Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/FD914138F40811EE899D17A1775412E6.roa
File: FD914138F40811EE899D17A1775412E6.roa (raw, json)
Hash identifier: AMitGRLBlvrJl6oYgt06jebve+RU0DrdhDf43v/k6bo=
Subject key identifier: D3:44:D9:13:DD:26:C0:BB:29:26:5E:AC:2E:11:AE:FC:1B:BF:50:9F
Certificate issuer: /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial: 08
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/FD914138F40811EE899D17A1775412E6.roa
Signing time: Sat 06 Apr 2024 11:29:55 +0000
ROA not before: Sat 06 Apr 2024 11:29:50 +0000
ROA not after: Sat 20 Apr 2024 11:29:50 +0000
asID: 37577
IP address blocks: 2c0f:f138::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Validity
Not Before: Apr 6 11:29:50 2024 GMT
Not After : Apr 20 11:29:50 2024 GMT
Subject: CN=66113232-923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:30:84:58:34:1f:b0:25:5d:d1:40:fc:71:
fa:7e:7a:c9:80:b8:24:a3:05:ba:9c:94:46:83:5b:
7a:e8:5e:4d:53:0a:e1:6e:bd:5b:ad:51:32:97:91:
df:56:0d:40:22:34:de:11:d5:c8:03:8b:62:38:b3:
29:af:a2:cd:72:1e:38:fc:c9:82:8a:d6:85:cc:c9:
7f:76:7e:61:38:9f:e4:59:92:29:c0:81:07:bd:f0:
a6:9a:5e:6a:35:db:05:44:35:b8:ac:4e:f6:e0:90:
6b:23:c2:3d:74:bd:a3:01:f5:a8:98:37:b2:36:a6:
cb:5e:56:b8:9f:41:39:ef:3a:7d:4c:be:01:98:12:
30:69:36:a6:f8:94:fa:f8:ca:85:99:34:10:d9:17:
90:ec:4d:04:39:86:6a:bd:ac:d8:02:e7:23:3e:27:
46:36:05:a8:69:7a:42:42:dd:91:47:38:c7:01:2a:
b3:e7:c2:0e:a2:d9:44:ba:51:86:63:ce:45:78:5a:
6d:bb:c8:07:99:49:8d:4a:5b:77:4a:98:e5:00:f6:
f9:4c:94:09:18:bc:15:b6:46:db:6f:68:aa:22:91:
0f:60:37:8d:57:18:56:83:0f:61:19:00:10:d6:f8:
b2:db:0c:5a:49:7f:7e:b9:2b:80:92:bf:99:68:06:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:D9:13:DD:26:C0:BB:29:26:5E:AC:2E:11:AE:FC:1B:BF:50:9F
X509v3 Authority Key Identifier:
keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/FD914138F40811EE899D17A1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f138::/32
Signature Algorithm: sha256WithRSAEncryption
20:85:fd:05:51:3d:53:be:9c:c9:95:73:3c:01:90:be:f2:9e:
33:4e:f1:2d:22:8a:2b:fc:3b:f4:9b:ce:39:69:b3:fc:8a:fd:
e9:8f:e9:e1:fb:e9:a0:a6:fc:d8:a2:51:e4:1c:3b:d7:73:c1:
73:df:64:86:e4:1c:55:2a:12:09:f7:a5:7d:cd:81:4d:89:c7:
e8:1d:e6:98:bb:d8:c6:60:33:17:8e:88:bc:49:62:bf:86:ad:
b1:34:86:e3:61:b4:f3:c6:ca:0f:d9:82:95:c6:bc:40:41:91:
18:b2:5a:14:81:7a:fd:c9:e4:cb:da:b8:08:10:df:95:87:3a:
c9:5c:df:78:c4:dc:57:b8:66:06:36:0d:b5:c6:72:74:64:6a:
32:43:36:0f:8a:56:71:94:ee:f0:1e:42:39:cf:68:51:3f:58:
97:49:88:9d:70:ab:43:e4:3a:4b:4d:00:bd:34:b4:70:de:ad:
d3:51:c5:15:9b:67:de:6f:03:04:8d:a9:da:d3:20:f6:96:7c:
8f:9f:78:0e:9d:d9:7f:3a:29:ff:26:9c:b2:c5:30:17:07:d5:
ad:9f:ec:50:22:27:97:8d:33:d2:68:13:18:ea:a5:1e:b7:16:
aa:da:af:f0:c9:45:e4:28:f2:a5:1e:d3:dd:bb:81:ea:65:44:
3b:5f:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org