Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/99742B6CA19C11EDAE90FEA6F1222468.roa
File: 99742B6CA19C11EDAE90FEA6F1222468.roa (raw, json)
Hash identifier: WMHE/ObqvatkTZxycK8wcNqN1BhGBAlcgoyJL/A4yZU=
Subject key identifier: D5:C7:82:47:5D:53:F9:60:5F:86:A1:F4:4E:B3:F2:38:B2:3F:3E:E3
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0266
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/99742B6CA19C11EDAE90FEA6F1222468.roa
Signing time: Tue 31 Jan 2023 19:22:28 +0000
ROA not before: Tue 31 Jan 2023 19:22:22 +0000
ROA not after: Fri 31 Mar 2023 19:22:22 +0000
asID: 207713
IP address blocks: 196.44.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Jan 31 19:22:22 2023 GMT
Not After : Mar 31 19:22:22 2023 GMT
Subject: CN=63d96a74-27b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:83:2b:26:99:d3:b1:c7:c6:9e:67:25:1e:
ec:9c:4e:68:1a:37:e5:20:26:58:9f:13:09:f5:2b:
67:97:d3:1b:6c:6f:c0:ba:50:e4:f4:fc:ec:5d:38:
cc:ff:e5:4c:27:0a:83:60:51:8a:e3:61:ce:ef:85:
ba:41:15:cf:9e:2e:d8:95:d4:65:9f:1f:79:eb:19:
7a:de:14:48:eb:a5:68:f1:ff:27:1b:34:bd:f9:a8:
4f:43:14:24:41:21:78:be:45:2e:1a:d3:04:92:49:
10:5e:0f:18:04:a3:18:dc:6d:63:af:c1:43:c4:e4:
13:fa:db:08:08:67:c0:4d:32:0b:75:2a:ed:b2:6d:
0e:f0:69:8d:4b:6a:80:84:bd:a5:22:1a:e1:89:b5:
ee:70:9b:75:ec:3d:8a:b4:53:76:90:56:a5:28:a6:
6e:8a:de:ea:80:f4:ff:16:ac:a3:df:c6:39:df:27:
27:ef:47:1f:36:4f:fb:da:b9:45:b6:2d:84:5f:18:
14:a7:e4:4a:df:8f:c6:60:24:da:03:75:5c:d5:3f:
cd:8e:c9:88:4a:ef:01:b4:a4:de:6e:09:a7:51:b6:
cd:34:f6:11:ad:ed:29:55:e3:06:f7:8e:d6:9f:d8:
e3:a6:1c:27:5e:d4:0e:d7:05:9a:2d:9f:e7:4b:f1:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:82:47:5D:53:F9:60:5F:86:A1:F4:4E:B3:F2:38:B2:3F:3E:E3
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/99742B6CA19C11EDAE90FEA6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.126.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4e:d8:cb:89:42:6b:c7:d0:46:dd:f3:fa:7d:35:62:c6:b4:
dd:87:6c:8a:54:98:e3:08:ba:9b:3b:9e:df:60:63:87:48:0d:
6c:6f:39:7b:9e:47:2e:b0:43:7f:80:22:10:82:71:9d:d1:ee:
32:dc:27:33:49:77:c7:d0:de:05:ed:93:e1:e8:70:9c:e1:ca:
d7:03:0f:6c:6b:7d:b8:0a:79:58:5e:c2:c5:59:7a:75:83:2d:
89:1e:ab:a3:18:27:ff:7d:bc:70:23:69:17:1b:65:5c:59:27:
41:22:aa:f9:9b:d1:74:4f:64:de:74:9e:3a:0c:d8:e0:c8:8b:
0e:ac:ed:b1:33:d8:b3:c6:45:87:9a:14:48:5d:53:ba:8c:f7:
21:4e:47:9b:01:55:83:b9:09:f1:24:89:d3:60:e0:e3:72:40:
34:c3:96:21:73:14:cf:0b:4b:c2:36:7d:94:d7:19:22:fe:f6:
57:36:96:4f:d4:58:34:47:a9:21:cb:ca:50:36:62:40:d1:68:
50:f0:8a:4c:4b:b4:86:7b:a1:89:fd:1d:1a:45:31:29:9d:e0:
9e:3e:46:e5:ea:57:1c:b1:83:28:23:58:96:aa:36:35:2d:61:
de:fb:65:c6:76:33:f9:67:67:1e:99:ac:9e:46:1b:fd:b6:7a:
3a:c4:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org