e5:f1:33:
8c:a6:ac:07:f3:b7:63:8d:76:60:d4:53:af:2e:d8:06:15:fc:
79:3b:ef:81:da:c1:4c:90:80:0d:21:5a:8f:4a:19:8d:d8:8a:
42:3b:aa:b8:65:52:0e:8e:40:54:d5:5e:d2:37:cc:43:40:de:
2c:4d:2c:a9:45:02:4c:13:98:32:22:1c:7e:1a:8c:9d:34:11:
65:61:d7:3e:8c:75:28:52:11:7e:a5:52:42:c7:15:dc:d8:ee:
e5:d9:0c:9b:ee:9d:a1:dd:24:6c:bc:ca:49:47:02:bf:26:1b:
d2:2d:9a:bc:86:77:9b:d2:37:f1:f0:d4:ed:8d:4f:e5:97:92:
3d:2b:90:08:a9:68:68:e1:13:e2:78:f0:e1:c8:70:2a:6f:c5:
a2:23:e2:92
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yMjA5MTYxNjU1MDFaFw0yMjEyMTYxNjU1MDFaMBgxFjAU
BgNVBAMMDTYzMjRhYTZiLTgyMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+PrV0FCogewBDJhlCpAucRXvkXh/b+EsSVgijJ6jtkfCznFifIBTIKolg
eo2o8ag2jJFBCdLGFJAODsjvtsHCh3DvIKHKeEWnvDPMBRgm3mrfu46yV4Ba1a8M
lB9J+/3W4vvbjOVZbLmQKAwFqGxxAoQKSXaNj6NVUeNtScBp0jPr9ZZI5+38WjR4
jh/sJqzjoEz+9YkNWZnC5X67SuQSfO9DfWQJqrA6L1i+K/3JYqo/9n1elkEtZRGs
1IvFdZKCi1tZjnzPT0AJwL4D1FG41dPyptyCVS9SH2qIx0npgSn4xGI/VULNmiC7
V75lYCvx7Or69kLg7bP+8Hj5TCP/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUoR34
KcmhUo4XDl1IVuKLkfbnXBAwHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzUxNUYyNUZDMzVFMDExRURBMjMzODJEQ0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELHUwDQYJKoZIhvcNAQEL
BQADggEBADJT7Yb6snbWRaSEGWdnmNFxbzdMN3L0tQ2dT88IC0cDsbIsBpxjDLs3
WbMmUoLVrwzBXtnbtzkAZogaMqGGoIjOeDQU8VV+PomB3TVNkX1D2ujeXJ3WBXRM
LJGVCbgiM3PX/17uYJTYAOXxM4ymrAfzt2ONdmDUU68u2AYV/Hk774HawUyQgA0h
Wo9KGY3YikI7qrhlUg6OQFTVXtI3zENA3ixNLKlFAkwTmDIiHH4ajJ00EWVh1z6M
dShSEX6lUkLHFdzY7uXZDJvunaHdJGy8yklHAr8mG9ItmryGd5vSN/Hw1O2NT+WX
kj0rkAipaGjhE+J48OHIcCpvxaIj4pI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org