Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E99DD78AFF3811EBBE420D75D8A014CE.roa
File: E99DD78AFF3811EBBE420D75D8A014CE.roa (raw, json)
Hash identifier: JlHGvVvo0nnwHJVvOFrPCn0wvoVd7pfJmWcY7YbpVGE=
Subject key identifier: 74:28:B4:E2:DF:AF:85:8F:EC:C3:81:8A:2C:E9:87:05:32:96:26:3A
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 26
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E99DD78AFF3811EBBE420D75D8A014CE.roa
Signing time: Tue 17 Aug 2021 08:56:36 +0000
ROA not before: Tue 17 Aug 2021 08:56:29 +0000
ROA not after: Wed 16 Aug 2023 08:56:29 +0000
asID: 37790
IP address blocks: 2001:43fd:c000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Aug 17 08:56:29 2021 GMT
Not After : Aug 16 08:56:29 2023 GMT
Subject: CN=611b79c4-3d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:f5:cd:4e:db:f3:ed:9e:4b:2f:8c:c1:56:
42:37:97:14:2d:74:db:2d:84:5b:96:c7:ae:90:10:
e8:30:18:ce:ca:3f:ac:24:95:d7:b1:2d:bd:9f:42:
3b:8a:00:12:ba:3a:03:d2:43:42:09:ac:16:b0:34:
4b:36:39:30:34:e9:7a:f3:21:38:6d:d8:40:de:6b:
f4:76:f2:b1:8c:3d:e1:7b:02:f2:f8:10:1d:1a:f1:
4a:a2:79:93:2c:f3:9f:a0:5f:0c:d2:00:56:3b:44:
8a:b1:10:41:da:c7:5e:ab:d1:10:38:5e:09:5d:34:
c3:0f:2c:20:79:55:cb:6b:35:18:4a:08:ac:d1:b3:
68:45:e2:8d:4d:c4:10:1f:7c:e7:e9:ed:05:ea:8b:
c0:b7:7b:c3:c9:67:3f:aa:16:d4:b7:91:d9:5f:72:
73:2d:0a:db:57:6d:3d:7e:1f:17:4b:53:e5:fe:e9:
6f:ab:ae:33:c1:ce:30:1f:38:1c:87:ba:77:4c:73:
80:fc:df:79:74:12:70:b0:55:12:52:9e:dd:02:81:
f7:05:85:48:8d:dc:a9:3b:ec:2f:1c:62:49:9e:46:
5c:ad:36:55:74:49:59:69:a9:db:e8:a7:ff:57:94:
d2:9a:18:cb:f9:2c:4c:83:bd:0c:47:2b:26:67:fd:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:B4:E2:DF:AF:85:8F:EC:C3:81:8A:2C:E9:87:05:32:96:26:3A
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/E99DD78AFF3811EBBE420D75D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43fd:c000::/48
Signature Algorithm: sha256WithRSAEncryption
2d:95:67:5b:97:cf:42:59:b5:4a:28:79:8f:9e:98:74:8f:96:
7f:f1:a2:7b:9f:b5:e4:4e:0a:79:00:03:6a:96:f2:c3:1a:64:
59:93:d7:bd:60:c0:dd:ef:0c:88:2f:58:39:38:77:9f:fa:33:
ea:1f:57:02:84:49:e2:5d:46:f2:af:09:0c:d2:d9:da:70:97:
eb:40:ce:56:37:b9:16:9e:a1:d5:4c:4f:e0:b2:3b:e4:5b:2d:
61:ab:1f:de:46:44:57:66:4c:ed:38:28:e5:0f:da:33:ca:8e:
98:3a:79:68:f9:86:99:5a:03:d2:a2:bf:4d:73:04:11:a6:33:
18:bd:2f:0a:1e:51:43:25:d9:65:89:90:c1:6f:3a:3f:ba:e4:
16:a2:4b:e5:38:1f:92:c0:23:43:1f:35:48:37:87:30:1d:41:
2e:8f:00:bd:81:32:eb:38:9d:53:b2:e1:f2:87:a7:70:57:da:
16:6b:df:16:ee:d7:52:85:d0:cb:9c:fe:da:16:8a:95:5e:9f:
39:4f:ac:3a:1c:60:d5:dc:e3:be:45:3e:f6:20:4e:c5:79:85:
0d:75:92:f7:78:d9:78:7c:df:75:d4:e5:ca:e6:70:62:54:96:
31:bf:42:19:90:85:9a:99:b1:50:3f:a0:80:61:0c:40:d8:12:
71:8d:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 01:43:40 2023 by rpki-client on console-fra.rpki-client.org