Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/9987F7D6C16011ECA411ADBFF1222468.roa
File: 9987F7D6C16011ECA411ADBFF1222468.roa (raw, json)
Hash identifier: js8+UN41OcD2Taxr18YIMg+IeGdBwzYverQncP7aQgU=
Subject key identifier: 7E:10:DB:F3:80:08:F8:7F:46:2D:2B:1E:3E:56:58:7D:A3:37:F4:AD
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0125
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/9987F7D6C16011ECA411ADBFF1222468.roa
Signing time: Thu 21 Apr 2022 10:48:38 +0000
ROA not before: Thu 21 Apr 2022 10:48:33 +0000
ROA not after: Thu 21 Jul 2022 10:48:33 +0000
asID: 44592
IP address blocks: 196.44.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Apr 21 10:48:33 2022 GMT
Not After : Jul 21 10:48:33 2022 GMT
Subject: CN=62613686-3844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:87:a9:cc:7f:aa:c1:2f:45:3d:ad:09:b8:
79:47:88:e0:19:8b:ae:30:a4:52:ad:8e:6b:92:df:
05:fd:73:72:9c:33:7f:f7:5e:63:64:d6:14:ed:4d:
f4:54:03:1e:83:bb:32:dc:f7:08:99:47:cc:05:45:
05:1e:9f:9a:b9:83:a4:6d:f7:5b:fa:68:1e:1a:68:
8f:f7:42:71:c6:81:62:68:de:8a:ad:75:64:bf:ff:
df:2a:25:79:ae:a0:3d:4d:dd:7b:78:e3:49:3f:16:
ce:7c:f7:d1:c1:df:e9:d8:01:b8:51:be:b6:75:b9:
85:67:bc:b7:fe:71:ea:2f:df:2a:b9:e4:59:5a:11:
fc:9b:0f:a6:5c:f3:3c:a4:99:a3:a8:be:91:49:0a:
ce:cd:73:7e:32:5b:13:08:09:7f:71:1f:bb:80:d8:
82:68:23:0a:fe:57:4e:97:81:8c:44:12:4a:b2:88:
c7:9a:14:05:cb:e2:33:c8:67:d8:63:89:40:d8:32:
bf:23:18:16:43:43:d2:06:6c:9f:94:0a:f1:95:95:
1d:f3:9b:af:ec:da:08:e6:7d:f0:6a:3f:4d:12:79:
0a:b1:f9:94:23:62:7c:23:40:41:eb:41:3e:9d:0a:
36:c9:e6:3f:7c:b9:16:37:9a:39:47:eb:19:d5:40:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:DB:F3:80:08:F8:7F:46:2D:2B:1E:3E:56:58:7D:A3:37:F4:AD
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/9987F7D6C16011ECA411ADBFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.96.0/24
Signature Algorithm: sha256WithRSAEncryption
90:21:a9:41:4e:1c:0c:19:fa:1b:0e:bb:5a:5a:cf:9e:a6:12:
cd:46:5d:9f:45:d9:dd:5e:53:90:4f:66:09:b3:a2:d1:99:3e:
81:dd:8b:cb:cc:66:e9:df:fb:1b:6e:d3:57:61:ad:34:12:20:
f8:e7:96:11:9a:0a:f8:8f:d3:4b:49:75:85:c3:f0:9e:c2:08:
1e:9a:6d:26:7a:d5:a1:7b:4e:17:68:48:60:ba:31:52:18:f4:
42:3c:a4:82:e7:52:c5:b3:b6:f4:8b:74:84:c9:1e:8d:f1:e4:
be:ad:25:31:2b:f8:5e:d2:90:75:93:47:26:bf:be:ba:8a:88:
11:fc:b4:ba:34:31:3a:f0:df:b8:b1:a6:17:13:30:e3:f5:f4:
2f:7d:62:23:d3:62:41:da:3f:8b:a3:05:0b:b0:26:b1:e2:d4:
df:af:58:d6:f0:4d:45:82:ab:2c:ff:d4:b5:95:77:82:c1:48:
0d:c4:6b:36:28:62:4c:2b:4d:5e:3c:f4:65:97:22:5e:1d:af:
6c:d0:7b:82:b1:02:e2:88:4a:d5:fb:62:dc:7e:71:3c:a9:d0:
df:a0:4b:52:88:f3:fc:58:7a:8e:9e:20:8f:c0:5c:d8:56:d7:
88:65:f3:2d:8e:1d:11:82:4b:d2:fa:90:92:18:04:4d:97:a9:
4a:2e:28:ea
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICASUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yMjA0MjExMDQ4MzNaFw0yMjA3MjExMDQ4MzNaMBgxFjAU
BgNVBAMMDTYyNjEzNjg2LTM4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAQIepzH+qwS9FPa0JuHlHiOAZi64wpFKtjmuS3wX9c3KcM3/3XmNk1hTt
TfRUAx6DuzLc9wiZR8wFRQUen5q5g6Rt91v6aB4aaI/3QnHGgWJo3oqtdWS//98q
JXmuoD1N3Xt440k/Fs5899HB3+nYAbhRvrZ1uYVnvLf+ceov3yq55FlaEfybD6Zc
8zykmaOovpFJCs7Nc34yWxMICX9xH7uA2IJoIwr+V06XgYxEEkqyiMeaFAXL4jPI
Z9hjiUDYMr8jGBZDQ9IGbJ+UCvGVlR3zm6/s2gjmffBqP00SeQqx+ZQjYnwjQEHr
QT6dCjbJ5j98uRY3mjlH6xnVQCyTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfhDb
84AI+H9GLSsePlZYfaM39K0wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFLzk5ODdGN0Q2QzE2MDExRUNBNDExQURCRkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELGAwDQYJKoZIhvcNAQEL
BQADggEBAJAhqUFOHAwZ+hsOu1paz56mEs1GXZ9F2d1eU5BPZgmzotGZPoHdi8vM
Zunf+xtu01dhrTQSIPjnlhGaCviP00tJdYXD8J7CCB6abSZ61aF7ThdoSGC6MVIY
9EI8pILnUsWztvSLdITJHo3x5L6tJTEr+F7SkHWTRya/vrqKiBH8tLo0MTrw37ix
phcTMOP19C99YiPTYkHaP4ujBQuwJrHi1N+vWNbwTUWCqyz/1LWVd4LBSA3EazYo
YkwrTV489GWXIl4dr2zQe4KxAuKIStX7Ytx+cTyp0N+gS1KI8/xYeo6eII/AXNhW
14hl8y2OHRGCS9L6kJIYBE2XqUouKOo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org