Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
File: 282C5F6AFB4411EBAD5FD43DD8A014CE.roa (raw, json)
Hash identifier: U697+A8R2jbuI4tCp7Ip7s+7/Tv7VpmenljswT/LaRg=
Subject key identifier: EC:2E:98:B6:0C:91:C6:D7:91:A4:5F:22:89:C6:B7:EB:2A:50:60:75
Certificate issuer: /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial: 04
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
Signing time: Thu 12 Aug 2021 08:06:53 +0000
ROA not before: Thu 12 Aug 2021 08:06:45 +0000
ROA not after: Thu 31 Aug 2023 08:06:45 +0000
asID: 328403
IP address blocks: 2001:43f8:13e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Validity
Not Before: Aug 12 08:06:45 2021 GMT
Not After : Aug 31 08:06:45 2023 GMT
Subject: CN=6114d69d-dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:04:af:ba:b0:96:7f:c7:47:eb:6f:d5:4a:
71:ae:2d:ec:67:a5:f4:cd:d9:a4:99:f5:d1:ac:3b:
dd:41:e9:0d:e8:69:c7:6d:79:a7:6d:8c:ac:4e:eb:
57:c8:7a:5d:c7:52:52:eb:07:a0:7e:7e:b1:16:28:
a9:87:ad:d3:a3:c3:6b:5b:64:92:c0:e2:1b:a7:1e:
b7:72:72:b4:40:75:9a:c2:5b:5a:02:66:28:40:03:
c6:8b:7e:e6:3f:ef:d0:75:59:76:45:fa:4d:d0:b0:
f3:38:58:d5:8e:bc:f4:53:42:17:c4:b2:78:60:27:
dc:dc:5e:3a:f2:b3:a3:3a:7f:ee:a6:76:d9:ce:ab:
e6:eb:fb:f5:28:ff:e2:54:9d:de:57:6f:3f:a7:7e:
2f:f3:c1:29:44:32:d5:48:2e:ff:c2:18:dc:e3:32:
68:91:9b:4b:e6:76:24:91:c1:04:d3:75:2e:4c:39:
b5:43:2b:a6:52:76:61:61:4e:c4:14:63:8c:f5:d9:
a5:4b:cb:d3:ca:95:ac:b0:a7:32:fa:d1:da:86:8d:
04:96:cd:66:71:e0:70:a0:05:33:20:66:01:81:4f:
7b:6b:0d:0a:f0:6d:00:b9:b6:c1:52:ef:6a:1e:ec:
a7:89:72:67:c5:09:40:aa:ad:ba:95:ef:c6:3a:63:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:98:B6:0C:91:C6:D7:91:A4:5F:22:89:C6:B7:EB:2A:50:60:75
X509v3 Authority Key Identifier:
keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/282C5F6AFB4411EBAD5FD43DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:13e0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:d7:46:9c:68:e5:b7:c5:92:15:c2:f6:cc:7a:bb:09:c2:a5:
0a:7a:4d:f0:9e:a5:cb:77:c0:11:c0:8d:07:48:cf:eb:65:12:
9d:20:8b:6b:f6:35:8b:3f:bf:ca:c6:76:c1:71:c3:f6:ff:8d:
c4:f8:42:00:c4:58:60:e2:5a:05:4f:9d:63:3e:21:72:08:e2:
e8:af:09:f4:67:79:99:a4:fe:ae:cc:b9:d2:d6:32:05:42:83:
fb:f9:a0:49:a9:f2:bf:47:04:b3:79:dc:85:20:3c:28:e9:70:
0f:81:ac:74:a3:23:8e:74:eb:03:d0:e7:a1:0b:57:07:b7:03:
ef:ec:be:2b:14:89:af:2b:d7:58:c4:1f:7b:9a:13:3d:b4:0d:
8d:e9:51:e7:1a:32:7a:89:2a:39:ae:28:78:aa:ae:c6:4f:b7:
f9:81:ac:2a:14:e9:8e:87:2f:28:2c:f4:91:24:2b:1e:fe:13:
50:72:bb:3a:b5:49:b0:4f:4b:9b:28:be:d4:bb:73:82:4c:26:
e9:51:01:ae:8f:ee:21:34:67:74:42:3c:94:7d:0a:81:8b:2c:
16:6a:b4:06:a6:35:00:e0:ed:8b:26:d0:56:49:17:6b:e2:28:
bb:aa:b7:9f:b8:13:e3:01:6f:0f:a2:29:42:00:67:b2:20:07:
e6:48:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org