Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/5C6E5126AC1411EC87BD08C25A40D577.roa
File: 5C6E5126AC1411EC87BD08C25A40D577.roa (raw, json)
Hash identifier: xD9AMWpRzyZEDJqvKJnIFIEUpBZgwtTuFnUuqjiheEo=
Subject key identifier: 95:41:E7:D4:6C:C6:B6:31:2B:0E:B4:24:9A:7B:41:43:1E:59:79:45
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 0C
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/5C6E5126AC1411EC87BD08C25A40D577.roa
Signing time: Fri 25 Mar 2022 08:19:59 +0000
ROA not before: Fri 25 Mar 2022 08:19:56 +0000
ROA not after: Sun 24 Mar 2024 08:19:56 +0000
asID: 36914
IP address blocks: 2c0f:fe08::/32 maxlen: 127
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Mar 25 08:19:56 2022 GMT
Not After : Mar 24 08:19:56 2024 GMT
Subject: CN=623d7b2f-271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:a7:f9:34:f2:79:05:f6:76:58:04:09:76:
ba:d6:a4:16:7a:dc:23:a1:0d:8b:ea:4f:3f:54:6c:
df:4d:86:93:95:ff:55:ea:7c:1b:67:70:bb:a2:f0:
fd:53:e9:10:6e:d2:02:50:e6:e7:1a:11:ad:7e:8a:
19:19:c6:c9:38:9b:88:b6:f1:dd:e3:84:df:5b:90:
ae:5d:56:6f:0e:be:4c:ad:23:02:cb:86:7b:7f:59:
07:7e:b4:a6:13:95:0a:c1:8f:ba:6e:e6:37:a7:c1:
22:d3:ea:f6:cb:c5:32:7f:6f:0b:6b:f9:42:1d:18:
59:15:07:12:7b:67:33:3a:be:1d:96:2b:a6:fc:80:
d9:ed:ea:cf:8b:05:f2:d5:a8:97:13:e5:30:b6:21:
94:9b:50:df:d2:dc:ec:44:45:a3:00:02:28:85:ac:
ee:fc:93:ab:ba:6f:e5:05:f4:18:cb:03:7c:18:97:
4d:9c:5e:f9:4d:4b:4b:96:3c:ad:ce:74:f4:1d:e8:
9d:8b:96:e2:da:a6:1a:a5:5a:82:7f:7d:b7:35:c4:
08:96:38:18:28:28:b8:4a:42:25:1f:42:ce:b6:48:
bc:31:e7:07:d1:e5:dc:4a:00:ee:e6:95:b5:68:0a:
7f:85:4a:b0:ce:0c:86:40:8e:91:c0:2b:28:ca:a0:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:E7:D4:6C:C6:B6:31:2B:0E:B4:24:9A:7B:41:43:1E:59:79:45
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/5C6E5126AC1411EC87BD08C25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fe08::/32
Signature Algorithm: sha256WithRSAEncryption
6c:c4:dd:5c:77:01:13:60:9b:04:ce:33:1d:2c:1d:07:34:c2:
5c:a2:5a:92:5a:ac:fb:fa:6f:8a:b9:f3:0e:93:4c:68:11:0f:
b2:cb:fa:50:b4:1b:5c:6d:64:95:2b:76:89:05:48:85:79:78:
61:d6:5d:90:c6:a7:8d:5c:c5:07:ec:16:54:4d:55:fe:30:de:
c6:45:a3:95:ad:5d:9d:29:40:d9:33:c8:ea:86:87:2c:cc:98:
c9:95:29:8d:2d:f4:86:f6:e6:8c:c6:3f:f1:18:f4:f9:48:5d:
ff:c7:94:db:f8:b8:0d:21:08:ab:78:2c:16:64:54:75:ee:de:
1a:6e:1f:d9:fa:e3:36:e1:9d:d7:ee:8b:44:d4:61:c3:25:16:
bb:9e:e1:a4:ae:ef:7e:4d:34:71:0a:c3:35:c0:8f:37:29:b8:
b5:f0:dd:b3:8f:c5:4c:1a:f9:59:e2:53:57:4f:0e:3c:0a:e4:
9d:93:8a:61:84:72:52:d4:8a:b8:50:76:f7:5b:e4:0b:17:b1:
2c:64:a4:00:df:17:84:ba:a0:8a:46:3f:a2:78:96:b0:c4:cb:
53:6c:0f:ec:b9:c9:75:99:9b:07:9b:06:8e:fe:86:43:ea:68:
72:8f:18:f5:cd:03:bb:48:d0:c3:70:e2:7f:82:c2:3e:f5:27:
5a:18:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:03 2025 by rpki-client