Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/37CA4364154411EC8DF4C413D8A014CE.roa
File: 37CA4364154411EC8DF4C413D8A014CE.roa (raw, json)
Hash identifier: ikC+XREoX0KTUeGeRjb8rNoV94zDJyqAZOlbMXYfOeE=
Subject key identifier: 21:E1:DE:FC:E1:B3:DD:0C:7E:07:5F:12:2F:E5:4D:93:A9:68:0F:97
Certificate issuer: /CN=F365DBE0AF/serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
Certificate serial: 03
Authority key identifier: AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/37CA4364154411EC8DF4C413D8A014CE.roa
Signing time: Tue 14 Sep 2021 10:12:08 +0000
ROA not before: Tue 14 Sep 2021 10:12:04 +0000
ROA not after: Mon 31 Jan 2022 10:12:04 +0000
asID: 37479
IP address blocks: 197.155.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365DBE0AF/serialNumber=ADDC6BBDD1EFF06452D531A6A49F7B030C97C614
Validity
Not Before: Sep 14 10:12:04 2021 GMT
Not After : Jan 31 10:12:04 2022 GMT
Subject: CN=61407578-1697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:a6:df:47:8b:7a:52:fd:46:de:84:cf:5e:
d8:be:d6:86:9a:7e:b5:c9:55:65:cc:7e:b0:c0:0c:
7f:49:6d:6a:da:b6:d5:08:d9:ee:4d:02:15:f1:be:
77:2b:7e:2e:10:df:7e:b1:29:d6:b9:81:17:94:ee:
7c:54:fb:0e:1e:8c:a7:59:92:ae:59:66:db:1f:aa:
bb:d6:8e:b6:cf:cb:8d:2f:7f:36:07:cd:89:b9:5b:
fe:a0:59:c1:09:f5:23:3d:84:7b:68:c0:17:96:cb:
09:eb:9f:ed:5a:df:c0:c1:a7:53:c9:90:08:d3:09:
2a:58:52:15:5c:4a:83:19:24:61:7f:50:8f:d1:a8:
6b:6d:e8:f8:f6:5e:0f:a0:ba:76:01:21:75:a3:69:
30:66:d2:af:76:c0:7e:81:0a:cd:d0:27:ee:99:4f:
d1:cf:b9:9e:af:cc:fe:d7:56:32:f8:6d:01:1b:a1:
44:ca:01:a8:2f:a9:d3:87:79:5b:8d:d9:a8:92:72:
bb:5c:87:96:90:b9:cc:49:91:d2:78:27:f6:9c:3a:
2f:87:ba:7b:82:d9:73:80:c9:dc:f9:cb:c5:a3:72:
e3:4a:02:5d:17:36:70:81:a1:23:46:d8:c2:b6:ff:
5d:23:15:2d:89:0c:b7:d5:78:4c:43:81:ca:5a:c6:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:DE:FC:E1:B3:DD:0C:7E:07:5F:12:2F:E5:4D:93:A9:68:0F:97
X509v3 Authority Key Identifier:
keyid:AD:DC:6B:BD:D1:EF:F0:64:52:D5:31:A6:A4:9F:7B:03:0C:97:C6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rdxrvdHv8GRS1TGmpJ97AwyXxhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365DBE0/A5D4ED36149111ECA2945578D8A014CE/37CA4364154411EC8DF4C413D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.248.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:52:b4:05:f0:d5:b9:73:39:a9:88:0d:b1:7b:4e:01:0e:62:
9b:96:ca:dd:5b:94:fd:07:7a:e9:c1:b2:8c:38:7b:2b:fb:5f:
25:d0:86:3a:96:25:a4:8c:6b:0a:3e:bd:80:13:44:12:15:9c:
83:3b:34:0d:85:d5:e5:63:7d:15:55:70:97:86:3f:7f:ac:9f:
68:bc:90:41:5f:38:c5:06:ff:7e:f7:d2:f9:b2:40:02:9a:ff:
bc:03:5e:d8:53:78:bf:63:a9:06:4f:40:aa:26:c0:98:a3:bd:
98:00:84:63:8b:d7:87:9a:f9:d0:c0:ba:f8:1b:e2:f2:15:46:
5f:6b:52:e8:27:2a:3e:89:9f:30:95:be:83:c8:5a:ec:80:94:
a2:6a:00:ec:e4:98:99:c6:d0:ac:4e:63:f3:d1:47:38:c3:d3:
ec:36:2b:a0:cd:27:4b:99:24:16:d3:28:12:b8:16:74:c2:dc:
a4:0e:98:a5:29:af:ad:eb:e7:ef:55:f6:f9:ad:78:6a:be:cd:
84:c7:8a:74:37:d2:26:50:e4:71:a9:59:71:38:e0:f9:9c:fd:
65:63:79:ec:52:2b:d3:50:b4:c3:93:94:d5:75:6c:cd:91:74:
d0:4d:e9:fe:a8:1c:5c:ba:c0:83:96:0f:52:27:f8:1b:cf:57:
1d:c2:ba:d7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
REJFMEFGMTEwLwYDVQQFEyhBRERDNkJCREQxRUZGMDY0NTJENTMxQTZBNDlGN0Iw
MzBDOTdDNjE0MB4XDTIxMDkxNDEwMTIwNFoXDTIyMDEzMTEwMTIwNFowGDEWMBQG
A1UEAwwNNjE0MDc1NzgtMTY5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN93pt9Hi3pS/UbehM9e2L7Whpp+tclVZcx+sMAMf0ltatq21QjZ7k0CFfG+
dyt+LhDffrEp1rmBF5TufFT7Dh6Mp1mSrllm2x+qu9aOts/LjS9/NgfNiblb/qBZ
wQn1Iz2Ee2jAF5bLCeuf7VrfwMGnU8mQCNMJKlhSFVxKgxkkYX9Qj9Goa23o+PZe
D6C6dgEhdaNpMGbSr3bAfoEKzdAn7plP0c+5nq/M/tdWMvhtARuhRMoBqC+p04d5
W43ZqJJyu1yHlpC5zEmR0ngn9pw6L4e6e4LZc4DJ3PnLxaNy40oCXRc2cIGhI0bY
wrb/XSMVLYkMt9V4TEOBylrGXcMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQh4d78
4bPdDH4HXxIv5U2TqWgPlzAfBgNVHSMEGDAWgBSt3Gu90e/wZFLVMaakn3sDDJfG
FDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NURCRTAvQTVENEVEMzYxNDkxMTFFQ0EyOTQ1NTc4RDhBMDE0Q0UvcmR4cnZk
SHY4R1JTMVRHbXBKOTdBd3lYeGhRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcmR4cnZkSHY4R1JTMVRHbXBKOTdBd3lYeGhRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NURCRTAvQTVENEVEMzYxNDkxMTFFQ0EyOTQ1NTc4RDhB
MDE0Q0UvMzdDQTQzNjQxNTQ0MTFFQzhERjRDNDEzRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8Wb+DANBgkqhkiG9w0BAQsF
AAOCAQEAC1K0BfDVuXM5qYgNsXtOAQ5im5bK3VuU/Qd66cGyjDh7K/tfJdCGOpYl
pIxrCj69gBNEEhWcgzs0DYXV5WN9FVVwl4Y/f6yfaLyQQV84xQb/fvfS+bJAApr/
vANe2FN4v2OpBk9AqibAmKO9mACEY4vXh5r50MC6+Bvi8hVGX2tS6CcqPomfMJW+
g8ha7ICUomoA7OSYmcbQrE5j89FHOMPT7DYroM0nS5kkFtMoErgWdMLcpA6YpSmv
revn71X2+a14ar7NhMeKdDfSJlDkcalZcTjg+Zz9ZWN57FIr01C0w5OU1XVszZF0
0E3p/qgcXLrAg5YPUif4G89XHcK61w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org