Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DAC0ED14A94311EC864C4C795A40D577.roa
File: DAC0ED14A94311EC864C4C795A40D577.roa (raw, json)
Hash identifier: 4MEOF/PI6h4yg6abeD3GEDoJn3Fc6bODQJ3Eq76D0JI=
Subject key identifier: 17:64:48:E7:BF:3C:64:B9:CA:09:6E:15:5A:7E:87:E5:49:38:07:0C
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0104
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DAC0ED14A94311EC864C4C795A40D577.roa
Signing time: Mon 21 Mar 2022 18:22:24 +0000
ROA not before: Mon 21 Mar 2022 18:22:20 +0000
ROA not after: Sat 21 May 2022 18:22:20 +0000
asID: 209371
IP address blocks: 196.44.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Mar 21 18:22:20 2022 GMT
Not After : May 21 18:22:20 2022 GMT
Subject: CN=6238c260-a293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:f2:20:c0:a3:ca:67:5b:35:8b:9b:cc:3d:
6a:05:be:a4:f5:1d:d6:ca:70:5b:04:bc:f2:9a:31:
fe:0e:de:b2:01:c0:c4:4b:47:a1:da:5d:32:eb:cc:
19:fe:01:a8:3b:1e:d3:b3:24:4c:40:4a:4d:a3:99:
c6:d3:2b:59:d1:fd:1a:80:93:33:0f:d1:91:8c:3a:
39:3d:5b:b4:61:31:76:05:48:8d:90:5d:d7:ca:35:
3c:68:1f:c2:08:59:68:cb:3e:06:60:b7:69:c2:01:
29:42:2e:a0:6c:67:7a:b7:67:c0:98:5e:f7:cd:36:
cb:bf:ad:f7:ee:25:09:0d:50:71:14:c7:04:49:0f:
c4:ce:f9:fc:d3:64:29:ec:b2:31:ae:19:81:9d:59:
cd:c2:11:37:b4:a6:59:8f:5f:f9:fc:d4:c6:60:d7:
06:9d:cd:c6:fa:ab:3c:49:5b:d3:bb:04:2a:80:76:
93:49:0a:f4:e6:06:6c:f7:3a:b9:ee:0e:e8:9e:02:
d9:a9:a2:0c:be:d4:e4:c1:7f:79:62:71:1e:93:99:
82:68:f1:28:e2:10:31:b4:90:51:d4:78:6a:57:f9:
47:62:fe:74:64:a6:02:b4:55:28:3e:6a:ac:ce:70:
33:6a:96:60:a4:9c:52:c6:b4:0f:b5:bf:11:e4:f6:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:48:E7:BF:3C:64:B9:CA:09:6E:15:5A:7E:87:E5:49:38:07:0C
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DAC0ED14A94311EC864C4C795A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:e9:72:b5:d5:29:cf:ce:51:3f:e9:d5:c3:b2:20:d6:8e:
0d:29:a7:54:32:4b:97:35:1e:59:34:10:4f:7e:4f:ce:af:15:
75:38:e4:fa:73:1f:ca:71:3d:9a:03:b7:fb:43:40:e0:7a:88:
a9:30:a0:d6:35:9b:27:b6:88:66:f2:78:22:c0:1d:e4:a1:50:
b1:0a:a6:2a:9a:3b:a5:0b:1c:c1:ee:27:4f:73:96:72:9f:b2:
2b:53:71:49:32:66:31:f2:51:5a:37:8c:96:4b:f8:bf:f7:ab:
8a:13:80:37:1c:93:15:3f:41:29:80:12:e6:d0:05:b2:4c:ae:
85:d6:9c:e6:44:64:c4:be:70:78:68:00:73:50:ec:20:6d:d4:
ce:44:6c:30:34:cc:60:2f:23:af:6a:26:be:3e:ab:cf:a5:df:
8b:cb:cf:9d:b5:e2:c3:b1:4f:90:8f:d8:be:30:0b:47:3c:20:
95:7e:1b:69:68:59:e6:8a:b8:6c:37:2b:5c:12:48:6a:0f:b0:
96:1b:28:08:02:bb:75:9f:5e:49:28:ce:01:62:df:bf:e7:c1:
31:28:2c:46:b5:88:e0:49:46:34:b7:cf:57:db:ae:55:ae:4b:
f9:de:93:a4:a4:7d:6f:9d:02:40:2e:9c:d2:53:f5:3d:77:47:
5b:78:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org