Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/F6935AB8AC1311ECBF46EFC05A40D577.roa
File: F6935AB8AC1311ECBF46EFC05A40D577.roa (raw, json)
Hash identifier: zzRXlqgk8nvBP0qtw7eQvfLCr77nShSWxrj0TMXt6VQ=
Subject key identifier: 44:B0:42:C7:81:50:EB:ED:2E:F5:23:F3:5E:59:99:62:52:06:F7:F3
Certificate issuer: /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial: 08
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/F6935AB8AC1311ECBF46EFC05A40D577.roa
Signing time: Fri 25 Mar 2022 08:17:08 +0000
ROA not before: Fri 25 Mar 2022 08:17:04 +0000
ROA not after: Sun 24 Mar 2024 08:17:04 +0000
asID: 36914
IP address blocks: 197.136.0.0/14 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A34AF
Validity
Not Before: Mar 25 08:17:04 2022 GMT
Not After : Mar 24 08:17:04 2024 GMT
Subject: CN=623d7a84-0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:aa:9a:5a:7c:d6:0a:9e:de:5c:b6:13:99:
08:89:f9:04:41:a9:f4:fa:9c:85:a4:7f:6a:49:65:
d5:bd:0c:d0:2c:e3:fb:1c:13:c2:d4:39:97:7d:9e:
bb:f6:d2:67:11:6d:69:e8:90:5f:f3:08:30:23:47:
a7:e9:b7:1b:56:c8:91:0d:fc:04:ec:15:03:b7:0b:
2d:bc:f5:f6:3c:bb:47:c6:aa:0d:f9:45:6e:21:f7:
4f:7a:49:39:dd:d4:27:19:be:bb:15:c7:2c:f0:a2:
5b:74:ee:4f:73:7e:d3:11:a2:a1:b6:ab:02:e4:72:
8d:3b:29:45:58:f5:37:71:9f:2a:a6:38:14:69:77:
4b:2b:a8:17:da:5e:c9:4b:16:36:5f:8e:55:46:78:
47:de:b2:25:71:e3:c3:6d:39:41:80:92:b6:a7:62:
71:ab:6d:7e:a6:fa:51:91:a3:b7:1a:a0:f2:47:78:
47:f9:1f:fb:9d:c3:cb:4b:0c:c7:f1:0f:11:4c:37:
86:f1:a2:8e:fb:51:b0:9d:1a:37:70:79:15:e3:cb:
49:fb:c1:c2:79:08:9b:0a:39:31:72:d3:1d:1a:02:
e3:7b:a5:ea:53:55:57:cb:59:b7:04:ae:54:e1:56:
3e:76:d5:03:33:44:80:7e:4e:3c:f7:d8:9b:3a:3d:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:42:C7:81:50:EB:ED:2E:F5:23:F3:5E:59:99:62:52:06:F7:F3
X509v3 Authority Key Identifier:
keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/F6935AB8AC1311ECBF46EFC05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4a:7a:25:d7:0e:6f:a3:84:b6:9a:1c:b6:dc:bd:7d:0c:91:70:
2e:11:de:ea:8a:5b:83:ac:71:75:26:15:7c:75:13:8c:2c:cd:
e6:3b:24:d5:ab:0b:98:1c:9f:15:dc:52:b2:f1:2d:75:b4:d4:
9a:ea:05:2b:f7:b0:3a:b8:27:c8:f7:b7:d4:85:63:51:1d:99:
f8:5e:c3:b9:91:2c:8e:75:9b:de:51:66:54:90:37:46:11:81:
cb:12:f5:04:a8:26:df:b5:c4:8d:ce:e7:5f:2e:03:39:10:fe:
97:5f:aa:5f:87:84:3c:4c:0d:d4:76:c9:4a:af:a5:78:a0:90:
bf:58:bb:dd:ef:6b:7b:99:51:08:cf:c2:c2:ca:f5:ca:16:70:
be:74:00:36:f3:9a:3f:71:c4:80:7f:22:6b:1c:f4:43:f0:88:
b1:4e:74:e1:70:ef:f1:f2:08:8a:f3:6a:5e:44:8e:0e:7f:3e:
38:fb:18:21:81:00:3f:73:6e:6b:26:8b:0f:60:d1:c4:46:73:
bc:4e:43:cd:ac:12:0c:98:41:b1:bd:91:d1:1b:78:cc:41:b2:
25:ba:e8:2a:e5:1e:5f:81:f7:9f:db:b0:85:62:ec:a2:91:00:
eb:ca:e1:d5:df:09:11:eb:24:06:95:d8:54:86:56:a0:29:2c:
c8:a6:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:37 2025 by rpki-client