Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
File: 1487696E12FB11EB9AF63216F8AEA228.roa (raw, json)
Hash identifier: 6DXpv62FsUIZeyeLd/RZj6qdtmEgcEbY5VbKC3D5zb8=
Subject key identifier: 4C:30:F6:7E:92:93:04:52:4C:75:18:67:6B:9B:5B:58:24:0B:63:09
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 04
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
Signing time: Tue 20 Oct 2020 17:38:37 +0000
ROA not before: Tue 20 Oct 2020 17:38:29 +0000
ROA not after: Wed 19 Oct 2022 17:38:29 +0000
asID: 19905
IP address blocks: 196.216.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Validity
Not Before: Oct 20 17:38:29 2020 GMT
Not After : Oct 19 17:38:29 2022 GMT
Subject: CN=5f8f209c-81c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:8b:ee:7d:cb:6f:7b:c9:f3:16:76:7e:b2:
21:b3:77:99:34:93:12:cc:4e:fe:77:0e:20:22:3f:
6e:6e:f7:a6:1a:d8:4f:de:39:86:02:07:5b:90:bd:
a3:49:09:e4:a3:20:26:79:2a:0d:84:9a:e6:19:00:
67:46:bd:ae:6e:6e:23:21:d1:a6:4a:13:34:e9:c0:
2f:52:99:b1:6b:2b:a8:ba:42:8c:bf:c5:7e:56:e3:
57:e8:bc:8a:15:56:33:0d:bb:d5:69:2a:d0:ca:bf:
e8:7e:f3:c7:a0:5d:32:01:93:8c:99:6b:75:4d:82:
f9:ce:3d:fd:1a:c1:9a:13:8c:f1:2f:5a:b3:96:d1:
37:81:00:41:6c:b0:cf:20:91:fa:c3:3d:4d:16:76:
a7:df:9a:03:97:eb:5b:28:8e:cf:98:c9:18:83:e2:
a7:6b:6d:26:7f:aa:61:00:bd:ff:d6:ec:af:49:a9:
84:5c:0d:8b:8a:ca:d6:df:15:2f:81:4e:e0:79:70:
88:1f:f4:65:5a:f0:13:f5:37:9a:39:ba:b2:cc:0a:
33:d0:e5:03:f5:b4:c9:f1:a4:50:14:69:a6:06:15:
2e:d3:23:88:ba:74:d4:c9:ad:c9:9a:18:79:a8:23:
64:23:05:73:3f:8b:a4:5f:91:e8:0c:42:a9:96:c1:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:30:F6:7E:92:93:04:52:4C:75:18:67:6B:9B:5B:58:24:0B:63:09
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/1487696E12FB11EB9AF63216F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:cd:60:a8:a7:88:51:3c:38:af:88:9d:43:8a:8b:7c:00:7e:
80:b7:71:0b:ec:7d:54:a3:7f:46:aa:72:e7:9b:8e:19:0b:57:
4a:66:5d:cf:f7:c3:5e:86:5d:44:4f:9a:a8:dd:45:f1:24:21:
42:59:af:2b:ce:8b:7a:23:80:3e:28:1d:3e:6d:c3:91:9e:4c:
f0:8f:eb:ed:fa:d9:29:35:da:78:f7:a8:a7:80:d0:d7:93:5c:
db:3e:05:ba:af:51:6d:33:b5:6b:b4:df:7f:0a:1c:7f:5f:70:
9e:2d:46:68:32:0b:51:98:93:c6:18:8c:53:92:8f:7e:d3:63:
61:03:4e:4b:c4:97:c1:45:d3:68:0d:d4:93:2f:f1:ec:87:19:
c1:23:24:86:1d:84:3b:40:d9:61:22:d5:9a:b6:b7:1f:f2:71:
f5:ea:65:6f:0f:b5:fc:dc:c4:b4:2b:cf:25:56:a2:72:dd:8a:
78:50:69:e6:e9:29:fc:9e:fc:b2:cb:77:6d:68:65:8e:b5:93:
8d:01:cb:52:07:1b:4d:0e:b7:b4:bc:14:82:4f:0b:84:7d:b1:
0e:e5:18:94:9b:da:74:c1:94:2a:d8:da:6d:ee:b5:71:02:a6:
7b:5c:bc:e2:c2:e8:cd:ca:64:ac:3f:9b:c1:dc:9d:fc:13:fe:
5c:6c:8e:e6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkRENEFGMTEwLwYDVQQFEygzNkY3NTcyQTAyRTgzRjA3QkQ4MUI3QUU0MjY2MTM2
RUQ1NkZBMDUwMB4XDTIwMTAyMDE3MzgyOVoXDTIyMTAxOTE3MzgyOVowGDEWMBQG
A1UEAxMNNWY4ZjIwOWMtODFjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJkyi+59y297yfMWdn6yIbN3mTSTEsxO/ncOICI/bm73phrYT945hgIHW5C9
o0kJ5KMgJnkqDYSa5hkAZ0a9rm5uIyHRpkoTNOnAL1KZsWsrqLpCjL/FflbjV+i8
ihVWMw271Wkq0Mq/6H7zx6BdMgGTjJlrdU2C+c49/RrBmhOM8S9as5bRN4EAQWyw
zyCR+sM9TRZ2p9+aA5frWyiOz5jJGIPip2ttJn+qYQC9/9bsr0mphFwNi4rK1t8V
L4FO4HlwiB/0ZVrwE/U3mjm6sswKM9DlA/W0yfGkUBRppgYVLtMjiLp01MmtyZoY
eagjZCMFcz+LpF+R6AxCqZbBvPUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRMMPZ+
kpMEUkx1GGdrm1tYJAtjCTAfBgNVHSMEGDAWgBQ291cqAug/B72Bt65CZhNu1W+g
UDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhBRUEyMjgvTnZkWEtn
TG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTnZkWEtnTG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhB
RUEyMjgvMTQ4NzY5NkUxMkZCMTFFQjlBRjYzMjE2RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcTYtDANBgkqhkiG9w0BAQsF
AAOCAQEAL81gqKeIUTw4r4idQ4qLfAB+gLdxC+x9VKN/Rqpy55uOGQtXSmZdz/fD
XoZdRE+aqN1F8SQhQlmvK86LeiOAPigdPm3DkZ5M8I/r7frZKTXaePeop4DQ15Nc
2z4Fuq9RbTO1a7Tffwocf19wni1GaDILUZiTxhiMU5KPftNjYQNOS8SXwUXTaA3U
ky/x7IcZwSMkhh2EO0DZYSLVmra3H/Jx9eplbw+1/NzEtCvPJVaict2KeFBp5ukp
/J78sst3bWhljrWTjQHLUgcbTQ63tLwUgk8LhH2xDuUYlJvadMGUKtjabe61cQKm
e1y84sLozcpkrD+bwdyd/BP+XGyO5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org