Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/07C1C5929EAC11EC8D1F1DE25A40D577.roa
File: 07C1C5929EAC11EC8D1F1DE25A40D577.roa (raw, json)
Hash identifier: 9UHhuTxhcpIeKhdhxbuXSRK9GYgFUfkb6KUwnQwI5a0=
Subject key identifier: 9D:B6:74:94:03:71:4E:3A:A8:4E:85:B7:0F:F2:E8:CF:8F:3E:8A:7C
Certificate issuer: /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial: 0414
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/07C1C5929EAC11EC8D1F1DE25A40D577.roa
Signing time: Tue 08 Mar 2022 06:50:25 +0000
ROA not before: Tue 08 Mar 2022 06:50:19 +0000
ROA not after: Sat 08 Apr 2023 06:50:19 +0000
asID: 37520
IP address blocks: 2001:43f8:750::/44 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Validity
Not Before: Mar 8 06:50:19 2022 GMT
Not After : Apr 8 06:50:19 2023 GMT
Subject: CN=6226fcb0-b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:67:17:51:c7:68:55:09:7c:76:cd:d1:d1:
10:7c:da:a7:ed:c9:35:cc:ad:17:05:ef:1e:fb:c0:
23:e4:96:66:e5:78:61:5f:38:96:7d:f6:a2:a5:6e:
9a:f5:32:d1:cf:79:ab:65:99:94:fe:31:fe:9e:d4:
86:bf:45:e6:0c:4a:57:b6:4c:59:61:7e:af:aa:41:
96:dc:4d:d1:a6:47:0a:88:ee:16:0e:38:74:67:ee:
cf:a7:47:76:13:92:b8:d8:47:20:34:54:50:97:2f:
ae:5f:00:29:e4:52:2d:09:b6:5a:e1:31:81:b8:48:
10:11:8b:7e:ed:9e:98:14:5c:0f:a9:19:c3:a9:b3:
34:12:e5:a7:ef:c2:9d:8a:a2:43:5f:c1:e4:c3:34:
28:30:b1:c2:21:e1:4a:bc:54:e8:d6:bd:80:9e:a8:
1e:85:66:75:a7:a9:80:2a:7b:83:51:2e:6a:51:7b:
c9:bc:d9:68:88:b8:19:2a:cc:d4:b5:4c:d3:fa:ac:
cc:e5:8c:51:97:b6:03:4a:4e:93:85:2a:53:39:1f:
1f:e4:8d:bf:4e:5b:42:f0:a4:38:32:59:ad:d9:4d:
11:58:16:65:f2:14:01:54:e5:4c:a9:a5:23:b4:6f:
1a:0e:06:2d:25:c5:f3:c9:da:5e:ae:9f:a9:24:80:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:74:94:03:71:4E:3A:A8:4E:85:B7:0F:F2:E8:CF:8F:3E:8A:7C
X509v3 Authority Key Identifier:
keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/07C1C5929EAC11EC8D1F1DE25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:750::/44
Signature Algorithm: sha256WithRSAEncryption
6c:85:40:1d:f5:58:99:97:12:06:4e:61:51:44:e1:34:de:55:
2c:f2:3d:b5:06:d2:ee:bf:95:9c:9a:ab:bf:eb:a3:54:dd:e3:
96:e1:7b:62:7b:05:6e:5a:68:7e:71:2a:b9:e1:48:b2:d8:bc:
23:28:19:51:35:d0:33:52:e9:52:3e:98:7b:9e:7d:58:b5:cc:
f4:0d:b1:96:85:3b:d0:db:78:b1:0d:c6:48:18:b7:b7:04:b5:
25:d7:af:f2:04:8c:56:b8:6e:1d:8e:36:25:d5:bb:76:d7:3c:
d4:0a:56:ce:cd:9b:0b:59:fa:d1:ab:ce:a6:e2:19:10:13:ec:
4d:c2:2d:1b:a2:e2:2f:1d:17:12:41:b6:05:2d:54:41:ef:55:
4f:9e:c2:30:58:11:8d:d1:77:15:1a:ab:8d:40:c4:b4:e2:68:
ce:09:1a:ce:a2:a7:6a:92:0b:05:d4:c7:f3:e0:f7:9d:9a:7a:
24:44:8d:cd:9e:d9:95:94:36:4b:d0:46:5a:1e:f6:be:54:d3:
ca:3b:0c:60:87:e1:04:f3:16:a7:97:e8:08:25:ab:13:6c:62:
c9:ae:74:8d:c4:b2:3f:ec:55:22:b1:a8:71:9f:ed:b1:c6:ae:
04:0a:27:51:65:83:f9:8f:b1:82:e1:5d:c0:7a:f6:93:e8:a6:
15:b4:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org