Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/40D2787C35CA11ECB67DC62DD8A014CE.roa
File: 40D2787C35CA11ECB67DC62DD8A014CE.roa (raw, json)
Hash identifier: Co30Cs5pDxy5MaQzBemoxhCu41CCC7oA9oHBRHZzvH8=
Subject key identifier: B3:48:5A:3B:7F:D8:65:FB:21:E1:B8:B6:BC:28:36:F5:4A:48:AC:85
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 22
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/40D2787C35CA11ECB67DC62DD8A014CE.roa
Signing time: Mon 25 Oct 2021 19:32:13 +0000
ROA not before: Mon 25 Oct 2021 19:32:09 +0000
ROA not after: Wed 24 Jan 2024 19:32:09 +0000
asID: 37277
IP address blocks: 2c0f:fed8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Oct 25 19:32:09 2021 GMT
Not After : Jan 24 19:32:09 2024 GMT
Subject: CN=6177063d-ed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:16:85:13:4b:42:ea:64:a7:92:18:ff:89:
5a:05:0d:a9:62:6b:1a:54:e3:5f:e7:0f:82:f8:30:
74:c7:9c:19:09:fc:24:03:89:64:2b:83:f8:ae:22:
a7:04:3f:bc:ba:ef:e7:14:23:69:7e:dd:b1:61:5e:
22:ae:27:6d:61:87:d7:ed:c9:37:aa:76:07:39:19:
f1:c1:02:63:d6:a7:51:46:6e:2c:70:08:23:d6:b0:
1d:ba:6e:f7:48:0d:b3:be:14:6a:ab:6e:80:41:52:
27:0f:a6:ce:a1:53:ab:cf:80:11:4b:79:1f:1f:5d:
68:b2:de:b2:33:66:14:59:11:9a:71:6d:b2:6a:b2:
b4:54:40:e6:e7:9c:c9:11:06:f2:12:70:a9:ac:17:
eb:8c:7d:cc:4b:ac:02:9a:34:58:82:1b:9b:fc:6e:
3d:22:66:02:7b:fd:17:36:a5:2d:c5:da:f6:14:7c:
dc:f3:c2:7e:5a:02:2a:bd:29:29:cc:80:ca:9c:54:
82:2a:9b:15:5a:06:e9:09:60:5c:f5:0d:c5:4b:62:
8e:e1:d8:0f:e7:d3:6a:74:aa:e1:58:60:47:b7:8d:
3c:ae:87:88:f8:db:a9:a4:a5:61:da:9d:ec:45:67:
2a:b7:ad:e0:98:57:39:00:ff:27:2f:38:b2:38:28:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:5A:3B:7F:D8:65:FB:21:E1:B8:B6:BC:28:36:F5:4A:48:AC:85
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/40D2787C35CA11ECB67DC62DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fed8::/32
Signature Algorithm: sha256WithRSAEncryption
8d:e3:87:ff:6e:da:0c:50:1c:74:6a:51:b2:c7:e2:d5:30:e6:
c7:f9:cc:6c:e5:e8:56:37:75:0b:29:e3:1b:cb:df:d4:7d:e3:
e8:72:22:4d:6f:3a:da:dd:d6:44:0f:7e:d1:23:47:2b:b0:e2:
1c:60:19:88:d9:2a:75:05:d6:d5:67:35:f8:ce:e4:be:4f:c8:
eb:5e:f9:18:51:b2:84:4c:6e:08:68:73:0c:89:17:b4:42:3c:
1d:e7:d9:e3:27:bc:59:a3:f5:b2:c6:09:f8:f6:1e:32:56:d6:
7f:a7:3f:33:20:b6:9c:21:97:7b:84:95:81:47:0f:50:d3:d9:
ff:3e:3f:03:83:be:2d:0b:29:59:70:c4:8a:73:80:1c:31:e7:
fe:d1:e2:64:da:dc:08:43:c4:5e:d3:67:d5:9c:56:28:97:74:
bd:fb:00:63:51:bf:da:e7:c7:a5:46:9a:84:5f:33:92:61:9b:
c9:a2:22:45:6c:06:e4:be:05:04:19:ab:ea:f0:a0:ae:72:af:
ca:ac:98:e5:06:d4:ea:94:75:b2:4f:dd:10:bd:a0:69:9f:2b:
61:ad:aa:c8:88:64:9f:cd:3e:b6:a2:c2:5c:d1:43:51:5a:36:
fb:97:89:a7:63:a2:d5:33:e2:9e:d3:df:f2:13:16:33:70:26:
2d:3f:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 03:31:24 2024 by rpki-client on console-ams.rpki-client.org