Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E8BCA0F69FE411EC80C12A725A40D577.roa
File: E8BCA0F69FE411EC80C12A725A40D577.roa (raw, json)
Hash identifier: PB0tIkCzSwtFMHjVR+1W7qSpMhUsmAImqa8DQdKeKFo=
Subject key identifier: B7:B8:98:03:DE:BE:CC:16:89:CB:F8:A9:57:49:A7:AE:9B:14:87:6B
Certificate issuer: /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial: F0
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E8BCA0F69FE411EC80C12A725A40D577.roa
Signing time: Wed 09 Mar 2022 20:10:05 +0000
ROA not before: Wed 09 Mar 2022 20:10:01 +0000
ROA not after: Fri 31 Mar 2023 20:10:01 +0000
asID: 270068
IP address blocks: 196.44.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Validity
Not Before: Mar 9 20:10:01 2022 GMT
Not After : Mar 31 20:10:01 2023 GMT
Subject: CN=6229099d-0d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:a9:cf:ce:de:c7:5d:5a:99:0c:49:aa:d4:
1f:48:6f:76:08:1a:64:e4:60:a9:8c:28:3f:f3:75:
9b:7f:d3:e7:8c:12:48:44:20:3c:ac:7e:71:45:d1:
aa:10:5c:14:1a:b5:c3:c4:ae:38:d2:04:fc:cd:a4:
a3:d1:c6:2c:1e:ec:c1:7e:d1:0a:0b:e8:f8:ce:a8:
c7:78:23:e2:95:7a:7d:af:ac:56:05:3e:69:71:59:
3e:d6:d7:70:df:9c:f8:ed:e1:2e:70:34:a5:1f:a5:
14:95:d4:ab:51:2a:74:ef:30:3a:64:f4:9e:fe:2b:
a3:ea:60:5e:df:8e:07:a9:3e:e5:a3:4b:4f:3e:b9:
48:9a:b2:e2:28:af:f6:7a:22:e0:b4:db:1a:fb:b7:
0e:4a:6f:77:c7:23:24:d7:65:28:c8:00:30:89:f1:
b6:7e:f8:53:69:87:25:9f:d4:fc:9d:60:fc:fc:18:
a3:7e:07:28:dd:07:e5:b1:ae:63:c6:50:11:5b:c1:
d6:42:61:f6:1e:62:92:f0:1d:64:de:df:67:12:8b:
e2:b9:2e:d7:0b:c5:1c:12:51:3d:7e:ca:54:e4:ae:
2b:85:68:80:7a:fc:21:ff:55:d8:08:a1:72:10:86:
58:88:fc:4d:72:bc:26:25:2d:55:49:a4:ba:e7:49:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:98:03:DE:BE:CC:16:89:CB:F8:A9:57:49:A7:AE:9B:14:87:6B
X509v3 Authority Key Identifier:
keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/E8BCA0F69FE411EC80C12A725A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.126.0/24
Signature Algorithm: sha256WithRSAEncryption
98:61:a0:b7:7d:d5:71:24:7f:da:41:6f:35:bc:a0:6c:ef:58:
b7:e5:42:3f:2e:01:69:a6:e1:e0:c1:35:bc:71:7e:46:55:ae:
38:e6:8d:18:0c:68:f5:c7:50:00:de:e5:11:f2:14:9f:7a:68:
dd:08:29:d5:8e:7c:54:b2:46:29:ba:09:fc:f0:ba:a6:07:8a:
c1:6a:d0:17:59:0b:c7:8b:07:25:02:36:a3:fd:8a:02:8c:35:
98:7c:8f:27:4b:2a:ac:e8:f8:86:61:7d:d7:60:87:15:36:8f:
a3:98:66:ca:90:23:7c:2a:f3:be:5d:17:e5:ea:0c:fe:61:cc:
5a:b4:41:96:e7:fb:f2:82:c2:5e:ab:75:0b:46:f9:88:0e:89:
5c:98:00:7f:f0:c8:c9:3b:48:26:59:97:46:e1:cd:e8:ab:37:
4e:50:28:f4:37:05:2d:53:d1:95:f1:67:c7:9f:97:8f:fc:7e:
38:14:e5:cb:db:af:e3:0e:5d:41:d1:ff:5b:16:f4:83:35:a4:
25:80:71:0f:0d:63:89:09:15:6e:b9:01:9f:ac:5d:f3:68:12:
bd:fe:64:24:8c:0d:d7:76:18:91:08:07:a7:36:31:b4:9d:c6:
0e:09:1b:d7:5f:c6:bd:7a:b4:c2:25:4b:b3:26:10:41:95:4f:
e9:6b:24:b7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yMjAzMDkyMDEwMDFaFw0yMzAzMzEyMDEwMDFaMBgxFjAU
BgNVBAMMDTYyMjkwOTlkLTBkODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVw6nPzt7HXVqZDEmq1B9Ib3YIGmTkYKmMKD/zdZt/0+eMEkhEIDysfnFF
0aoQXBQatcPErjjSBPzNpKPRxiwe7MF+0QoL6PjOqMd4I+KVen2vrFYFPmlxWT7W
13DfnPjt4S5wNKUfpRSV1KtRKnTvMDpk9J7+K6PqYF7fjgepPuWjS08+uUiasuIo
r/Z6IuC02xr7tw5Kb3fHIyTXZSjIADCJ8bZ++FNphyWf1PydYPz8GKN+ByjdB+Wx
rmPGUBFbwdZCYfYeYpLwHWTe32cSi+K5LtcLxRwSUT1+ylTkriuFaIB6/CH/VdgI
oXIQhliI/E1yvCYlLVVJpLrnSYYFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUt7iY
A96+zBaJy/ipV0mnrpsUh2swHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFL0U4QkNBMEY2OUZFNDExRUM4MEMxMkE3MjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELH4wDQYJKoZIhvcNAQEL
BQADggEBAJhhoLd91XEkf9pBbzW8oGzvWLflQj8uAWmm4eDBNbxxfkZVrjjmjRgM
aPXHUADe5RHyFJ96aN0IKdWOfFSyRim6CfzwuqYHisFq0BdZC8eLByUCNqP9igKM
NZh8jydLKqzo+IZhfddghxU2j6OYZsqQI3wq875dF+XqDP5hzFq0QZbn+/KCwl6r
dQtG+YgOiVyYAH/wyMk7SCZZl0bhzeirN05QKPQ3BS1T0ZXxZ8efl4/8fjgU5cvb
r+MOXUHR/1sW9IM1pCWAcQ8NY4kJFW65AZ+sXfNoEr3+ZCSMDdd2GJEIB6c2MbSd
xg4JG9dfxr16tMIlS7MmEEGVT+lrJLc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org