Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/7B1E8CEAF1D911EA959F6A71F8AEA228.roa
File: 7B1E8CEAF1D911EA959F6A71F8AEA228.roa (raw, json)
Hash identifier: WK0qG6cmKVAp7gL8d5mz6x9hge5wo2gvtzwYALdx46g=
Subject key identifier: 5C:7E:E7:20:E6:2F:E8:AF:2C:6E:62:24:70:AF:B2:38:9C:91:A9:43
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 023A
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/7B1E8CEAF1D911EA959F6A71F8AEA228.roa
Signing time: Tue 08 Sep 2020 13:44:57 +0000
ROA not before: Tue 08 Sep 2020 13:44:52 +0000
ROA not after: Sat 09 Sep 2023 13:44:52 +0000
asID: 327687
IP address blocks: 196.43.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF
Validity
Not Before: Sep 8 13:44:52 2020 GMT
Not After : Sep 9 13:44:52 2023 GMT
Subject: CN=5f578ad9-0567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:c2:99:cf:74:b8:70:41:04:d9:bd:4b:3b:
69:32:21:ca:52:78:b0:36:c1:4a:d1:1f:d6:0f:37:
08:32:aa:1e:79:9d:83:0f:21:30:55:5a:7e:ad:24:
7c:cd:63:bb:05:00:21:29:c0:b5:08:65:30:d0:61:
5a:69:84:77:98:b3:cf:92:02:d8:2b:cf:b7:93:91:
46:47:cc:c0:3d:59:0c:25:9b:77:ae:c2:d0:9d:02:
7f:60:2a:ce:38:86:71:17:1f:09:24:c7:25:21:a0:
8b:43:02:c5:70:66:ad:23:06:6c:d4:ec:3d:f4:38:
60:e2:09:71:e2:dc:69:76:10:6e:99:b4:49:f2:81:
37:9a:72:bf:98:08:0a:50:5d:b7:ba:9a:74:af:fa:
08:ea:fe:11:92:b1:97:4b:12:89:a5:8e:1f:ed:84:
35:dc:90:bc:92:21:ed:fc:42:35:8c:a9:1f:2d:b3:
ea:a1:58:98:8d:04:81:e2:3b:a8:29:84:82:73:bf:
15:9b:c7:f3:c1:49:e8:b6:d5:bd:06:2e:d3:a5:cb:
d9:5d:d0:29:9c:19:43:5d:cd:0c:59:7c:d5:51:1e:
00:f6:e5:91:2e:fd:09:76:a0:ec:7c:b8:b7:10:16:
bf:d8:83:50:72:22:71:92:cb:37:2f:63:8c:a5:ba:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:E7:20:E6:2F:E8:AF:2C:6E:62:24:70:AF:B2:38:9C:91:A9:43
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/7B1E8CEAF1D911EA959F6A71F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.128.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ea:c9:c5:3d:e5:e9:8e:f8:b2:d3:d9:2e:8a:5c:43:a9:14:
f5:14:46:d0:ff:48:6a:94:2b:24:0b:a9:94:c2:05:55:0e:94:
20:f2:5c:70:ad:10:7c:fb:64:9e:31:a7:2c:6c:c3:f9:38:ac:
91:f4:f6:16:75:f1:9c:c2:22:6c:9d:4d:ea:61:b4:d4:42:a0:
53:4a:c1:18:3c:aa:0e:6a:ad:48:4c:4b:3c:bf:61:f6:83:78:
d7:5a:7b:10:e2:90:de:b9:d3:46:7b:c2:e2:2d:be:c7:ee:23:
89:b0:e4:d1:a5:f6:4e:c4:26:5e:66:95:4c:f5:37:5c:58:b3:
65:d2:44:eb:46:fb:d5:64:a3:dc:07:c0:ca:83:ae:5f:d2:e1:
a2:6a:38:94:c0:c6:70:5e:77:46:9f:ac:65:8e:bb:7b:68:a8:
6d:3b:a5:13:85:97:4d:52:99:66:15:3b:c3:b6:96:e5:e9:84:
17:f0:f8:9a:1d:d1:33:91:89:3e:65:f9:a5:61:18:5b:3d:e9:
23:13:49:5f:ee:a2:cb:ad:ff:43:02:36:cd:d5:61:c6:65:3f:
e0:09:cd:00:32:1c:a2:26:5e:ae:80:1f:e4:d1:b5:c3:69:52:
27:b2:14:b7:32:54:8f:75:d9:be:ea:c6:10:4e:eb:3b:b2:92:
34:4f:58:72
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAjowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MDgxMzQ0NTJaFw0yMzA5MDkxMzQ0NTJaMBgxFjAU
BgNVBAMTDTVmNTc4YWQ5LTA1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDxsKZz3S4cEEE2b1LO2kyIcpSeLA2wUrRH9YPNwgyqh55nYMPITBVWn6t
JHzNY7sFACEpwLUIZTDQYVpphHeYs8+SAtgrz7eTkUZHzMA9WQwlm3euwtCdAn9g
Ks44hnEXHwkkxyUhoItDAsVwZq0jBmzU7D30OGDiCXHi3Gl2EG6ZtEnygTeacr+Y
CApQXbe6mnSv+gjq/hGSsZdLEomljh/thDXckLySIe38QjWMqR8ts+qhWJiNBIHi
O6gphIJzvxWbx/PBSei21b0GLtOly9ld0CmcGUNdzQxZfNVRHgD25ZEu/Ql2oOx8
uLcQFr/Yg1ByInGSyzcvY4ylusLhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXH7n
IOYv6K8sbmIkcK+yOJyRqUMwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzdCMUU4Q0VBRjFEOTExRUE5NTlGNkE3MUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADEK4AwDQYJKoZIhvcNAQEL
BQADggEBADTqycU95emO+LLT2S6KXEOpFPUURtD/SGqUKyQLqZTCBVUOlCDyXHCt
EHz7ZJ4xpyxsw/k4rJH09hZ18ZzCImydTephtNRCoFNKwRg8qg5qrUhMSzy/YfaD
eNdaexDikN6500Z7wuItvsfuI4mw5NGl9k7EJl5mlUz1N1xYs2XSROtG+9Vko9wH
wMqDrl/S4aJqOJTAxnBed0afrGWOu3toqG07pROFl01SmWYVO8O2luXphBfw+Jod
0TORiT5l+aVhGFs96SMTSV/uosut/0MCNs3VYcZlP+AJzQAyHKImXq6AH+TRtcNp
UieyFLcyVI912b7qxhBO6zuykjRPWHI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:12 2025 by rpki-client