Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/C81CDCA8566111EBA226410BF8AEA228.roa
File: C81CDCA8566111EBA226410BF8AEA228.roa (raw, json)
Hash identifier: HKyD2KBFEeztay+w3/8Q0NyvhBms92mOILdhJp2L5wU=
Subject key identifier: A3:9D:E0:FD:2C:28:E8:2B:66:5C:FE:77:79:B9:F1:59:D6:5B:C3:0F
Certificate issuer: /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial: 04
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/C81CDCA8566111EBA226410BF8AEA228.roa
Signing time: Thu 14 Jan 2021 12:12:34 +0000
ROA not before: Thu 14 Jan 2021 12:12:29 +0000
ROA not after: Wed 31 Jan 2024 12:12:29 +0000
asID: 328346
IP address blocks: 2c0f:ef60::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Validity
Not Before: Jan 14 12:12:29 2021 GMT
Not After : Jan 31 12:12:29 2024 GMT
Subject: CN=60003531-269a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:62:3a:b3:f3:71:1a:ab:96:64:3d:b9:c2:
73:4b:92:5c:0b:50:59:4b:08:21:4a:7f:7d:13:9c:
8a:fe:4b:ac:16:ea:76:16:a0:b1:1a:4b:90:af:40:
fe:24:99:dc:f8:a3:27:fb:21:95:fc:7a:38:28:35:
05:05:e9:6e:c4:af:f0:24:54:66:13:79:cb:07:9c:
13:6d:56:d1:c1:2a:a5:26:b3:10:6a:c1:fe:71:39:
e8:ec:cd:d4:de:c1:70:ea:c0:54:5d:72:f2:71:a8:
65:f8:c8:9d:64:fb:aa:cf:78:88:33:4d:89:7b:61:
71:e9:66:3d:ee:06:84:be:43:0c:5a:f4:51:b2:bc:
01:f2:4e:50:13:20:c3:df:d9:4d:a9:16:2a:dd:d7:
a6:5f:c7:83:57:4b:0c:6f:43:41:79:a3:31:7d:cf:
41:2c:d5:9f:4e:ec:0f:d8:7e:8f:f4:07:6d:cc:2a:
db:7d:3a:96:67:91:1a:06:22:98:96:35:d2:5d:62:
be:3d:3b:48:e4:1d:6c:11:dc:2d:37:83:3a:47:ef:
78:f9:f2:c8:39:70:1e:26:13:4e:49:77:f1:aa:e3:
31:2d:c0:19:ea:70:84:2c:46:34:28:1a:4c:26:9a:
6a:85:9e:51:60:62:0e:ea:3e:fe:6a:72:00:41:64:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:E0:FD:2C:28:E8:2B:66:5C:FE:77:79:B9:F1:59:D6:5B:C3:0F
X509v3 Authority Key Identifier:
keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/C81CDCA8566111EBA226410BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ef60::/32
Signature Algorithm: sha256WithRSAEncryption
74:1d:4c:d6:30:1a:9b:20:28:6f:32:62:68:06:14:8d:64:33:
e7:9b:db:d7:c3:b5:40:7b:84:06:e3:52:14:7b:8b:b1:43:ec:
d1:2d:08:d2:f8:b1:6a:07:c9:95:62:12:1c:66:76:7d:45:0e:
8d:f8:1c:30:96:b4:22:7b:88:c8:45:1b:0c:cb:ff:7e:40:49:
0c:a3:d6:d1:6e:62:38:b3:a6:85:a8:07:f3:ab:5b:3b:cd:85:
40:c9:b7:98:de:9e:37:f2:ce:f9:36:35:78:03:e0:75:a8:f6:
6e:fb:49:87:87:68:31:81:92:cd:c2:ed:7d:80:e3:44:fe:86:
bc:de:fc:d9:2a:51:05:15:cb:a2:9b:b7:48:c6:a7:1c:06:77:
4e:32:fd:40:c5:18:30:5c:c1:e5:86:d4:0f:fa:fa:a9:9c:a2:
45:8c:13:82:41:24:de:c3:e6:22:ac:25:20:50:c1:a2:86:d9:
e2:0c:a7:a8:ed:64:66:0f:77:ea:1a:39:7c:40:35:b1:9e:46:
86:3a:f5:55:b0:ba:e4:1d:32:5b:ef:81:dc:2e:c8:51:ca:30:
bd:b7:55:5c:da:d4:51:e3:45:f0:aa:c0:ae:85:08:f3:e9:9e:
ce:b6:7e:87:56:01:ad:0e:86:f4:7e:78:d7:66:6e:1d:fc:1c:
a3:d5:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 01:58:08 2024 by rpki-client on console-fra.rpki-client.org