Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DC39CD52543F11EEB5665F614AD9E6FC.roa
File: DC39CD52543F11EEB5665F614AD9E6FC.roa (raw, json)
Hash identifier: AqIwKvCLYanjVvqHAmcaRKCwqNLLyLyHoEbKnRWnrKg=
Subject key identifier: 52:E5:2E:E2:31:98:66:59:D0:41:A9:F8:09:8C:C4:59:FC:86:A0:E7
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: 0368
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DC39CD52543F11EEB5665F614AD9E6FC.roa
Signing time: Sat 16 Sep 2023 03:19:35 +0000
ROA not before: Sat 16 Sep 2023 03:19:32 +0000
ROA not after: Sat 16 Dec 2023 03:19:32 +0000
asID: 43260
IP address blocks: 196.44.96.0/24 maxlen: 24
196.44.117.0/24 maxlen: 24
196.44.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Sep 16 03:19:32 2023 GMT
Not After : Dec 16 03:19:32 2023 GMT
Subject: CN=65051ec7-b785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:5a:93:5f:89:52:6b:19:ab:8f:e5:4a:4b:
27:48:5d:69:7a:99:e8:0b:c9:aa:fd:56:97:b6:99:
b2:cc:af:ad:04:eb:d7:84:e2:a5:a3:9a:f1:54:b2:
77:11:ed:37:53:57:6b:bf:d0:54:bc:d7:89:41:98:
ea:45:20:0d:c5:23:21:5a:65:4e:8f:21:e1:44:89:
c3:36:19:4e:41:d2:c9:51:28:96:ca:8d:30:51:78:
0f:84:aa:f1:5b:a0:6e:1b:70:2f:d6:28:d8:5d:0f:
42:e3:15:2f:5f:9a:f0:80:2e:0a:da:e7:c1:d1:56:
d5:4b:ec:48:ef:07:08:3c:49:dd:7f:5f:24:32:f5:
95:d5:76:e6:a0:97:91:84:f6:b1:8b:63:42:7c:91:
93:0d:6c:ca:a4:1b:60:b3:8d:f0:9a:22:ee:5e:17:
43:46:24:49:80:48:88:7a:d0:42:ff:b5:eb:af:a2:
04:7c:6e:3b:0b:4c:bc:f9:4e:93:e3:21:54:07:51:
d3:81:b8:24:dc:88:6e:cc:b3:98:d7:a2:e7:e4:85:
85:e2:cf:b4:7a:85:16:d2:98:48:c4:e8:62:81:c9:
fc:ed:79:db:8d:20:32:7d:1e:bc:e4:6c:bf:e9:ac:
93:b7:10:26:8b:6b:cc:9d:eb:ae:b2:fb:9c:53:34:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:2E:E2:31:98:66:59:D0:41:A9:F8:09:8C:C4:59:FC:86:A0:E7
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DC39CD52543F11EEB5665F614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.96.0/24
196.44.117.0/24
196.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3c:7c:d0:7d:56:aa:4b:22:e5:b8:b7:16:3e:df:3c:0a:34:
c8:f0:f7:04:49:32:de:88:ab:4d:2f:42:0a:b8:ba:38:c3:29:
ad:0f:02:12:fe:7d:00:48:7a:d8:1a:96:f8:7c:51:b5:be:b4:
45:0b:ea:9b:01:b4:01:a9:fb:b8:a4:33:f8:5e:cf:85:2e:15:
a5:09:ba:cb:e7:96:45:bb:1a:0c:e8:6b:f6:9c:96:ad:be:08:
58:c6:c3:9b:ad:85:f0:30:0b:6a:97:7e:be:76:7b:24:40:4d:
e5:56:be:07:2e:eb:af:ab:ce:88:b4:26:5c:8d:79:e6:e5:a9:
68:8c:92:10:03:ae:73:c9:1d:ea:e9:41:9b:22:bd:1b:a5:79:
59:0b:d6:9a:e4:e5:2f:4b:f2:4c:6c:4c:87:31:2e:9c:5a:2a:
99:8f:fd:06:a0:08:72:dc:f7:8f:7f:c6:98:74:17:23:bd:4b:
75:f2:86:fe:04:a2:57:95:e0:bb:f1:99:a9:95:32:98:5d:79:
5e:7d:8a:10:b1:89:7d:5b:90:fd:e8:b4:a4:3f:77:e8:bf:a4:
96:ab:b5:cf:77:bb:31:f9:83:4e:a9:7b:8f:33:42:65:7b:2c:
5b:33:e2:b9:b3:34:1f:88:65:ae:1b:ad:95:51:ad:6b:73:ce:
fb:d2:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org