Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/7CC805EA304111EE9AEA51304AD9E6FC.roa
File: 7CC805EA304111EE9AEA51304AD9E6FC.roa (raw, json)
Hash identifier: pmMqq1eisxm2KnrggR9PaTGVlNcng6MXelZpZKq/JX0=
Subject key identifier: 38:03:EA:2F:C9:62:3B:AF:C3:A7:2B:9C:5A:14:6E:5B:CF:39:C1:E7
Certificate issuer: /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial: A5
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/7CC805EA304111EE9AEA51304AD9E6FC.roa
Signing time: Tue 01 Aug 2023 08:00:32 +0000
ROA not before: Tue 01 Aug 2023 08:00:27 +0000
ROA not after: Thu 01 Aug 2024 08:00:27 +0000
asID: 37143
IP address blocks: 2c0f:fb88::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Validity
Not Before: Aug 1 08:00:27 2023 GMT
Not After : Aug 1 08:00:27 2024 GMT
Subject: CN=64c8bba0-a902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:7b:82:ac:ee:86:9b:5a:96:61:08:fe:a2:
91:a8:b9:52:8a:1e:0d:a1:3e:4a:ea:7e:40:14:36:
2e:c3:4e:c2:7d:9d:b3:69:0b:7b:9b:ba:66:95:5c:
d6:22:a1:80:84:ff:2b:cd:48:56:25:7d:8a:9b:b1:
68:c1:e0:6a:9a:f3:5f:ac:17:c3:18:3c:bb:28:ba:
ba:cb:ab:0a:40:bd:13:7d:9e:e4:df:43:b4:39:a1:
4c:b4:54:2f:ef:4a:f9:fb:69:a7:6b:86:f1:50:05:
61:da:18:6a:d7:df:b7:c7:c8:0a:06:4a:07:a6:b1:
f8:40:44:89:8c:a4:48:fe:c7:96:ff:c4:0b:8b:9c:
64:93:43:db:9c:9d:80:88:c4:8f:12:ff:89:ae:04:
67:d5:5c:fa:30:b8:dd:f8:a1:c3:c1:06:f8:4d:bd:
50:cc:2f:16:16:55:2f:88:9e:6d:84:b8:62:a3:0a:
ef:e9:f9:1f:2d:d3:f5:5c:55:0d:79:86:85:be:c4:
88:0e:f1:7e:77:fc:77:5b:82:b4:10:b9:4e:47:a6:
a7:6a:16:3f:f0:15:19:c9:38:b1:65:76:a3:b0:35:
1b:69:3a:ee:1f:ed:a8:86:48:4b:d2:25:67:91:c1:
19:9f:af:77:92:48:88:1c:31:db:21:16:5a:84:a0:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:EA:2F:C9:62:3B:AF:C3:A7:2B:9C:5A:14:6E:5B:CF:39:C1:E7
X509v3 Authority Key Identifier:
keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/7CC805EA304111EE9AEA51304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:fb88::/32
Signature Algorithm: sha256WithRSAEncryption
0d:6a:1f:ff:6d:81:7f:fc:04:47:12:a6:e2:57:4f:32:51:3c:
5c:1a:43:81:dd:1a:2b:e3:0f:b4:2b:ad:10:7d:10:25:ea:6e:
5c:da:71:8d:92:b5:ba:22:8f:55:12:3d:cd:0b:d6:b1:78:83:
1d:2f:27:79:c0:52:31:29:44:64:e3:8c:13:e9:4c:e0:3b:34:
ec:09:f7:e5:5e:4b:e3:cf:82:fc:95:0f:12:2b:19:d5:a0:39:
19:f3:7c:51:e6:d5:9c:db:fe:94:19:73:f8:28:87:df:37:5b:
4d:c6:7a:fd:4c:50:44:17:64:ba:e0:80:79:bb:0f:23:1b:39:
f0:4b:b8:3b:1f:a8:3d:a5:0a:95:43:f2:04:bc:b5:1f:ce:73:
eb:e3:ca:f1:fb:a1:fc:e0:62:b6:47:63:f4:74:2e:a7:71:18:
ce:e2:af:02:e3:a2:2f:a9:f5:f9:10:99:27:c2:da:9e:01:d5:
c5:06:89:4b:a7:52:cb:ef:f1:1c:4e:49:ab:28:05:a2:59:97:
b8:c7:78:56:5c:6a:1e:f6:de:01:9f:b2:aa:8d:81:77:83:14:
bc:2e:6c:eb:0d:a8:c4:66:80:de:21:11:0e:fe:03:7d:7d:92:
5b:a9:cf:b5:cb:84:8f:51:02:9b:e7:69:49:6e:8a:13:b4:b4:
66:cc:0b:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QTg1NEZBRjExMC8GA1UEBRMoOEJFNDAzNUJFQkM5QzgzNDI4QjVBMjdCRTg1QkFD
OTY2RDc2RTVDQjAeFw0yMzA4MDEwODAwMjdaFw0yNDA4MDEwODAwMjdaMBgxFjAU
BgNVBAMTDTY0YzhiYmEwLWE5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZsnuCrO6Gm1qWYQj+opGouVKKHg2hPkrqfkAUNi7DTsJ9nbNpC3ubumaV
XNYioYCE/yvNSFYlfYqbsWjB4Gqa81+sF8MYPLsourrLqwpAvRN9nuTfQ7Q5oUy0
VC/vSvn7aadrhvFQBWHaGGrX37fHyAoGSgemsfhARImMpEj+x5b/xAuLnGSTQ9uc
nYCIxI8S/4muBGfVXPowuN34ocPBBvhNvVDMLxYWVS+Inm2EuGKjCu/p+R8t0/Vc
VQ15hoW+xIgO8X53/HdbgrQQuU5HpqdqFj/wFRnJOLFldqOwNRtpOu4f7aiGSEvS
JWeRwRmfr3eSSIgcMdshFlqEoFXpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUOAPq
L8liO6/DpyucWhRuW885wecwHwYDVR0jBBgwFoAUi+QDW+vJyDQotaJ76Fuslm12
5cswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE4NTRGLzVFODdDMDQyQjczNDExRURBOEQ0Q0NBNEYxMjIyNDY4L2ktUURX
LXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ktUURXLXZKeURRb3RhSjc2RnVzbG0xMjVjcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkE4NTRGLzVFODdDMDQyQjczNDExRURBOEQ0Q0NBNEYx
MjIyNDY4LzdDQzgwNUVBMzA0MTExRUU5QUVBNTEzMDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/uIMA0GCSqGSIb3DQEB
CwUAA4IBAQANah//bYF//ARHEqbiV08yUTxcGkOB3Ror4w+0K60QfRAl6m5c2nGN
krW6Io9VEj3NC9axeIMdLyd5wFIxKURk44wT6UzgOzTsCfflXkvjz4L8lQ8SKxnV
oDkZ83xR5tWc2/6UGXP4KIffN1tNxnr9TFBEF2S64IB5uw8jGznwS7g7H6g9pQqV
Q/IEvLUfznPr48rx+6H84GK2R2P0dC6ncRjO4q8C46IvqfX5EJknwtqeAdXFBolL
p1LL7/EcTkmrKAWiWZe4x3hWXGoe9t4Bn7KqjYF3gxS8LmzrDajEZoDeIREO/gN9
fZJbqc+1y4SPUQKb52lJbooTtLRmzAv7
-----END CERTIFICATE-----
Generated at Fri Aug 2 05:16:59 2024 by rpki-client on console-fra.rpki-client.org