Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/54A1C4D00C5111ED9F9A37C8F1222468.roa
File: 54A1C4D00C5111ED9F9A37C8F1222468.roa (raw, json)
Hash identifier: U8Pbj898bzTsPm+AHLuwQ26iQGmpcSz4puv7l2rV4ic=
Subject key identifier: A6:9D:06:12:C9:B5:D6:73:A9:82:C4:EE:C5:AF:CD:1C:70:A1:C1:35
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0197
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/54A1C4D00C5111ED9F9A37C8F1222468.roa
Signing time: Mon 25 Jul 2022 19:38:17 +0000
ROA not before: Mon 25 Jul 2022 19:38:13 +0000
ROA not after: Sun 25 Sep 2022 19:38:13 +0000
asID: 209854
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Jul 25 19:38:13 2022 GMT
Not After : Sep 25 19:38:13 2022 GMT
Subject: CN=62def129-e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:45:5f:4d:d2:45:0e:ae:01:eb:33:09:de:
08:e1:f7:1e:70:76:0d:7e:43:04:33:be:7c:5f:2a:
a1:fe:62:d5:ab:cc:0c:9f:b6:b6:b9:d1:51:45:8d:
94:2f:0e:b3:b9:ac:a7:fc:63:e7:28:25:4b:20:62:
21:91:1b:b4:fa:d6:19:d8:a9:35:af:59:b2:83:ca:
a1:f6:8c:03:e5:eb:40:5a:24:d5:6d:d9:1c:d4:8c:
64:f3:b4:22:31:cf:2e:c6:66:a0:72:c1:0a:8d:86:
53:11:1e:0f:41:3f:2a:2a:2b:f5:fc:ab:f6:cc:a8:
f7:d1:1e:11:58:8b:db:92:f9:9a:fd:f9:56:5e:8e:
0c:be:a0:6b:b1:ba:96:29:17:0f:1a:46:a7:89:89:
2b:99:bd:19:97:3f:c0:95:f3:fd:0d:70:13:ee:f4:
b1:4a:0d:ec:6e:ed:19:de:fb:c5:20:1b:dc:26:c6:
c8:bf:e0:de:89:55:2e:a5:3c:24:f4:3c:07:5d:b9:
6c:0f:f5:e2:95:3f:42:e2:4d:9c:ba:67:bb:7e:90:
e1:8b:f0:70:77:f5:fe:8a:2d:55:ea:f0:4e:7f:6d:
df:3d:79:3e:27:24:4e:49:1a:4d:94:b6:87:03:ee:
c8:9b:0e:69:20:80:20:23:8f:f4:56:1c:e6:3d:fa:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:06:12:C9:B5:D6:73:A9:82:C4:EE:C5:AF:CD:1C:70:A1:C1:35
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/54A1C4D00C5111ED9F9A37C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
55:bb:5f:66:a5:a9:76:cf:d4:59:30:03:a6:dd:03:1c:7c:da:
09:56:12:4a:83:3e:03:31:df:4a:0a:43:69:92:14:98:a7:76:
20:00:16:1c:f0:9e:fb:ed:1b:f7:c0:e7:8e:9b:63:ae:86:2a:
76:95:a1:5e:b0:02:02:58:82:95:65:ac:d6:25:5a:58:b6:fb:
7b:b9:1c:f4:02:58:65:64:cb:ab:11:03:65:fd:25:a8:b6:f3:
2c:30:1f:37:d5:cb:f0:43:cf:41:98:88:cc:86:90:02:47:9c:
41:11:ff:38:d9:82:f5:db:22:bf:86:ad:2c:71:ee:92:23:bd:
a0:29:d1:53:07:36:a5:cc:89:39:67:06:57:89:d6:0a:1a:75:
0f:bd:1e:e5:d1:b9:ce:ae:7c:87:29:25:12:3b:ee:2b:6b:f2:
c5:c2:4b:05:f8:86:bb:9e:95:26:6f:23:c2:51:c0:84:97:7e:
d9:fd:fe:9f:a5:9a:4d:94:48:fe:26:71:0c:32:47:d0:ef:77:
46:36:9a:38:bf:cd:0b:f8:33:75:43:5e:06:ef:78:d1:69:b2:
dc:b8:8d:73:f8:d8:74:3f:84:8d:3f:68:d5:4e:76:a5:0c:dc:
8b:b7:52:19:87:03:ab:74:e7:fe:77:5e:dc:92:a1:77:7b:cd:
5c:bc:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org