Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/FF9CC648999111EBA2A2DE18F8AEA228.roa
File: FF9CC648999111EBA2A2DE18F8AEA228.roa (raw, json)
Hash identifier: Mc1hCl15sEPxyKTY0LJvO4NXXP5P4LzDvEJzPPS03Uc=
Subject key identifier: 3E:C3:BC:9A:96:A3:AC:68:2C:25:09:A8:45:35:3C:B3:2D:90:19:E2
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 18
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/FF9CC648999111EBA2A2DE18F8AEA228.roa
Signing time: Sat 10 Apr 2021 00:16:31 +0000
ROA not before: Sat 10 Apr 2021 00:00:24 +0000
ROA not after: Mon 10 Apr 2023 00:00:24 +0000
asID: 328813
IP address blocks: 2001:43ff::/48 maxlen: 52
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Apr 10 00:00:24 2021 GMT
Not After : Apr 10 00:00:24 2023 GMT
Subject: CN=6070ee5e-d173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:fc:d4:67:24:82:32:27:42:eb:35:de:98:
88:a4:d6:99:87:d1:07:4b:7d:a8:90:4d:46:11:75:
b4:97:91:7a:5c:95:5d:40:7c:2e:6e:cb:f2:c3:db:
e6:81:ef:48:08:5e:59:8f:9b:e6:93:87:4b:c3:93:
d2:ab:d4:e9:56:6c:4a:14:d9:7b:5f:74:ce:f1:12:
1c:a7:52:61:fb:e5:6a:a9:a4:5d:15:a6:c8:39:d4:
13:3e:83:45:d5:86:63:8a:8e:de:1b:b6:cd:eb:9d:
24:56:14:3c:a6:c9:d8:f6:c9:4d:7c:5d:14:5b:df:
18:4f:a4:4f:13:c1:eb:0a:3d:c9:cb:b6:c1:2d:5b:
f6:d9:51:cf:c2:42:2c:24:39:00:74:9b:c8:85:c1:
b7:a3:7c:0b:c9:0f:e4:f0:70:b9:e7:41:f8:84:3f:
1d:ad:55:b4:a7:70:62:50:49:72:dc:4a:ec:7c:ea:
98:05:92:8e:68:a5:06:8f:3b:cd:76:09:86:b3:28:
d6:3f:0e:e9:6b:95:85:b7:cd:3f:95:cf:ac:5a:da:
b3:1b:40:a1:50:87:7f:12:c3:40:58:c1:fe:97:2e:
a7:37:f5:be:fe:d6:ef:70:36:73:01:05:be:66:ef:
1e:2d:8c:4d:65:27:cb:0b:a4:43:12:43:93:01:1f:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:BC:9A:96:A3:AC:68:2C:25:09:A8:45:35:3C:B3:2D:90:19:E2
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/FF9CC648999111EBA2A2DE18F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43ff::/48
Signature Algorithm: sha256WithRSAEncryption
08:dd:74:7a:16:1f:98:d9:a6:de:f0:69:e6:c1:7e:3f:d4:ed:
f6:f9:0c:4d:ae:0e:06:80:10:f8:3e:07:97:ed:80:0b:8b:ab:
5f:8f:f0:0c:26:89:0f:67:2e:f9:4c:21:a9:b1:d6:af:7c:c5:
df:3d:7f:46:9e:dd:32:ab:f7:7d:ca:ea:d7:86:c4:cf:e7:d1:
27:8f:e3:94:84:84:1a:1d:a4:78:57:6f:f6:00:e6:1d:41:54:
6b:0a:82:49:ae:b4:3d:b4:74:e6:28:20:5b:2d:ff:68:7d:d8:
47:ad:85:9f:b4:f8:f1:cd:f1:c3:87:45:39:4c:b5:cb:9f:b3:
a6:c7:56:ac:ab:f8:92:6c:06:e8:ce:94:c8:87:4f:43:e9:28:
26:b3:38:6c:77:8a:44:91:38:77:4c:9b:2d:c6:a0:a8:9c:06:
73:07:4e:6d:69:36:66:4e:4d:0b:0b:56:de:44:30:0b:5d:c2:
c1:45:5c:cc:c4:e3:6a:28:5c:83:bd:4b:67:f9:34:5c:80:33:
f6:18:85:e4:9e:46:04:d3:11:f7:2f:22:d5:97:07:e3:28:c5:
47:c4:31:71:b1:32:4f:41:91:ff:37:c7:72:1a:4a:12:85:98:
5b:32:f9:16:8d:c5:ea:26:21:b7:51:01:15:77:3c:12:2f:55:
cc:3a:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org