Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/555ACBCC12F911EBA243AE14F8AEA228.roa
File: 555ACBCC12F911EBA243AE14F8AEA228.roa (raw, json)
Hash identifier: QGoExHL1ddd8KQwvwp1Nwzb/7L0pz6Rs28LCkucywY4=
Subject key identifier: 96:52:46:7B:6A:11:12:DC:7F:0F:24:11:FF:A9:C1:0B:4D:E9:DB:41
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 02
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/555ACBCC12F911EBA243AE14F8AEA228.roa
Signing time: Tue 20 Oct 2020 17:26:07 +0000
ROA not before: Tue 20 Oct 2020 17:25:58 +0000
ROA not after: Wed 19 Oct 2022 17:25:58 +0000
asID: 37212
IP address blocks: 196.216.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Validity
Not Before: Oct 20 17:25:58 2020 GMT
Not After : Oct 19 17:25:58 2022 GMT
Subject: CN=5f8f1dae-af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:4e:8e:e6:84:92:d9:d6:56:19:24:8c:55:
7a:1c:c9:b9:79:7c:a1:40:38:1f:7c:db:9d:32:1c:
be:1e:bf:25:aa:09:32:86:c0:aa:53:ec:ba:92:5c:
31:bc:0f:27:c9:93:75:98:b2:8a:88:97:a4:04:d3:
0a:4f:aa:a4:8e:7d:e2:a5:ad:8c:32:21:93:be:22:
6c:a5:ba:b8:60:d1:9c:60:7c:11:5d:f2:c5:2c:b7:
00:15:70:cb:03:6c:36:a0:7c:96:c0:6c:02:1c:39:
8d:9a:cd:c3:2f:1e:53:b8:31:ea:9f:82:c4:e5:97:
8c:b8:6a:fd:d3:fd:1b:f6:48:82:da:5f:77:8e:ac:
da:b6:e7:5d:ac:68:fe:4b:e9:d2:aa:80:b5:6c:a2:
6b:d9:6c:9c:b1:82:05:c8:01:48:ee:47:1e:8e:34:
46:5d:7d:14:28:b3:b9:02:15:57:32:a7:81:f2:09:
10:9e:06:65:3f:8f:ac:a2:85:27:71:99:68:15:67:
10:2c:39:d1:cc:c7:00:f1:61:a8:f0:20:f7:95:d7:
4d:a3:9c:fa:7d:33:a6:0f:dd:07:a1:8f:67:52:39:
bb:3a:05:d2:09:4e:10:22:47:a9:47:b2:56:4d:15:
65:b4:06:de:b0:ca:93:0c:b5:06:6a:40:e6:79:5e:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:46:7B:6A:11:12:DC:7F:0F:24:11:FF:A9:C1:0B:4D:E9:DB:41
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/555ACBCC12F911EBA243AE14F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.180.0/22
Signature Algorithm: sha256WithRSAEncryption
70:4d:08:17:57:e2:7f:96:b7:79:33:01:b7:7c:af:5b:e3:89:
03:d9:27:10:b2:28:8f:51:c8:53:9b:87:7a:8b:d4:40:6b:38:
32:e9:bc:97:48:0c:be:19:e6:54:90:b5:69:9d:97:14:00:78:
7f:0d:66:54:e1:2b:2d:3e:02:e2:4b:4b:fa:4d:21:c4:31:fa:
cf:27:5b:36:31:be:42:e7:ef:9b:e6:05:82:54:2c:02:89:28:
70:a4:6e:d2:92:ca:ea:73:ca:88:34:da:53:5a:7d:92:43:8d:
7b:77:75:9a:24:bb:31:27:34:58:28:72:01:4e:a0:84:0b:1f:
37:18:ba:a8:a1:32:b1:21:77:a2:33:7b:5c:83:bf:70:22:d3:
01:92:9e:5d:9c:bf:59:95:d3:25:57:00:1f:02:84:9f:26:ac:
e7:0e:a9:8d:2b:87:1e:f9:e4:b1:b8:b4:00:72:fc:e2:c6:75:
1b:cf:5d:34:63:74:c9:f2:af:57:37:35:80:57:47:15:ae:17:
f0:14:85:8e:6b:97:b7:23:5f:36:f7:31:85:5c:a8:39:83:14:
ae:1c:c4:84:5d:69:b4:5f:4f:69:cf:ea:e4:18:1d:a1:48:26:
7f:cb:32:61:1b:28:f8:d4:54:46:5f:b4:30:b3:7b:ba:29:77:
93:c7:40:fa
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NkRENEFGMTEwLwYDVQQFEygzNkY3NTcyQTAyRTgzRjA3QkQ4MUI3QUU0MjY2MTM2
RUQ1NkZBMDUwMB4XDTIwMTAyMDE3MjU1OFoXDTIyMTAxOTE3MjU1OFowGDEWMBQG
A1UEAxMNNWY4ZjFkYWUtYWY2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwHTo7mhJLZ1lYZJIxVehzJuXl8oUA4H3zbnTIcvh6/JaoJMobAqlPsupJc
MbwPJ8mTdZiyioiXpATTCk+qpI594qWtjDIhk74ibKW6uGDRnGB8EV3yxSy3ABVw
ywNsNqB8lsBsAhw5jZrNwy8eU7gx6p+CxOWXjLhq/dP9G/ZIgtpfd46s2rbnXaxo
/kvp0qqAtWyia9lsnLGCBcgBSO5HHo40Rl19FCizuQIVVzKngfIJEJ4GZT+PrKKF
J3GZaBVnECw50czHAPFhqPAg95XXTaOc+n0zpg/dB6GPZ1I5uzoF0glOECJHqUey
Vk0VZbQG3rDKkwy1BmpA5nlezE0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSWUkZ7
ahES3H8PJBH/qcELTenbQTAfBgNVHSMEGDAWgBQ291cqAug/B72Bt65CZhNu1W+g
UDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhBRUEyMjgvTnZkWEtn
TG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvTnZkWEtnTG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhB
RUEyMjgvNTU1QUNCQ0MxMkY5MTFFQkEyNDNBRTE0RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsTYtDANBgkqhkiG9w0BAQsF
AAOCAQEAcE0IF1fif5a3eTMBt3yvW+OJA9knELIoj1HIU5uHeovUQGs4Mum8l0gM
vhnmVJC1aZ2XFAB4fw1mVOErLT4C4ktL+k0hxDH6zydbNjG+Qufvm+YFglQsAoko
cKRu0pLK6nPKiDTaU1p9kkONe3d1miS7MSc0WChyAU6ghAsfNxi6qKEysSF3ojN7
XIO/cCLTAZKeXZy/WZXTJVcAHwKEnyas5w6pjSuHHvnksbi0AHL84sZ1G89dNGN0
yfKvVzc1gFdHFa4X8BSFjmuXtyNfNvcxhVyoOYMUrhzEhF1ptF9Pac/q5BgdoUgm
f8syYRso+NRURl+0MLN7uil3k8dA+g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org