Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
File: C9A54E0EB19A11EBAFB68D75F8AEA228.roa (raw, json)
Hash identifier: gn7qRlcDrffMv4Qmz5LMlBB0d73Lmjxdgcc054Pkz0c=
Subject key identifier: CB:C5:59:FF:C6:DB:9B:01:6B:F2:31:D8:6E:48:1D:A0:C5:CB:ED:D8
Certificate issuer: /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial: 07
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
Signing time: Mon 10 May 2021 14:19:53 +0000
ROA not before: Mon 10 May 2021 14:19:48 +0000
ROA not after: Wed 10 May 2023 14:19:48 +0000
asID: 36925
IP address blocks: 2c0f:fb20::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Validity
Not Before: May 10 14:19:48 2021 GMT
Not After : May 10 14:19:48 2023 GMT
Subject: CN=60994109-fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:23:ea:a2:c9:a8:9b:40:ae:9e:16:41:f8:
87:18:8a:0d:e2:a5:f8:bf:b9:f3:3b:08:1b:0a:d3:
54:af:2e:ff:b8:b2:97:55:5a:35:5e:0c:ea:fd:53:
6a:2d:3f:00:3f:c9:81:b2:32:cd:9a:34:54:ac:0c:
a3:d2:ea:f7:c1:77:27:71:de:7c:2b:77:9e:4b:75:
a8:a4:cd:2f:10:bf:ad:ec:bf:c0:4a:e4:84:47:d6:
f7:9c:38:eb:80:4a:dd:1f:c6:68:8e:cb:94:17:f4:
16:41:13:06:6f:4f:77:d1:c2:f0:4d:c5:4b:51:6d:
e3:37:06:4b:96:9d:86:1f:7b:65:e4:31:cb:c5:cd:
be:0c:32:2f:b8:1d:20:69:39:f5:a4:6d:5d:00:7c:
f4:69:28:44:53:fc:29:f2:0c:6b:97:71:a7:43:85:
40:b3:07:0e:4a:ba:a7:7e:18:58:0b:ff:a4:61:b9:
2a:fc:a6:72:79:ee:83:82:1c:f7:94:13:cf:56:d4:
29:94:8a:df:1b:3a:e1:3c:62:d5:b5:e4:eb:e2:53:
cb:14:d1:fe:c8:b4:9c:97:66:12:22:2c:6c:a5:9a:
f2:1b:db:7e:64:2a:d0:cc:da:c6:b6:22:cf:5f:07:
e8:a5:fc:cc:e0:7f:99:58:b1:99:ec:b4:8f:13:db:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:59:FF:C6:DB:9B:01:6B:F2:31:D8:6E:48:1D:A0:C5:CB:ED:D8
X509v3 Authority Key Identifier:
keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/C9A54E0EB19A11EBAFB68D75F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb20::/32
Signature Algorithm: sha256WithRSAEncryption
62:0d:71:57:d9:fc:98:7c:07:e8:10:95:af:52:3e:cf:a9:ef:
4b:d4:24:d7:4a:e1:5d:39:ea:c6:88:af:77:ae:6e:9e:89:02:
c3:37:04:cd:cc:13:54:0d:7c:8c:5d:a6:94:43:46:23:97:98:
ae:66:82:53:1a:43:bf:ef:ce:1c:34:3a:a7:7f:79:3d:93:dd:
d5:5b:bb:85:4f:fc:b2:3c:15:9c:c4:cf:5d:7b:29:78:06:1f:
f7:9e:a7:e9:47:9d:36:6d:5d:ac:66:7d:d8:29:1d:27:13:0f:
d4:40:af:76:a2:67:1e:00:4c:58:fb:61:2c:48:62:4d:d7:19:
3f:fe:b4:27:58:33:8a:3a:62:89:02:de:57:ac:35:1e:59:f7:
5a:90:a9:8e:1a:14:2c:38:67:3d:be:35:8b:12:32:3c:46:08:
c2:d3:f8:ea:bc:6a:db:7c:69:cf:60:d3:c3:4f:99:4b:5c:60:
23:5a:64:e1:2d:03:0a:2e:4e:29:fd:a6:ce:a9:3b:2c:93:76:
0c:d6:48:96:c8:8d:88:30:9e:ac:1c:e0:9b:ff:35:ed:b5:ad:
11:dd:50:50:47:91:58:59:05:6e:9b:b2:b4:56:34:8e:57:21:
9b:88:fc:2e:d9:51:03:3f:eb:b5:ad:81:d5:ac:8f:c9:06:03:
f1:30:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org