Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
File: 0D3BC6F4964F11ECA5B05ECC5A40D577.roa (raw, json)
Hash identifier: /JmSlu5spLYVXj1kip93SVwKw4A5zqZs/V1pFyC05cA=
Subject key identifier: 47:A2:6B:D1:59:4A:74:67:C3:A8:4A:5B:DC:98:59:F4:1C:0B:CC:5F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05EF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
Signing time: Fri 25 Feb 2022 15:24:41 +0000
ROA not before: Fri 25 Feb 2022 15:24:38 +0000
ROA not after: Sat 25 Feb 2023 15:24:38 +0000
asID: 209453
IP address blocks: 2c0f:ee78:8008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1519 (0x5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 25 15:24:38 2022 GMT
Not After : Feb 25 15:24:38 2023 GMT
Subject: CN=6218f4b9-77a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:3a:a5:dd:83:e0:cf:6d:28:dd:cf:06:b1:
19:37:35:09:5b:d2:c1:6e:0d:47:bb:77:e5:f9:36:
17:18:72:07:99:58:99:a1:5c:aa:26:c3:76:e9:4a:
b0:b4:e1:7e:ff:bd:cf:62:76:06:ed:39:aa:82:a0:
bb:e4:e3:08:fc:f0:18:cb:8e:5d:2d:97:c5:d4:3b:
42:f0:10:7d:6d:38:14:50:bb:7a:53:94:7c:d1:83:
d8:8c:b1:2b:00:b9:d8:9b:25:f4:a5:de:8f:2c:cb:
27:5e:a3:f8:fa:a3:e6:4b:97:99:c9:c6:bd:55:60:
0a:9a:7f:02:76:ad:29:79:38:1f:b6:fe:3a:24:7f:
0e:30:6c:9e:52:05:e8:84:21:1d:a0:c6:26:dd:11:
f8:e1:8d:f2:8b:32:e8:8f:bd:2a:4c:bc:86:45:fe:
54:9f:60:fc:cf:e6:4e:d7:16:bc:9e:cf:16:53:3d:
09:16:f5:40:2f:54:dc:95:07:87:1b:08:86:f6:0d:
72:df:43:81:2a:ab:77:2c:b1:5f:4b:17:f7:41:8f:
06:29:6f:96:9f:7d:32:6d:2d:01:11:b6:e8:ac:c2:
10:07:5f:ae:4d:a6:7f:32:a6:9c:3d:78:bc:92:eb:
fe:de:f0:f1:16:09:70:c3:54:e7:93:a7:a5:26:4f:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:6B:D1:59:4A:74:67:C3:A8:4A:5B:DC:98:59:F4:1C:0B:CC:5F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D3BC6F4964F11ECA5B05ECC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ee78:8008::/48
Signature Algorithm: sha256WithRSAEncryption
07:b7:27:b6:9e:4a:a2:6b:4f:95:a7:30:35:13:b8:99:3f:05:
b0:c4:20:6f:91:bc:75:4b:07:f1:2a:f2:43:09:05:ab:07:41:
5e:9f:76:ab:e5:bf:06:c6:b2:e9:53:33:6a:d7:49:ae:66:a3:
0c:5b:92:4e:07:66:ef:90:80:62:c3:16:9d:fd:aa:8d:4b:fa:
4f:52:9b:a6:b5:96:9a:09:42:3a:33:94:81:c8:db:33:e8:2a:
1d:1d:a4:75:f1:6b:7f:b5:8c:af:b1:04:0c:00:3f:0e:f9:84:
74:9e:87:af:fe:46:ce:34:8b:45:7e:a0:10:a1:da:9b:c6:34:
b2:6b:50:aa:c0:17:2c:b7:75:9d:0b:82:d0:54:bd:90:21:08:
ac:68:38:79:bc:39:0a:ee:15:e4:c9:3f:8b:93:49:ad:58:84:
c7:6e:55:26:79:91:e9:62:10:18:f1:ba:1f:64:2f:90:0b:7b:
a5:1a:c5:00:d3:f2:10:82:fc:3f:1d:ec:fd:d5:0b:6a:4a:39:
f5:f4:ba:fe:c0:f2:d1:25:80:93:dc:cf:ad:27:0c:78:33:74:
50:fa:b6:c2:b2:94:41:91:f6:c2:cc:d2:01:16:49:c4:b1:73:
ec:23:ff:63:c5:fb:87:b9:ff:e6:1d:71:54:1c:e0:81:21:08:
8e:3a:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org