Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/A84B1D18EF9A11EB934A5817D8A014CE.roa
File: A84B1D18EF9A11EB934A5817D8A014CE.roa (raw, json)
Hash identifier: bA8tAVIvVLJfMOgXCdeQZES5pHPmM53ZCDzIl+5WtcU=
Subject key identifier: 22:5A:B1:1F:CB:FF:F7:2E:92:68:84:21:38:A2:31:D2:06:78:D1:BB
Certificate issuer: /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial: 0150
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/A84B1D18EF9A11EB934A5817D8A014CE.roa
Signing time: Wed 28 Jul 2021 11:55:29 +0000
ROA not before: Wed 28 Jul 2021 11:55:20 +0000
ROA not after: Fri 28 Jul 2023 11:55:20 +0000
asID: 15706
IP address blocks: 2001:4228:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Validity
Not Before: Jul 28 11:55:20 2021 GMT
Not After : Jul 28 11:55:20 2023 GMT
Subject: CN=610145b1-8d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:8c:a3:8b:62:d4:d5:c3:ee:64:88:77:c3:
09:91:51:1b:e5:45:ae:8f:6e:7d:d9:ff:8e:16:f9:
15:63:e0:8c:a0:80:61:0f:fb:d8:b4:d7:c3:86:7e:
a6:08:0a:b1:36:ff:b0:bb:1f:c4:f1:4b:b9:df:67:
65:62:6e:c1:e6:63:65:f9:93:29:68:60:9b:c1:39:
72:68:ef:7c:00:ce:66:8c:bb:80:44:49:a7:e6:1a:
01:12:41:ef:dc:ad:0b:aa:eb:c1:bf:a5:aa:88:8b:
94:23:9d:02:84:95:e5:a9:9c:26:d1:4f:4c:b0:a2:
5b:b7:5d:52:be:d9:e1:43:03:cc:41:63:d5:39:c9:
c7:cf:c7:ec:56:92:bc:a5:b2:9e:02:12:c0:82:be:
d2:49:a2:c2:e0:0d:cd:89:4b:8e:b6:0e:df:92:9f:
16:92:d8:08:2e:3b:05:1d:9b:92:37:a0:44:c5:8e:
3a:39:5e:ad:88:4c:32:5a:c1:33:fa:48:10:29:4a:
9b:d2:d6:cc:9c:95:06:a3:f3:cf:8c:bc:cf:35:2c:
85:72:70:d3:7e:ce:eb:78:43:d6:5e:63:be:ea:e3:
24:89:21:6f:38:1a:6b:8d:75:fc:8f:e4:c1:08:ef:
1d:73:3c:96:c1:0f:b1:93:bd:d4:17:73:b1:78:78:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:B1:1F:CB:FF:F7:2E:92:68:84:21:38:A2:31:D2:06:78:D1:BB
X509v3 Authority Key Identifier:
keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/A84B1D18EF9A11EB934A5817D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4228:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
9a:ca:ff:5a:35:38:d8:8f:d5:22:1b:e9:4d:e0:70:2d:2a:ff:
b9:a2:94:21:18:f5:f4:e6:9c:99:32:f2:84:7e:0b:fd:d1:1a:
34:0b:e8:4a:75:e1:1c:fb:a7:67:f2:09:ca:b4:cf:75:22:de:
27:0c:52:52:c6:88:a4:51:bf:ef:d0:2a:62:cd:d2:7f:57:d3:
33:06:e8:2a:4b:1f:8a:26:ee:48:9c:df:be:0b:b8:e6:ae:6a:
05:99:a0:b3:9e:d9:18:89:2e:c0:8c:11:40:3f:f4:06:cf:a8:
7c:c7:8f:ee:40:7b:fc:9c:24:34:f9:57:e3:89:3f:31:2c:3e:
3d:50:a2:51:14:7b:50:75:1d:fc:0f:74:f6:7d:a1:09:d7:83:
57:49:27:50:3a:68:95:73:b6:a6:e6:9e:4b:48:b1:b5:f9:7d:
7b:e2:43:1e:90:ad:70:02:23:f7:ff:a9:bc:72:c0:1f:4c:69:
e0:8d:8a:c9:8b:cb:69:33:80:dc:f9:fa:ca:4b:c7:99:c4:96:
d4:37:ca:9d:3b:54:ff:25:1f:38:93:23:36:cf:cb:61:98:2c:
d8:3d:f4:3f:a7:8a:20:ac:ac:84:32:d8:9a:f2:3f:0b:9d:e8:
9a:3f:d7:1b:71:38:82:81:6f:b6:c3:0c:c2:a5:82:9b:8b:42:
74:7d:8d:7e
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM3MzhBRjExMC8GA1UEBRMoMDFFNjFDM0Y5NjQ2NkE1OTA5OTg1NDc2RTg4NDc5
QkI3RDQxMTJGNjAeFw0yMTA3MjgxMTU1MjBaFw0yMzA3MjgxMTU1MjBaMBgxFjAU
BgNVBAMMDTYxMDE0NWIxLThkNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjyIyji2LU1cPuZIh3wwmRURvlRa6Pbn3Z/44W+RVj4IyggGEP+9i018OG
fqYICrE2/7C7H8TxS7nfZ2VibsHmY2X5kyloYJvBOXJo73wAzmaMu4BESafmGgES
Qe/crQuq68G/paqIi5QjnQKEleWpnCbRT0ywolu3XVK+2eFDA8xBY9U5ycfPx+xW
krylsp4CEsCCvtJJosLgDc2JS462Dt+SnxaS2AguOwUdm5I3oETFjjo5Xq2ITDJa
wTP6SBApSpvS1syclQaj88+MvM81LIVycNN+zut4Q9ZeY77q4ySJIW84GmuNdfyP
5MEI7x1zPJbBD7GTvdQXc7F4eCtpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIlqx
H8v/9y6SaIQhOKIx0gZ40bswHwYDVR0jBBgwFoAUAeYcP5ZGalkJmFR26IR5u31B
EvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNzM4LzdBMEFCRjAwRUVBOTExRUFBMjg3RDkxQkY4QUVBMjI4L0FlWWNQ
NVpHYWxrSm1GUjI2SVI1dTMxQkV2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FlWWNQNVpHYWxrSm1GUjI2SVI1dTMxQkV2WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlDNzM4LzdBMEFCRjAwRUVBOTExRUFBMjg3RDkxQkY4
QUVBMjI4L0E4NEIxRDE4RUY5QTExRUI5MzRBNTgxN0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUIo//8wDQYJKoZIhvcN
AQELBQADggEBAJrK/1o1ONiP1SIb6U3gcC0q/7milCEY9fTmnJky8oR+C/3RGjQL
6Ep14Rz7p2fyCcq0z3Ui3icMUlLGiKRRv+/QKmLN0n9X0zMG6CpLH4om7kic374L
uOauagWZoLOe2RiJLsCMEUA/9AbPqHzHj+5Ae/ycJDT5V+OJPzEsPj1QolEUe1B1
HfwPdPZ9oQnXg1dJJ1A6aJVztqbmnktIsbX5fXviQx6QrXACI/f/qbxywB9MaeCN
ismLy2kzgNz5+spLx5nEltQ3yp07VP8lHziTIzbPy2GYLNg99D+niiCsrIQy2Jry
Pwud6Jo/1xtxOIKBb7bDDMKlgpuLQnR9jX4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org