Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/AADA94FEC3A911EBA9D62214F8AEA228.roa
File: AADA94FEC3A911EBA9D62214F8AEA228.roa (raw, json)
Hash identifier: RVqqqlDdotcQcTJjpfhjmD/BLy/c2YBiKd4bxXKk1pg=
Subject key identifier: ED:A1:46:1D:51:D5:40:29:7E:76:19:C7:11:D7:80:6B:06:71:B5:B4
Certificate issuer: /CN=F366EFDFAF/serialNumber=9AEBBD349D64CB3178D8820E041CF22A7F699E89
Certificate serial: 02
Authority key identifier: 9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/AADA94FEC3A911EBA9D62214F8AEA228.roa
Signing time: Wed 02 Jun 2021 13:51:45 +0000
ROA not before: Wed 02 Jun 2021 13:51:40 +0000
ROA not after: Sun 02 Jun 2024 13:51:40 +0000
asID: 15964
IP address blocks: 2001:43f8:1470::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366EFDFAF/serialNumber=9AEBBD349D64CB3178D8820E041CF22A7F699E89
Validity
Not Before: Jun 2 13:51:40 2021 GMT
Not After : Jun 2 13:51:40 2024 GMT
Subject: CN=60b78cf1-effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:60:b0:bf:05:f2:ef:36:2b:83:95:e4:50:
59:ca:9b:67:71:15:a4:4b:a0:70:c2:3e:c6:00:de:
83:ec:b8:b3:dc:1d:8e:c9:0e:7c:7a:4b:ae:12:f4:
da:91:d2:94:0e:ae:94:56:0c:fc:c3:14:08:0a:27:
a8:ba:98:09:ab:05:f2:45:38:05:56:51:6a:ca:5a:
d9:01:3d:00:4f:11:12:89:c5:77:9a:4f:79:9e:9b:
00:c2:9d:e0:1b:08:6a:84:08:41:f9:0c:60:5d:ec:
bd:91:6c:d6:3f:6d:c7:bc:f8:8f:d4:d2:72:19:b8:
bc:db:d6:12:85:9a:df:60:53:bf:5c:f8:cd:7d:1d:
39:01:5c:84:e5:b9:cb:b7:aa:80:d8:d0:90:8a:3c:
5b:46:75:bb:74:0e:aa:27:80:0e:0e:ef:59:82:07:
2f:8e:59:61:0b:71:1c:3a:da:3a:79:9d:67:57:9c:
87:d8:c0:ba:40:be:83:30:2e:64:0e:bf:b5:4e:a2:
14:01:49:f4:5e:34:31:5d:0f:d4:96:b7:c9:66:36:
8a:6d:9f:e9:7d:1a:8f:fb:be:21:8e:9c:65:66:f4:
7b:28:d7:40:bc:a1:49:c5:58:cf:f6:fe:04:a5:35:
6c:0a:06:ca:c1:bb:6d:27:a1:fe:4d:75:83:c5:f2:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:46:1D:51:D5:40:29:7E:76:19:C7:11:D7:80:6B:06:71:B5:B4
X509v3 Authority Key Identifier:
keyid:9A:EB:BD:34:9D:64:CB:31:78:D8:82:0E:04:1C:F2:2A:7F:69:9E:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/muu9NJ1kyzF42IIOBBzyKn9pnok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/muu9NJ1kyzF42IIOBBzyKn9pnok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/AC0DD8BEC3A811EB8F648912F8AEA228/AADA94FEC3A911EBA9D62214F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1470::/48
Signature Algorithm: sha256WithRSAEncryption
d2:27:61:bd:91:92:48:f9:b6:a9:87:e9:c5:c9:8d:72:88:32:
bf:72:f6:19:76:f3:8c:c4:15:8c:e3:cc:6b:fc:18:5f:dc:c2:
1d:6e:72:35:9c:6c:65:32:db:e3:5d:f1:58:0c:a3:49:0e:c2:
68:86:3f:8d:54:55:6e:f3:ea:df:c0:fb:1e:21:e5:a0:4f:80:
87:bc:29:ef:00:c6:d1:17:5b:2b:a7:31:a4:b6:13:eb:00:a4:
3e:8a:91:ba:91:0c:85:06:9f:5f:81:1f:6e:29:34:6c:40:48:
35:81:eb:e8:18:6b:5d:38:63:99:a6:3a:c4:f7:1a:04:bd:1f:
0c:f3:53:17:0a:e9:f4:bf:98:1a:64:d6:84:81:99:a6:29:b9:
36:55:b8:a9:9c:43:0a:ed:24:bb:49:f8:e5:e1:dd:90:ed:62:
29:b8:e1:4b:c6:c3:82:fd:b9:4d:22:94:03:a9:2c:52:37:30:
74:d7:9f:4e:10:b2:68:6f:ee:e1:40:55:d8:65:f7:ae:3a:84:
3a:b0:50:1a:65:fa:f9:14:3a:32:66:07:21:27:e6:12:b4:e1:
40:22:07:a3:ea:65:fa:a7:67:5a:92:ab:c0:4a:af:9d:ae:74:
cb:8c:e4:44:0b:33:e2:c9:23:54:0e:32:90:b5:09:ba:13:03:
77:42:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org