Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/E49CF86ED4FF11EB83D12C72F8AEA228.roa
File: E49CF86ED4FF11EB83D12C72F8AEA228.roa (raw, json)
Hash identifier: kCxZ/oB6Pk5wMa9gdi73HhaeZ8zA69gKZTdlCZKov9A=
Subject key identifier: 72:36:05:CB:AE:C0:6D:18:74:33:56:DF:51:53:BB:7C:17:02:39:74
Certificate issuer: /CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Certificate serial: 0C
Authority key identifier: ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/E49CF86ED4FF11EB83D12C72F8AEA228.roa
Signing time: Thu 24 Jun 2021 15:21:48 +0000
ROA not before: Thu 24 Jun 2021 15:21:44 +0000
ROA not after: Thu 22 Jun 2023 15:21:44 +0000
asID: 36943
IP address blocks: 41.61.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3611BE3AF/serialNumber=ED6C9C2BDF76F362655A7E047B976DB2B0D02BEC
Validity
Not Before: Jun 24 15:21:44 2021 GMT
Not After : Jun 22 15:21:44 2023 GMT
Subject: CN=60d4a30c-5d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:fe:8a:22:0b:10:e1:b7:4e:72:8a:cc:6e:
23:85:37:87:c5:ab:6b:e5:57:8e:4d:82:8f:54:93:
bc:9a:c5:b0:12:5e:dd:49:bf:97:f1:70:73:71:e2:
ed:fc:b2:45:a4:6f:f5:f6:31:3e:44:d9:66:dc:cc:
2d:48:09:5c:a5:18:ba:50:c8:c6:e5:83:3d:7e:4d:
3b:97:2a:ed:f7:43:a1:42:b2:62:1a:3a:77:0e:89:
b7:54:18:e0:ff:b0:6e:df:12:dc:b0:15:47:65:7d:
20:08:21:82:d6:04:63:2e:5d:6f:22:5e:b6:56:cb:
73:65:77:b9:82:68:ac:e5:59:b8:87:32:00:22:bd:
8a:52:2a:ed:df:57:1d:3d:46:4a:e6:72:eb:b2:04:
bc:d5:c6:29:c0:44:3b:35:66:81:1d:23:d9:e7:5b:
e3:ae:1f:77:f9:78:97:90:5d:06:3d:19:2a:f7:04:
38:f0:57:83:9d:ad:0d:25:b5:54:f3:60:63:01:b9:
55:85:b6:1b:af:a4:f8:34:05:26:74:ea:85:e7:ed:
b8:3c:a7:64:11:37:c7:b9:77:92:05:bc:23:b5:5c:
7a:75:e3:b8:ea:c6:98:cb:4d:02:51:e9:57:f9:1f:
d8:6a:af:51:c9:41:e9:ec:ee:0d:8a:07:8a:10:51:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:05:CB:AE:C0:6D:18:74:33:56:DF:51:53:BB:7C:17:02:39:74
X509v3 Authority Key Identifier:
keyid:ED:6C:9C:2B:DF:76:F3:62:65:5A:7E:04:7B:97:6D:B2:B0:D0:2B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/7WycK99282JlWn4Ee5dtsrDQK-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7WycK99282JlWn4Ee5dtsrDQK-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611BE3/41ACFDB2D36911EBAC3AEA5BF8AEA228/E49CF86ED4FF11EB83D12C72F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.61.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:04:db:d5:c9:8c:9f:76:64:bc:bf:b1:f0:02:c7:3e:76:ee:
73:6b:3d:c7:1a:7f:08:74:fa:ae:60:3c:f5:a4:5a:4b:53:ca:
10:9a:3e:32:57:47:76:2b:cc:21:2c:93:e9:fc:e5:8a:67:57:
5d:a7:c2:08:e6:d5:19:92:4b:87:cc:d4:62:51:9b:b0:9f:96:
5c:41:ca:f5:db:9f:88:03:33:94:bc:9a:67:f9:23:39:6b:5f:
10:4d:6d:b4:9a:18:a5:43:09:fa:10:e6:a3:79:25:0a:60:62:
8f:92:b5:36:85:59:c4:d8:6d:bb:db:f7:71:77:fd:14:88:22:
0e:10:26:c9:ce:ff:85:ce:56:a1:ee:7a:51:b0:ba:39:eb:cf:
e6:9e:77:66:18:db:23:aa:2c:f4:ed:3b:03:c9:06:33:c2:4a:
2e:32:bf:ea:40:17:eb:f8:e7:a4:7e:28:66:c7:aa:60:39:92:
9c:e1:46:a7:e8:28:28:02:12:47:2f:23:dd:8a:87:63:f3:a1:
0e:a3:ca:3a:2d:03:ea:22:10:eb:ab:89:c3:97:60:d1:dd:07:
67:2f:66:41:99:9d:27:04:b6:f5:7b:30:c2:50:00:c7:f2:65:
d1:da:78:6a:a4:87:92:60:cb:0d:70:da:6f:1e:1f:ec:bc:4e:
20:9f:0a:65
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MUJFM0FGMTEwLwYDVQQFEyhFRDZDOUMyQkRGNzZGMzYyNjU1QTdFMDQ3Qjk3NkRC
MkIwRDAyQkVDMB4XDTIxMDYyNDE1MjE0NFoXDTIzMDYyMjE1MjE0NFowGDEWMBQG
A1UEAxMNNjBkNGEzMGMtNWQ5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKvO/ooiCxDht05yisxuI4U3h8Wra+VXjk2Cj1STvJrFsBJe3Um/l/Fwc3Hi
7fyyRaRv9fYxPkTZZtzMLUgJXKUYulDIxuWDPX5NO5cq7fdDoUKyYho6dw6Jt1QY
4P+wbt8S3LAVR2V9IAghgtYEYy5dbyJetlbLc2V3uYJorOVZuIcyACK9ilIq7d9X
HT1GSuZy67IEvNXGKcBEOzVmgR0j2edb464fd/l4l5BdBj0ZKvcEOPBXg52tDSW1
VPNgYwG5VYW2G6+k+DQFJnTqheftuDynZBE3x7l3kgW8I7VcenXjuOrGmMtNAlHp
V/kf2GqvUclB6ezuDYoHihBRX6cCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRyNgXL
rsBtGHQzVt9RU7t8FwI5dDAfBgNVHSMEGDAWgBTtbJwr33bzYmVafgR7l22ysNAr
7DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTFCRTMvNDFBQ0ZEQjJEMzY5MTFFQkFDM0FFQTVCRjhBRUEyMjgvN1d5Y0s5
OTI4MkpsV240RWU1ZHRzckRRSy13LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvN1d5Y0s5OTI4MkpsV240RWU1ZHRzckRRSy13LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTFCRTMvNDFBQ0ZEQjJEMzY5MTFFQkFDM0FFQTVCRjhB
RUEyMjgvRTQ5Q0Y4NkVENEZGMTFFQjgzRDEyQzcyRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDACk9MA0GCSqGSIb3DQEBCwUA
A4IBAQCrBNvVyYyfdmS8v7HwAsc+du5zaz3HGn8IdPquYDz1pFpLU8oQmj4yV0d2
K8whLJPp/OWKZ1ddp8II5tUZkkuHzNRiUZuwn5ZcQcr125+IAzOUvJpn+SM5a18Q
TW20mhilQwn6EOajeSUKYGKPkrU2hVnE2G272/dxd/0UiCIOECbJzv+Fzlah7npR
sLo568/mnndmGNsjqiz07TsDyQYzwkouMr/qQBfr+Oekfihmx6pgOZKc4Uan6Cgo
AhJHLyPdiodj86EOo8o6LQPqIhDrq4nDl2DR3QdnL2ZBmZ0nBLb1ezDCUADH8mXR
2nhqpIeSYMsNcNpvHh/svE4gnwpl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org