Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/B5152BA0E05C11E9933EBE68F8AEA228.roa
File: B5152BA0E05C11E9933EBE68F8AEA228.roa (raw, json)
Hash identifier: oVI6QuTI2HeDjdX4HEfvqwyDVDV27nCMsS2PqQu++kc=
Subject key identifier: 95:65:C8:54:52:20:B4:E5:7A:D7:0C:55:AC:91:61:0D:03:D3:8F:DD
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 9A
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/B5152BA0E05C11E9933EBE68F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:54:00 +0000
ROA not before: Thu 26 Sep 2019 12:53:54 +0000
ROA not after: Thu 26 Sep 2024 12:53:54 +0000
asID: 327804
IP address blocks: 2c0f:f050:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Sep 26 12:53:54 2019 GMT
Not After : Sep 26 12:53:54 2024 GMT
Subject: CN=5d8cb4e7-323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:59:83:83:58:d9:b3:c5:3c:d1:d9:fd:32:
88:c4:c0:25:23:71:78:d1:2a:a8:e2:8f:15:29:e7:
67:94:be:2d:60:47:df:db:1e:d7:f3:43:4b:86:ea:
4d:f6:a2:65:f3:44:eb:25:00:75:08:2c:36:0e:aa:
70:48:c3:d9:eb:4b:ef:41:f6:27:de:4e:ac:b9:74:
61:87:0e:5c:99:ab:d1:c9:85:20:c0:c2:ec:67:88:
29:83:87:4c:21:d9:23:11:2b:d3:db:2d:43:05:16:
c5:c0:ce:fb:71:71:33:ac:4d:13:72:28:27:d1:d9:
56:e8:36:5d:a5:c8:59:be:52:af:11:16:df:aa:98:
0c:f8:fb:69:13:83:57:78:a8:43:2a:52:3e:63:90:
bc:ce:fb:2d:2a:0c:87:81:97:8f:ea:50:5f:86:2c:
4f:4e:7b:12:10:9f:1e:5f:1a:f1:41:dd:a6:ec:a0:
db:c4:77:c6:f3:6c:ed:4d:1b:54:5d:08:a1:8e:18:
de:fc:63:1f:50:40:9b:cb:c2:29:39:e6:52:b7:ac:
01:58:ed:3a:5b:40:49:8a:9a:40:3d:d6:cf:ad:1e:
df:47:30:b6:7d:e0:74:15:4c:1e:d5:f0:4c:27:1e:
8a:e5:50:e3:80:11:df:34:5b:ff:09:f2:4b:f2:12:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:C8:54:52:20:B4:E5:7A:D7:0C:55:AC:91:61:0D:03:D3:8F:DD
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/B5152BA0E05C11E9933EBE68F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f050:2000::/36
Signature Algorithm: sha256WithRSAEncryption
74:41:b3:79:3a:a2:81:d9:55:6d:0c:01:c2:c0:39:03:d0:e1:
4c:1b:4c:ce:eb:8d:cd:94:fb:20:1f:3b:d5:31:26:98:bc:6a:
1d:67:51:d8:a6:d0:82:99:69:30:7d:1e:b3:50:51:c1:69:14:
f1:36:61:30:d9:af:77:0a:9c:53:71:ce:3c:1a:e7:14:29:ed:
f7:00:bf:59:c6:45:7b:00:ce:08:70:72:42:ee:48:c8:45:45:
fd:38:b9:e7:4e:88:fe:22:50:e9:1a:fe:47:1a:b3:90:4a:94:
fb:99:68:2e:94:cc:33:c1:fe:49:44:23:42:c8:db:25:31:98:
47:12:8f:6a:b7:af:cb:b9:e1:bf:93:55:9e:45:cc:c0:e8:78:
00:b1:92:b8:3a:73:54:f0:f0:95:39:76:1c:e9:a1:9b:84:c0:
af:47:ff:69:a6:93:d1:97:1d:8d:b6:10:98:e5:e9:2e:be:c2:
7d:84:f9:00:71:0c:59:0e:85:03:ec:0d:26:bf:92:40:0c:1b:
52:30:8c:62:33:1d:cc:09:68:52:86:69:2a:0e:43:be:ad:55:
cb:be:76:12:ca:69:ed:a9:da:02:bb:1a:47:6e:65:b0:57:33:
bb:6b:67:47:a2:81:14:4f:81:de:4a:d5:02:da:76:b4:1f:74:
59:31:58:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAJowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0xOTA5MjYxMjUzNTRaFw0yNDA5MjYxMjUzNTRaMBgxFjAU
BgNVBAMTDTVkOGNiNGU3LTMyM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0nlmDg1jZs8U80dn9MojEwCUjcXjRKqjijxUp52eUvi1gR9/bHtfzQ0uG
6k32omXzROslAHUILDYOqnBIw9nrS+9B9ifeTqy5dGGHDlyZq9HJhSDAwuxniCmD
h0wh2SMRK9PbLUMFFsXAzvtxcTOsTRNyKCfR2VboNl2lyFm+Uq8RFt+qmAz4+2kT
g1d4qEMqUj5jkLzO+y0qDIeBl4/qUF+GLE9OexIQnx5fGvFB3absoNvEd8bzbO1N
G1RdCKGOGN78Yx9QQJvLwik55lK3rAFY7TpbQEmKmkA91s+tHt9HMLZ94HQVTB7V
8EwnHorlUOOAEd80W/8J8kvyEo8PAgMBAAGjggJwMIICbDAdBgNVHQ4EFgQUlWXI
VFIgtOV61wxVrJFhDQPTj90wHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4L0I1MTUyQkEwRTA1QzExRTk5MzNFQkU2OEY4QUVBMjI4LnJvYTAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCwP8FAgMA0GCSqGSIb3DQEBCwUAA4IB
AQB0QbN5OqKB2VVtDAHCwDkD0OFMG0zO643NlPsgHzvVMSaYvGodZ1HYptCCmWkw
fR6zUFHBaRTxNmEw2a93CpxTcc48GucUKe33AL9ZxkV7AM4IcHJC7kjIRUX9OLnn
Toj+IlDpGv5HGrOQSpT7mWgulMwzwf5JRCNCyNslMZhHEo9qt6/LueG/k1WeRczA
6HgAsZK4OnNU8PCVOXYc6aGbhMCvR/9pppPRlx2NthCY5ekuvsJ9hPkAcQxZDoUD
7A0mv5JADBtSMIxiMx3MCWhShmkqDkO+rVXLvnYSymntqdoCuxpHbmWwVzO7a2dH
ooEUT4HeStUC2na0H3RZMVjR
-----END CERTIFICATE-----
Generated at Fri Sep 27 03:59:55 2024 by rpki-client on console-fra.rpki-client.org