Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/96ADECA6E0D511E8BFA35225F8AEA228.roa
File: 96ADECA6E0D511E8BFA35225F8AEA228.roa (raw, json)
Hash identifier: EwXT2xqnjk17nnTik2OtE6TtCM1IHtafFEp7e4R81A8=
Subject key identifier: 26:E0:C6:28:E2:A5:DD:10:4B:22:89:55:CB:87:12:CB:94:C3:10:CE
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 12
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/96ADECA6E0D511E8BFA35225F8AEA228.roa
Signing time: Mon 05 Nov 2018 08:34:20 +0000
ROA not before: Mon 05 Nov 2018 08:34:14 +0000
ROA not after: Sat 31 Dec 2022 08:34:14 +0000
asID: 36915
IP address blocks: 2001:4370::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF
Validity
Not Before: Nov 5 08:34:14 2018 GMT
Not After : Dec 31 08:34:14 2022 GMT
Subject: CN=5be0008c-e177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:de:f0:8c:49:d5:21:9b:12:f5:18:91:d1:
f7:8e:65:1d:8a:d6:1a:b6:de:35:35:6e:11:e9:e3:
33:37:93:55:44:36:d8:5d:c2:0f:fb:df:ce:61:b7:
af:5e:4c:fa:33:fb:41:0d:84:9c:d8:19:82:c6:6b:
71:9b:71:7c:c0:1a:0f:ad:5a:9e:40:69:b8:d9:a5:
f1:94:b3:3a:7e:73:27:87:a4:17:d8:e8:6c:a3:c0:
77:dd:1f:65:0e:b2:d2:5c:2f:6f:f7:f7:99:3e:93:
11:fb:18:de:f5:aa:41:33:91:12:34:1e:b4:88:6b:
9d:db:aa:bd:69:64:fc:a8:a6:92:d5:21:11:23:47:
c9:d9:5d:37:fc:e2:02:ca:d3:6f:af:31:cb:44:04:
a2:bd:cf:86:10:6e:28:22:0a:f2:2e:7c:f9:6b:da:
ca:37:b3:f6:fe:d5:97:e9:66:4e:21:eb:78:fd:21:
97:cc:27:fe:18:91:f9:cc:0c:2f:47:54:eb:02:d3:
96:f1:15:72:71:c5:20:49:7a:2c:09:d9:fc:a2:83:
2f:03:54:1e:4b:ef:4a:94:4b:c6:75:c9:79:6f:3a:
d4:69:0f:f7:4e:63:8f:4d:ab:29:51:4f:62:e8:dd:
07:a2:3c:d4:26:53:91:7c:e1:97:45:58:39:98:0a:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:C6:28:E2:A5:DD:10:4B:22:89:55:CB:87:12:CB:94:C3:10:CE
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/96ADECA6E0D511E8BFA35225F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:4370::/32
Signature Algorithm: sha256WithRSAEncryption
69:1b:07:24:ef:7a:b5:5d:8f:97:80:d2:c0:21:38:36:0c:71:
d5:1f:29:ba:f3:f1:85:37:83:25:86:e6:80:6d:1a:44:8f:c6:
be:3b:06:1a:27:f8:b7:5b:7e:70:60:3d:97:18:81:24:8d:d9:
23:98:96:b6:7e:aa:00:bb:84:d7:9c:13:51:d4:50:ee:c1:11:
8e:3e:32:d6:ce:61:59:0b:51:15:71:2f:7c:72:67:2b:52:41:
49:9d:97:8c:54:ff:b6:46:01:d9:f2:58:78:76:44:5d:4e:ee:
f7:ce:59:66:b1:e7:4d:e4:f6:15:73:21:5f:d3:ae:c6:d3:f0:
d9:02:b4:b2:a9:81:35:6a:67:2a:e2:76:5a:d3:38:79:5d:f4:
f7:c2:4b:4d:20:ed:a7:2c:00:83:cf:a9:d0:d5:03:2a:54:1d:
13:e9:0f:ed:86:ec:28:89:96:07:86:f8:46:4c:7d:00:32:f6:
e7:c0:8d:5f:a5:0e:40:9c:7f:6f:38:93:79:00:df:eb:cc:08:
be:85:d2:13:03:bd:c8:ac:d4:48:f9:53:42:ee:9b:7c:0b:ec:
b1:59:81:c2:ef:a5:5a:99:b4:82:cf:c2:17:d7:85:4e:9d:96:
cf:5a:8f:46:2b:10:84:96:92:72:b7:30:22:43:ce:5a:15:1d:
74:66:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:09 2025 by rpki-client