Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/BD5A222E43DD11ED8E7CE3BBF1222468.roa
File: BD5A222E43DD11ED8E7CE3BBF1222468.roa (raw, json)
Hash identifier: 6dUWEKvXvzR9bnF4can9YdrXWRnzpIJ5ZhS2Vc8ZDdI=
Subject key identifier: 83:83:F6:90:4F:C4:64:93:07:62:B5:6A:41:11:AF:6A:10:D0:58:7E
Certificate issuer: /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial: 0504
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/BD5A222E43DD11ED8E7CE3BBF1222468.roa
Signing time: Tue 04 Oct 2022 12:11:56 +0000
ROA not before: Tue 04 Oct 2022 12:11:52 +0000
ROA not after: Wed 04 Oct 2023 12:11:52 +0000
asID: 327733
IP address blocks: 2c0f:ea00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1284 (0x504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Validity
Not Before: Oct 4 12:11:52 2022 GMT
Not After : Oct 4 12:11:52 2023 GMT
Subject: CN=633c230c-6619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:20:47:95:d6:bd:c5:1c:94:38:f4:21:21:
c3:ba:b0:b1:97:52:fe:91:59:d9:95:1b:3a:0c:cb:
31:29:7f:7b:5a:68:49:e1:a6:fe:4a:78:3c:0b:70:
6c:c5:56:d6:b1:37:fd:36:63:bf:86:52:4e:09:6b:
cf:c7:f2:cd:f8:96:02:5d:ed:64:ab:c2:9a:89:f5:
98:c2:b3:68:25:7c:01:8c:5c:89:06:4e:e2:85:91:
2a:13:85:1f:ab:98:f9:67:d6:4c:c8:15:d9:d0:27:
5e:e6:2f:b2:42:45:a3:4d:cf:db:c4:e3:d8:f0:d1:
c0:09:66:96:82:9d:b7:59:b7:a0:85:d7:a6:8e:4d:
3a:e6:5f:80:79:c7:8c:fa:72:da:12:91:01:dc:bb:
28:aa:d3:b6:88:70:f2:ef:9b:71:54:04:f2:34:a6:
24:b0:ed:5e:8c:67:11:5b:dd:95:58:3e:bd:f3:0d:
1f:49:b4:a1:3c:df:84:40:eb:01:74:db:c7:9d:1b:
40:f2:10:fc:48:04:a8:71:49:6d:26:a4:c6:b3:db:
b7:a8:71:15:b1:47:79:b7:3c:4b:ee:a2:99:b5:a1:
40:2b:b5:b2:bf:62:28:f8:d6:0b:08:8d:77:03:96:
62:0b:e4:cd:2f:7d:3b:20:70:c9:48:0d:b5:01:0b:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:83:F6:90:4F:C4:64:93:07:62:B5:6A:41:11:AF:6A:10:D0:58:7E
X509v3 Authority Key Identifier:
keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/BD5A222E43DD11ED8E7CE3BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ea00::/36
Signature Algorithm: sha256WithRSAEncryption
8a:1c:ff:cb:86:1b:04:7b:22:37:ad:bc:9a:e9:d2:5b:da:0b:
df:8b:90:dd:49:2e:da:f5:f5:ea:e3:6b:e5:5d:13:ac:9e:0f:
48:6d:65:2c:9c:fe:52:9b:e8:fd:f4:ca:40:bf:53:d6:88:9d:
eb:c3:fc:b9:14:12:d4:a2:b3:5c:d8:22:32:a6:c6:cb:e1:2e:
ab:8c:0f:9b:87:0b:4c:df:ae:f9:0e:f8:1e:f2:2b:df:d1:e2:
f4:ae:bf:ed:89:ca:70:bc:79:c9:7e:57:75:86:a7:28:9f:01:
c6:79:cc:46:2a:1b:00:88:e1:14:21:e8:d0:ce:40:eb:30:bd:
16:5f:11:b7:4e:8e:06:3b:ff:c0:89:82:f9:15:5c:bf:bd:56:
4a:a4:2f:e7:95:f0:d4:7b:01:e3:ac:fd:f1:56:34:44:7e:b5:
d6:2b:f9:87:bf:d7:31:dd:11:ed:25:7b:a4:56:b7:f8:06:75:
f0:fc:4f:0a:92:39:f0:f9:5a:c4:e1:31:91:f1:1c:78:c9:a0:
0d:b8:26:b2:59:d9:82:96:3e:30:ec:fe:51:b1:11:70:93:93:
44:8d:2e:57:ba:3e:04:8d:23:7c:77:b3:92:40:a3:fa:e0:a3:
94:78:0b:c4:a6:76:b4:99:5c:6f:be:31:4f:37:e2:6e:4a:ce:
b2:00:a5:5c
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yMjEwMDQxMjExNTJaFw0yMzEwMDQxMjExNTJaMBgxFjAU
BgNVBAMMDTYzM2MyMzBjLTY2MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXfSBHlda9xRyUOPQhIcO6sLGXUv6RWdmVGzoMyzEpf3taaEnhpv5KeDwL
cGzFVtaxN/02Y7+GUk4Ja8/H8s34lgJd7WSrwpqJ9ZjCs2glfAGMXIkGTuKFkSoT
hR+rmPln1kzIFdnQJ17mL7JCRaNNz9vE49jw0cAJZpaCnbdZt6CF16aOTTrmX4B5
x4z6ctoSkQHcuyiq07aIcPLvm3FUBPI0piSw7V6MZxFb3ZVYPr3zDR9JtKE834RA
6wF028edG0DyEPxIBKhxSW0mpMaz27eocRWxR3m3PEvuopm1oUArtbK/Yij41gsI
jXcDlmIL5M0vfTsgcMlIDbUBC19JAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUg4P2
kE/EZJMHYrVqQRGvahDQWH4wHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4
QUVBMjI4L0JENUEyMjJFNDNERDExRUQ4RTdDRTNCQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQsD+oAADANBgkqhkiG9w0B
AQsFAAOCAQEAihz/y4YbBHsiN628munSW9oL34uQ3Uku2vX16uNr5V0TrJ4PSG1l
LJz+Upvo/fTKQL9T1oid68P8uRQS1KKzXNgiMqbGy+Euq4wPm4cLTN+u+Q74HvIr
39Hi9K6/7YnKcLx5yX5XdYanKJ8BxnnMRiobAIjhFCHo0M5A6zC9Fl8Rt06OBjv/
wImC+RVcv71WSqQv55Xw1HsB46z98VY0RH611iv5h7/XMd0R7SV7pFa3+AZ18PxP
CpI58PlaxOExkfEceMmgDbgmslnZgpY+MOz+UbERcJOTRI0uV7o+BI0jfHezkkCj
+uCjlHgLxKZ2tJlcb74xTzfibkrOsgClXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org