Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
File: 632DBB687FE311EBABA48D44F8AEA228.roa (raw, json)
Hash identifier: J873V+Ql4VHW86RydFU1vsDMLpmg1Gj6z5ANcblFLKQ=
Subject key identifier: 16:39:C0:22:AB:39:04:69:86:4E:61:E6:C2:F5:A3:A7:92:6D:EB:77
Certificate issuer: /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial: 029C
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
Signing time: Mon 08 Mar 2021 07:53:37 +0000
ROA not before: Mon 08 Mar 2021 07:53:29 +0000
ROA not after: Thu 07 Apr 2022 07:53:29 +0000
asID: 37520
IP address blocks: 2001:43f8:750::/44 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AF
Validity
Not Before: Mar 8 07:53:29 2021 GMT
Not After : Apr 7 07:53:29 2022 GMT
Subject: CN=6045d800-7a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:cf:90:c9:a7:85:55:87:bf:e2:cf:b4:ad:
58:91:b9:9c:1b:87:56:2e:df:79:26:66:27:24:27:
df:18:05:05:8d:65:b2:2d:67:ba:e0:81:03:c0:ed:
cf:ed:8f:e2:27:e8:60:96:3f:e4:98:e4:9d:3a:e7:
c9:d3:89:3f:32:56:29:76:26:6c:18:3f:cc:48:27:
a1:a0:58:70:17:b3:1b:f8:94:16:c5:c9:c3:02:61:
bf:9a:47:e4:fd:e6:8e:3e:f4:1a:98:e5:54:e4:bf:
a5:a8:ed:62:4a:1f:a1:13:13:1a:cf:a8:57:cc:f9:
a3:3f:06:21:64:81:2f:79:63:ff:a6:11:51:0a:58:
1e:7c:b4:34:b3:24:5f:69:c3:75:66:cb:d5:9f:47:
96:d8:13:21:d8:2b:44:dc:a6:4e:a2:ec:11:47:b3:
62:98:a5:ee:34:f3:36:5a:4a:a1:cd:e6:58:35:51:
0a:d9:c2:aa:98:f8:5e:20:1b:48:0a:42:25:47:3f:
ae:d0:05:6f:07:02:9d:e2:86:63:e2:79:d1:87:0d:
c0:90:78:2b:e4:77:eb:f7:8a:4e:70:76:9d:d1:b9:
b3:f9:8f:04:fd:76:aa:c7:af:1d:48:f8:16:e3:11:
8d:07:cf:c9:56:3b:95:29:44:08:c5:b1:d8:82:bf:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:39:C0:22:AB:39:04:69:86:4E:61:E6:C2:F5:A3:A7:92:6D:EB:77
X509v3 Authority Key Identifier:
keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/632DBB687FE311EBABA48D44F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:750::/44
Signature Algorithm: sha256WithRSAEncryption
f4:45:90:b1:24:0c:e3:a9:47:61:91:05:01:12:c2:ef:84:43:
14:2d:53:4e:df:d5:16:3a:e5:96:8c:44:24:67:53:76:85:8e:
67:dc:4a:40:22:77:8c:68:33:9e:68:48:f2:f5:e4:d6:a4:0c:
b4:c4:25:9b:ae:3f:49:b2:22:4e:02:a3:75:83:28:79:f2:a1:
93:e1:52:7c:12:7d:6b:4c:45:80:01:ac:9f:f8:7f:e0:9d:0b:
0e:47:30:74:f1:57:dc:49:34:29:ee:0e:a5:2c:74:78:25:39:
4d:77:08:77:b1:cb:f9:aa:c1:b5:7a:7d:37:3b:e2:89:c1:8a:
13:f8:6e:e8:3d:35:16:35:b2:c7:ad:eb:87:1b:83:de:7c:67:
98:7c:1c:11:3f:cb:22:aa:29:a1:65:5a:45:c8:db:4d:81:1c:
b9:65:68:46:a4:0e:1d:8f:3f:da:21:f9:36:8a:aa:28:a5:47:
47:35:69:03:02:c2:b3:cf:21:6f:f3:50:ac:b3:db:ab:9f:b2:
8c:54:e1:19:74:13:f9:cc:41:1d:26:c3:d2:4d:22:a5:0d:40:
e3:40:1d:82:f3:2a:e0:ab:ab:c4:94:55:72:9d:48:12:c6:09:
a0:5a:71:3b:44:1f:4c:ce:90:b5:3f:0a:40:61:ee:34:4e:8b:
02:a8:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:54:56 2025 by rpki-client