Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/6DCC7572ACB711EB9440A915F8AEA228.roa
File: 6DCC7572ACB711EB9440A915F8AEA228.roa (raw, json)
Hash identifier: s+OrhFYB4qa3VtqldRrSfW2UUzFDJ2trA8lU0jVZdEg=
Subject key identifier: 35:C2:53:63:58:9D:6B:F4:E7:50:A5:2A:BB:BF:FD:2C:60:1F:C2:8F
Certificate issuer: /CN=F3668DF0AF/serialNumber=7A85C90EA0A36626DB76D0818419717F5052A974
Certificate serial: 02
Authority key identifier: 7A:85:C9:0E:A0:A3:66:26:DB:76:D0:81:84:19:71:7F:50:52:A9:74
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eoXJDqCjZibbdtCBhBlxf1BSqXQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/6DCC7572ACB711EB9440A915F8AEA228.roa
Signing time: Tue 04 May 2021 09:02:19 +0000
ROA not before: Tue 04 May 2021 09:02:13 +0000
ROA not after: Wed 03 May 2023 09:02:13 +0000
asID: 36939
IP address blocks: 2c0f:f560::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668DF0AF/serialNumber=7A85C90EA0A36626DB76D0818419717F5052A974
Validity
Not Before: May 4 09:02:13 2021 GMT
Not After : May 3 09:02:13 2023 GMT
Subject: CN=60910d9a-c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:cc:0b:9f:1d:2b:62:ff:42:95:eb:36:cf:
af:b7:ec:4b:71:5a:1f:7e:86:3b:bc:62:54:20:ea:
d2:42:73:57:01:e1:b3:d0:ae:5a:ca:5e:a5:a7:a8:
9d:19:94:ea:62:09:95:c0:c8:2d:4f:0f:07:5e:e4:
17:3f:f3:54:6e:62:2f:46:b2:e4:38:93:d2:9e:a4:
a8:f2:70:88:4f:a3:0d:69:39:9a:ae:e7:3c:20:f5:
c0:fe:db:69:2d:a5:1e:12:9d:e7:14:25:7e:3e:72:
17:b8:d8:79:c8:8f:c2:81:5e:b3:3d:b1:36:d9:ea:
b1:45:ca:78:5d:4a:b2:d5:f5:61:06:b5:8e:0c:e0:
b3:17:d0:ee:c4:88:95:e4:41:54:aa:5b:5d:e3:fe:
07:ee:1b:9d:7e:31:a6:7a:d0:9f:46:62:18:87:b0:
76:4f:8f:10:b5:b5:17:0d:d6:c8:15:c1:2c:46:df:
b8:07:1e:e0:6c:fb:67:2a:46:83:9d:ce:d6:1e:41:
71:aa:26:42:9e:ed:21:62:fe:09:58:c9:8e:05:ea:
9e:3a:06:e8:03:9c:04:aa:30:43:8d:c9:8e:70:91:
ea:8c:6b:25:fd:e9:86:ee:09:74:ac:ce:41:5a:90:
2b:77:95:35:7c:c7:2a:7f:ad:5e:0f:43:07:e2:b4:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:53:63:58:9D:6B:F4:E7:50:A5:2A:BB:BF:FD:2C:60:1F:C2:8F
X509v3 Authority Key Identifier:
keyid:7A:85:C9:0E:A0:A3:66:26:DB:76:D0:81:84:19:71:7F:50:52:A9:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/eoXJDqCjZibbdtCBhBlxf1BSqXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eoXJDqCjZibbdtCBhBlxf1BSqXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668DF0/0DCD0F2AACB611EB999DC013F8AEA228/6DCC7572ACB711EB9440A915F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f560::/32
Signature Algorithm: sha256WithRSAEncryption
13:07:bb:8d:93:ee:28:c2:ea:64:b0:7d:cc:01:59:de:c7:47:
af:48:f3:e0:ea:e5:95:b6:d2:bc:72:83:bf:dc:dc:1c:2e:61:
0e:45:3d:c2:04:c7:10:19:a6:99:3c:f1:21:68:c9:8b:0e:f7:
ff:d0:67:44:48:df:93:95:c0:49:28:82:64:ca:01:a5:63:bb:
64:40:0f:28:6d:d4:0a:4e:d0:8e:3a:fc:6e:d3:06:27:ea:68:
a2:5b:93:82:09:2b:82:9f:9d:04:dc:33:eb:09:e2:eb:2b:6d:
e7:31:83:2c:65:15:bd:07:7e:43:a3:b6:c2:9e:8e:8e:c8:54:
b9:52:5a:33:84:0a:65:1c:07:b7:fa:4b:ba:47:1c:9b:53:c1:
93:98:78:63:10:21:2f:d0:0d:29:10:1f:0d:6d:92:99:65:40:
27:ed:b7:ee:ef:2f:c6:fd:9b:12:38:10:0c:f3:f3:f7:ba:e6:
c8:7f:d8:42:3f:25:9a:88:17:0f:e6:8a:57:0e:47:96:b1:ef:
a3:6b:f6:9b:60:8f:c5:8d:bc:f4:0e:34:e7:d0:9a:0d:e9:90:
d1:d3:bf:1b:28:b0:dc:d8:a8:60:fa:74:59:33:2c:9a:bf:8e:
90:be:45:d5:45:49:f9:19:03:85:bd:2d:8c:4f:d9:7d:c8:57:
73:5d:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org