Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/B7F3954A962C11EC9F60C4E85A40D577.roa
File: B7F3954A962C11EC9F60C4E85A40D577.roa (raw, json)
Hash identifier: MkHKQ99L8rBEWjX5jJq8dvo2he7MYSPWwzV/T5aNguY=
Subject key identifier: 69:13:24:7E:A7:DF:D7:B5:9D:E6:FA:C0:78:C0:99:8A:3D:89:47:E8
Certificate issuer: /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial: 065B
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/B7F3954A962C11EC9F60C4E85A40D577.roa
Signing time: Fri 25 Feb 2022 11:18:55 +0000
ROA not before: Fri 25 Feb 2022 11:18:51 +0000
ROA not after: Sun 25 Feb 2024 11:18:51 +0000
asID: 37314
IP address blocks: 2c0f:f1a0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Validity
Not Before: Feb 25 11:18:51 2022 GMT
Not After : Feb 25 11:18:51 2024 GMT
Subject: CN=6218bb1f-dc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:fa:20:9d:d0:aa:48:98:b5:24:cb:40:80:
76:4a:45:8a:34:ad:9a:50:c3:6a:10:26:45:47:0a:
74:5c:7e:a3:08:d4:57:1a:e2:08:3c:2c:08:8e:1a:
38:85:91:56:ce:14:2d:a3:06:27:49:ce:9c:9e:70:
ce:8b:22:c4:d4:8b:22:f0:99:a8:3e:a1:16:a9:f8:
35:5b:fb:a3:8d:a2:a1:9b:13:87:a7:1c:1c:d5:f3:
e7:f0:d2:88:ee:d2:fe:c7:93:65:36:dc:f8:91:94:
06:52:00:b7:a0:05:d0:2e:56:38:36:92:c8:d0:1a:
2a:ac:c2:58:33:27:dc:3b:8a:85:e0:61:3e:2b:5c:
d2:ca:9e:84:fa:82:2c:9c:62:f8:43:f9:70:f2:c5:
7d:36:02:c7:44:37:79:96:fc:6b:dc:db:5e:f1:b8:
18:4f:a8:17:b0:d0:6d:30:59:67:65:e0:d8:02:33:
84:dd:f8:67:fb:11:a1:2a:0d:cb:2d:96:b2:00:a6:
30:b1:e0:85:0a:e2:db:f9:34:76:8b:92:26:27:82:
9f:ea:6d:99:ba:e9:de:7e:38:5f:20:48:b1:01:f1:
d5:c6:6c:73:72:a4:21:cb:50:38:1d:da:47:0e:14:
b5:e9:77:15:4b:6b:2f:1d:4c:d0:ef:91:48:33:b4:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:13:24:7E:A7:DF:D7:B5:9D:E6:FA:C0:78:C0:99:8A:3D:89:47:E8
X509v3 Authority Key Identifier:
keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/B7F3954A962C11EC9F60C4E85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f1a0::/32
Signature Algorithm: sha256WithRSAEncryption
30:3a:8c:9a:1b:83:49:5c:bd:16:f3:1c:e6:4f:8b:5a:ff:75:
70:9d:37:92:87:ec:b9:61:a6:c0:b3:60:4a:94:86:df:87:02:
67:20:2a:3d:88:a7:a4:45:4a:9d:f7:a2:bb:1c:89:79:a9:22:
71:9c:f4:dd:e4:46:b4:09:64:d9:20:3a:fc:66:58:20:77:a8:
c1:eb:e2:f8:c7:1c:19:0f:93:18:44:2c:27:9f:9d:e2:8c:b4:
25:32:13:34:df:4a:7e:65:d3:c8:3b:6f:92:09:42:a0:b6:be:
26:f3:aa:d5:a6:18:45:1d:9f:4f:ce:eb:9a:35:14:7d:7d:47:
c5:73:98:2a:11:8e:34:de:9a:80:52:22:45:1d:88:d4:e7:86:
6c:62:bb:50:ac:24:fd:2c:1f:b7:1b:4b:b8:cd:cb:b8:8f:ad:
fc:91:d2:07:2a:5e:52:3f:d0:eb:2d:9d:3f:7d:0d:0f:44:9e:
76:9d:18:63:0b:0d:c9:ea:50:f6:61:2d:10:5b:38:ff:51:3b:
8f:6f:e3:74:d7:09:93:f0:eb:5f:d5:75:98:2e:05:d3:c6:25:
3f:36:80:75:66:dc:ee:0d:e6:db:04:69:61:83:00:d2:dc:7b:
3a:3e:10:e2:ca:be:7f:30:ad:9d:6e:81:3e:ec:3f:61:83:8a:
e7:24:47:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEIwN0ZBRjExMC8GA1UEBRMoNzg4MjVCMkJDOTA4QTQwRkVGNjJCMjY0ODJENjFB
OTg1NzVGQ0JEMzAeFw0yMjAyMjUxMTE4NTFaFw0yNDAyMjUxMTE4NTFaMBgxFjAU
BgNVBAMMDTYyMThiYjFmLWRjMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6NvogndCqSJi1JMtAgHZKRYo0rZpQw2oQJkVHCnRcfqMI1Fca4gg8LAiO
GjiFkVbOFC2jBidJzpyecM6LIsTUiyLwmag+oRap+DVb+6ONoqGbE4enHBzV8+fw
0oju0v7Hk2U23PiRlAZSALegBdAuVjg2ksjQGiqswlgzJ9w7ioXgYT4rXNLKnoT6
giycYvhD+XDyxX02AsdEN3mW/Gvc217xuBhPqBew0G0wWWdl4NgCM4Td+Gf7EaEq
DcstlrIApjCx4IUK4tv5NHaLkiYngp/qbZm66d5+OF8gSLEB8dXGbHNypCHLUDgd
2kcOFLXpdxVLay8dTNDvkUgztLADAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUaRMk
fqff17Wd5vrAeMCZij2JR+gwHwYDVR0jBBgwFoAUeIJbK8kIpA/vYrJkgtYamFdf
y9MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhCMDdGLzlBMTI5OURFQjlDNDExRTc4QjU5QzA2MUY4QUVBMjI4L2VJSmJL
OGtJcEFfdllySmtndFlhbUZkZnk5TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VJSmJLOGtJcEFfdllySmtndFlhbUZkZnk5TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhCMDdGLzlBMTI5OURFQjlDNDExRTc4QjU5QzA2MUY4
QUVBMjI4L0I3RjM5NTRBOTYyQzExRUM5RjYwQzRFODVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/GgMA0GCSqGSIb3DQEB
CwUAA4IBAQAwOoyaG4NJXL0W8xzmT4ta/3VwnTeSh+y5YabAs2BKlIbfhwJnICo9
iKekRUqd96K7HIl5qSJxnPTd5Ea0CWTZIDr8Zlggd6jB6+L4xxwZD5MYRCwnn53i
jLQlMhM030p+ZdPIO2+SCUKgtr4m86rVphhFHZ9PzuuaNRR9fUfFc5gqEY403pqA
UiJFHYjU54ZsYrtQrCT9LB+3G0u4zcu4j638kdIHKl5SP9DrLZ0/fQ0PRJ52nRhj
Cw3J6lD2YS0QWzj/UTuPb+N01wmT8Otf1XWYLgXTxiU/NoB1ZtzuDebbBGlhgwDS
3Hs6PhDiyr5/MK2dboE+7D9hg4rnJEdl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org