Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/DFBA3650BBDB11EB8FDA3E33F8AEA228.roa
File: DFBA3650BBDB11EB8FDA3E33F8AEA228.roa (raw, json)
Hash identifier: UBVsTB0DJrHeeDLH+9MA8Cui9wFlmELlNQ7dLuYrBK0=
Subject key identifier: EE:7F:80:11:3B:B0:61:8E:29:1A:06:30:8B:8A:CD:54:20:F8:DB:BD
Certificate issuer: /CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Certificate serial: 26
Authority key identifier: B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/DFBA3650BBDB11EB8FDA3E33F8AEA228.roa
Signing time: Sun 23 May 2021 15:30:59 +0000
ROA not before: Sun 23 May 2021 15:30:54 +0000
ROA not after: Mon 23 May 2022 15:30:54 +0000
asID: 328475
IP address blocks: 2c0f:e818::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361F5C9AF/serialNumber=B7DEB01BACBB4B5A7E9C782FFF99FD8E5DC06CB2
Validity
Not Before: May 23 15:30:54 2021 GMT
Not After : May 23 15:30:54 2022 GMT
Subject: CN=60aa7533-f1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:1a:15:18:73:e8:28:1a:b3:61:89:ec:94:
4c:7d:13:0f:7a:00:10:ca:6b:55:08:01:ff:3d:1f:
06:90:e0:e0:70:8c:b2:cb:14:7f:c7:75:e2:35:b0:
03:97:ac:ab:57:9a:53:09:89:38:2c:f5:dd:3c:3a:
a0:da:28:02:8b:a2:1d:a6:e7:23:f1:c4:66:b2:bd:
3f:06:a3:ee:1a:fe:91:33:f7:ad:dd:74:30:7e:e4:
8e:3f:e6:ff:cd:6c:88:83:8b:cc:fb:13:3c:bf:b6:
08:fd:fc:06:12:36:13:3c:12:69:ee:55:fc:5c:b1:
29:d1:ef:8a:af:0f:41:78:2e:6c:4f:a3:6f:6d:f4:
0b:9a:e8:2e:6f:ea:1c:4d:12:ad:57:1e:10:4b:4e:
c0:07:b3:7b:33:bd:e7:c0:40:1d:13:86:e9:50:79:
1d:1a:39:2f:35:28:d1:4f:41:c1:20:21:eb:dc:b4:
11:95:93:11:ff:f5:79:7c:45:33:48:59:9f:4a:59:
e8:69:88:b8:be:f9:e3:35:14:93:c1:dd:61:d8:5a:
c0:bb:ac:65:cf:48:c6:fb:69:f7:8a:28:44:6b:5b:
98:6d:60:f7:48:18:48:17:8c:7f:e8:c6:89:78:ae:
8a:5b:b1:2e:ce:d9:95:cc:4a:ef:39:04:23:39:4b:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:80:11:3B:B0:61:8E:29:1A:06:30:8B:8A:CD:54:20:F8:DB:BD
X509v3 Authority Key Identifier:
keyid:B7:DE:B0:1B:AC:BB:4B:5A:7E:9C:78:2F:FF:99:FD:8E:5D:C0:6C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/t96wG6y7S1p-nHgv_5n9jl3AbLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/t96wG6y7S1p-nHgv_5n9jl3AbLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F5C9/C6A3DD50A37711EBBC09D782F8AEA228/DFBA3650BBDB11EB8FDA3E33F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:e818::/32
Signature Algorithm: sha256WithRSAEncryption
bd:e6:40:f0:dd:06:ab:74:c6:41:a0:f3:03:ac:d5:a2:5c:f6:
88:d1:e9:2d:02:6a:61:4f:b2:4e:40:95:9d:54:f5:77:9d:91:
dc:f2:0d:5e:6a:77:a4:3f:97:fa:5e:ee:66:db:b5:2d:04:20:
fa:24:b2:65:ac:39:c4:77:66:a0:3b:6b:0b:69:3e:45:55:88:
32:e3:e5:52:a0:0a:3b:5f:3a:85:75:1d:65:52:48:25:30:a4:
3b:55:fe:1b:0b:73:d6:a2:da:25:f1:ef:6a:eb:ab:fd:99:89:
3e:87:3a:36:85:b6:15:e9:c0:1e:83:c1:52:65:62:f3:d9:0e:
29:b8:45:75:84:7e:ed:3f:89:ff:36:6d:dd:77:4e:c5:8a:c6:
80:25:75:cc:52:44:93:87:c2:01:82:5b:bd:1c:7a:98:36:d6:
ad:6e:e1:e8:ed:db:83:de:80:87:a0:cc:e1:b7:fa:66:17:f4:
12:d2:e6:76:e3:a1:c8:64:b7:9c:52:21:f1:c1:0e:03:6b:d9:
9c:37:04:5d:7f:52:be:2a:f6:12:d6:35:90:97:e2:8f:5c:24:
17:1f:0f:4b:72:6b:04:a5:40:ac:db:d9:a1:1c:d7:c3:45:fb:
ce:81:f1:e8:5a:92:6b:b6:d6:69:92:df:c3:e9:16:35:ea:d7:
78:a1:c4:48
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
RjVDOUFGMTEwLwYDVQQFEyhCN0RFQjAxQkFDQkI0QjVBN0U5Qzc4MkZGRjk5RkQ4
RTVEQzA2Q0IyMB4XDTIxMDUyMzE1MzA1NFoXDTIyMDUyMzE1MzA1NFowGDEWMBQG
A1UEAxMNNjBhYTc1MzMtZjFlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALSnGhUYc+goGrNhieyUTH0TD3oAEMprVQgB/z0fBpDg4HCMsssUf8d14jWw
A5esq1eaUwmJOCz13Tw6oNooAouiHabnI/HEZrK9Pwaj7hr+kTP3rd10MH7kjj/m
/81siIOLzPsTPL+2CP38BhI2EzwSae5V/FyxKdHviq8PQXgubE+jb230C5roLm/q
HE0SrVceEEtOwAezezO958BAHROG6VB5HRo5LzUo0U9BwSAh69y0EZWTEf/1eXxF
M0hZn0pZ6GmIuL754zUUk8HdYdhawLusZc9Ixvtp94ooRGtbmG1g90gYSBeMf+jG
iXiuiluxLs7ZlcxK7zkEIzlLU4UCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTuf4AR
O7BhjikaBjCLis1UIPjbvTAfBgNVHSMEGDAWgBS33rAbrLtLWn6ceC//mf2OXcBs
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUY1QzkvQzZBM0RENTBBMzc3MTFFQkJDMDlENzgyRjhBRUEyMjgvdDk2d0c2
eTdTMXAtbkhndl81bjlqbDNBYkxJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdDk2d0c2eTdTMXAtbkhndl81bjlqbDNBYkxJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUY1QzkvQzZBM0RENTBBMzc3MTFFQkJDMDlENzgyRjhB
RUEyMjgvREZCQTM2NTBCQkRCMTFFQjhGREEzRTMzRjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP6BgwDQYJKoZIhvcNAQEL
BQADggEBAL3mQPDdBqt0xkGg8wOs1aJc9ojR6S0CamFPsk5AlZ1U9XedkdzyDV5q
d6Q/l/pe7mbbtS0EIPoksmWsOcR3ZqA7awtpPkVViDLj5VKgCjtfOoV1HWVSSCUw
pDtV/hsLc9ai2iXx72rrq/2ZiT6HOjaFthXpwB6DwVJlYvPZDim4RXWEfu0/if82
bd13TsWKxoAldcxSRJOHwgGCW70cepg21q1u4ejt24PegIegzOG3+mYX9BLS5nbj
ochkt5xSIfHBDgNr2Zw3BF1/Ur4q9hLWNZCX4o9cJBcfD0tyawSlQKzb2aEc18NF
+86B8ehakmu21mmS38PpFjXq13ihxEg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org