Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
File: 7E6CE570F06311EB8C31F74AD8A014CE.roa (raw, json)
Hash identifier: HAZprPi/UvVLLZ9SnjBSBbpCVdVX7bu6vzohwezlVMk=
Subject key identifier: 44:BB:3E:06:89:F0:45:78:13:DE:94:B3:AC:60:DC:78:16:F9:0F:0F
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 04
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
Signing time: Thu 29 Jul 2021 11:53:09 +0000
ROA not before: Fri 30 Jul 2021 11:53:05 +0000
ROA not after: Mon 31 Jul 2023 11:53:05 +0000
asID: 37219
IP address blocks: 2c0f:7200::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Jul 30 11:53:05 2021 GMT
Not After : Jul 31 11:53:05 2023 GMT
Subject: CN=610296a5-7fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:4b:8e:d9:b8:1b:c1:85:2e:3f:98:1d:80:
b5:ff:2e:a9:13:47:94:5d:f8:b6:86:00:a0:7a:dc:
31:79:97:8a:b6:4c:20:05:49:93:71:7f:1b:40:a3:
c8:cd:e8:ae:58:11:2a:76:94:87:09:b5:c8:05:f5:
d0:7b:97:3f:7a:b5:72:ac:a1:16:1f:45:17:b7:de:
f1:11:df:f1:74:91:44:76:af:fa:a4:f8:9a:55:1b:
fb:e7:c0:e0:6f:44:0a:d4:fd:0e:bb:24:27:ae:22:
b7:53:c2:fe:ad:79:dd:9c:21:36:4c:60:3f:57:6e:
ac:31:54:f6:94:52:99:9d:89:2d:72:1c:45:cb:af:
91:4b:40:d9:70:42:78:7a:55:a6:bd:e7:54:a7:e4:
e4:60:60:26:fb:e3:7f:a4:3e:49:ea:26:7d:a6:77:
f1:b3:9d:c6:75:f0:15:23:c3:5c:2d:c4:d7:43:bc:
ca:4f:e7:08:3d:3a:4e:0d:b4:eb:86:0e:63:03:b9:
8a:8a:78:a5:28:d6:8c:61:eb:80:f7:f5:9f:4e:d2:
c9:7c:24:e3:9d:ea:04:95:e1:b6:0e:81:9c:86:f2:
69:3d:ba:44:64:32:4e:8e:6a:59:dd:58:82:83:e3:
b5:9d:b2:4c:bb:9f:e0:a8:13:ee:4c:70:a3:f4:00:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:3E:06:89:F0:45:78:13:DE:94:B3:AC:60:DC:78:16:F9:0F:0F
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/7E6CE570F06311EB8C31F74AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7200::/32
Signature Algorithm: sha256WithRSAEncryption
87:be:cc:c8:dd:00:d2:36:58:0e:6c:02:a1:1a:b2:18:22:f0:
a0:c3:b9:35:19:46:f4:9d:ec:24:3d:df:ee:59:0f:25:77:37:
2f:00:73:de:f3:b4:c1:1b:f8:f6:0f:9b:e3:c5:e9:29:c1:f3:
9d:8a:51:b5:fb:47:f4:b8:fc:30:30:80:e9:ef:5b:60:09:1c:
60:a2:9c:d5:af:eb:e5:60:f5:d8:3e:e7:72:5f:9d:96:50:dd:
fb:34:97:6f:8b:90:fa:81:92:48:63:30:81:03:33:61:df:10:
b2:52:97:e1:bd:30:5a:0e:5b:12:a6:55:26:14:5a:5d:67:db:
e2:7a:fc:d0:c2:11:2e:8e:f5:94:44:b7:36:f4:b4:a1:2d:7d:
1b:73:7a:88:e3:a9:a6:b7:19:14:ce:10:71:3b:aa:5c:66:68:
41:3f:fc:ee:6f:10:95:75:16:d3:e0:53:7e:7e:1c:b0:6d:37:
2a:29:2e:18:64:c5:8a:99:ca:fe:3c:7d:e2:80:b8:d7:7c:25:
26:9c:4b:7b:b5:d2:8a:f6:8e:8b:be:f5:a5:65:0b:87:b6:b8:
4d:75:ed:43:b0:e9:3e:b2:7f:6c:18:31:a2:ed:b5:df:26:85:
6b:5d:e2:96:96:02:20:4b:38:00:d7:c8:e8:a3:3a:f3:23:1c:
80:d3:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org