Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
File:                     55A4651E2ECA11EC826BB027D8A014CE.roa (raw, json)
Hash identifier:          Ro6bbhCF5uB5fYZkpeKOpbMeDDWp6TOAbrRoiD/qol8=
Subject key identifier:   9C:3F:A4:C9:2B:1B:0D:78:B6:30:D0:22:B3:3E:F0:E0:80:EA:B3:72
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       09
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
Signing time:             Sat 16 Oct 2021 21:45:10 +0000
ROA not before:           Sat 16 Oct 2021 21:45:06 +0000
ROA not after:            Sun 16 Oct 2022 21:45:06 +0000
asID:                     21003
IP address blocks:        41.208.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Oct 16 21:45:06 2021 GMT
            Not After : Oct 16 21:45:06 2022 GMT
        Subject: CN=616b47e6-d251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:0e:ae:86:92:16:73:8f:1c:85:37:ef:a5:
                    1e:6a:47:50:65:ba:97:7a:3e:2d:6e:6f:56:4e:11:
                    36:13:e6:10:47:d8:72:27:0c:51:72:59:72:eb:11:
                    01:d5:39:9b:28:94:8c:5c:2b:4f:1b:0d:72:7d:60:
                    bf:cc:1a:73:fd:b5:3b:ff:e5:c2:97:c2:bf:c6:54:
                    fd:b8:45:d2:6b:71:dc:14:06:0c:8e:12:76:33:03:
                    0a:c6:d8:f8:cf:65:0e:52:4c:81:85:91:e6:e6:65:
                    e5:5c:33:d8:20:64:ba:55:69:d2:bb:31:f4:19:7f:
                    91:f8:b6:0f:5d:c7:90:b5:27:24:85:31:34:e0:10:
                    a3:e2:3e:31:b1:8a:41:04:59:8b:36:e4:7d:6a:13:
                    f7:52:c8:7d:42:8e:98:2d:3a:0c:5b:10:70:db:aa:
                    c9:07:fc:7d:18:4d:f9:2e:ee:55:49:fd:90:bf:17:
                    49:8b:f9:88:ee:90:da:35:97:45:5e:13:a0:3e:a7:
                    7e:28:e4:24:ff:71:1b:d8:2a:55:3b:cc:34:cc:73:
                    50:5d:40:6a:42:82:f5:bf:f8:28:77:14:f0:81:bf:
                    e4:a8:2f:1f:bf:9a:f9:7e:ca:d9:f2:dc:a1:99:f3:
                    03:d3:9e:03:85:51:7d:56:2f:45:9e:70:57:05:43:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:A4:C9:2B:1B:0D:78:B6:30:D0:22:B3:3E:F0:E0:80:EA:B3:72
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:0e:26:0e:cb:f7:52:bc:c3:88:ea:3b:f2:bc:39:69:29:
         6b:15:18:e7:2c:da:8e:70:c3:2a:23:13:2b:be:29:29:d9:e4:
         59:31:97:46:bf:47:c2:1e:33:dd:66:a8:6b:dd:4b:4c:8c:d0:
         42:d9:b1:06:d5:af:12:61:4d:40:ed:d6:2e:22:cd:14:39:0a:
         a6:d2:0d:02:7c:2f:dd:31:a2:16:aa:24:b6:18:98:e1:57:5e:
         dd:15:d8:f6:ff:f9:54:36:95:a9:23:6b:8f:fe:ee:ba:c6:ff:
         02:6b:0f:5b:94:df:64:ba:06:e2:91:58:87:79:51:a0:a5:af:
         16:32:2f:a6:70:d6:02:ac:e9:ec:eb:2a:8a:cb:cc:1e:c7:46:
         e9:f0:2b:56:2a:a6:63:97:1d:53:5d:12:f0:d3:83:9f:a8:50:
         e2:69:09:1d:ec:15:b7:e3:dd:ca:9a:34:24:2c:32:1d:9c:f0:
         30:00:54:09:57:42:d7:0c:85:67:21:3f:1b:c6:c2:f2:2e:ee:
         7e:ab:4f:85:71:b6:bd:a4:69:93:9a:b4:8d:55:1e:3f:17:16:
         f2:18:dc:90:c0:73:73:c1:db:1c:ce:d0:ce:7f:e3:77:80:4d:
         ef:e3:73:96:e4:d3:df:c7:f7:35:e4:a1:9b:90:cc:15:19:ca:
         ac:41:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org