Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CBC2D9FA30E211ECADC24375D8A014CE.roa
File: CBC2D9FA30E211ECADC24375D8A014CE.roa (raw, json)
Hash identifier: XDD7VXf8TtXGVTV4rMM6ULrMP23pf/u+j2Q3y5xh9b4=
Subject key identifier: 49:C6:73:93:1A:BF:7C:06:8C:82:66:2A:F9:90:E9:5B:C8:A3:8B:C4
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 10
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CBC2D9FA30E211ECADC24375D8A014CE.roa
Signing time: Tue 19 Oct 2021 13:45:18 +0000
ROA not before: Tue 19 Oct 2021 13:45:15 +0000
ROA not after: Wed 19 Oct 2022 13:45:15 +0000
asID: 21003
IP address blocks: 41.252.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Oct 19 13:45:15 2021 GMT
Not After : Oct 19 13:45:15 2022 GMT
Subject: CN=616ecbee-73e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:7e:f5:ea:7a:b6:04:5b:25:e1:51:f2:c3:
43:21:fd:f3:32:05:80:a8:a9:f0:0c:b1:66:52:46:
7a:51:38:3d:f5:17:4a:4f:2b:b4:9b:a6:33:2e:03:
42:04:30:42:ef:4a:3f:0d:36:99:bd:d2:3e:56:6d:
c1:49:db:cd:81:f4:1a:e9:4b:0d:c1:4c:4c:dc:5e:
47:86:ef:41:89:1d:e6:2a:09:9e:f2:94:ff:43:c9:
99:12:fb:84:66:7e:13:92:a3:e5:66:55:41:27:30:
96:a0:7e:4d:b2:96:cc:ad:de:a2:3c:97:85:4d:a2:
7b:be:a0:aa:79:3f:73:50:02:c6:ad:c5:ea:59:1e:
9f:a1:46:a1:b2:8c:29:87:ae:b8:64:9a:a8:0a:83:
80:cc:85:f2:72:94:33:2b:5b:02:5e:2f:aa:4f:36:
e0:c9:3e:40:93:2a:61:9d:eb:99:9b:19:e7:84:4f:
3e:e3:5d:1e:d7:23:88:11:f4:fc:c0:5d:ec:41:a7:
0b:ed:f4:58:ca:f5:3d:3c:ff:e2:93:05:20:7a:73:
e1:fe:7d:95:57:95:7f:03:12:da:f3:fe:db:f7:25:
99:52:a0:9a:38:e2:bb:14:26:a6:25:6b:5e:11:ac:
63:9d:ab:1f:6c:0d:aa:73:9e:52:14:2e:0b:af:d3:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C6:73:93:1A:BF:7C:06:8C:82:66:2A:F9:90:E9:5B:C8:A3:8B:C4
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/CBC2D9FA30E211ECADC24375D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.252.0.0/14
Signature Algorithm: sha256WithRSAEncryption
52:d9:ca:bc:d7:ea:0a:55:ec:f0:48:f7:9c:c4:65:af:a1:28:
8a:78:4b:a5:8f:99:aa:af:a7:10:94:2a:b4:c2:ef:3d:d3:bd:
73:66:f5:a4:2a:d5:83:12:34:ac:a8:f8:b1:b2:73:f2:cc:f6:
a7:f2:0b:a4:0e:8b:5e:af:18:3e:2c:41:11:f2:29:d2:5a:fc:
4d:7b:7b:2b:31:af:62:73:5d:d9:ee:cd:44:25:bc:bb:ed:fa:
5a:b9:df:18:3d:d9:1d:1a:4e:c0:5d:8f:5a:8d:b5:32:11:04:
19:93:0b:cd:bd:3e:8f:23:29:b3:34:b7:89:7b:33:86:ac:b6:
ee:9a:50:a4:92:1c:a0:e6:00:9a:f9:8a:6e:27:a9:7d:22:a0:
b7:4b:f3:7f:0f:e5:44:22:e8:56:21:fc:31:08:f0:7e:59:a1:
62:06:ee:52:98:b4:c9:d7:5f:89:4b:db:2b:1f:b7:cc:18:ca:
d4:77:b8:56:83:20:0a:6b:f0:d6:88:de:8a:5d:77:dc:37:f4:
d5:27:f3:34:27:8d:00:7d:b2:49:4b:4c:5e:cc:99:ed:1a:36:
07:f0:b0:13:53:81:cf:b9:4c:b7:de:cb:d5:37:8f:e4:98:4e:
90:b6:f5:6c:17:54:8f:d7:87:c8:3c:66:7a:d7:e0:4e:b9:44:
84:c5:0a:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
OEY0RkFGMTEwLwYDVQQFEyhEQzE3QTBFQzU4NjUyRDMxODk2MTIzQTY1NjEwQzNB
MzIwNDY1NTZCMB4XDTIxMTAxOTEzNDUxNVoXDTIyMTAxOTEzNDUxNVowGDEWMBQG
A1UEAwwNNjE2ZWNiZWUtNzNlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/gfvXqerYEWyXhUfLDQyH98zIFgKip8AyxZlJGelE4PfUXSk8rtJumMy4D
QgQwQu9KPw02mb3SPlZtwUnbzYH0GulLDcFMTNxeR4bvQYkd5ioJnvKU/0PJmRL7
hGZ+E5Kj5WZVQScwlqB+TbKWzK3eojyXhU2ie76gqnk/c1ACxq3F6lken6FGobKM
KYeuuGSaqAqDgMyF8nKUMytbAl4vqk824Mk+QJMqYZ3rmZsZ54RPPuNdHtcjiBH0
/MBd7EGnC+30WMr1PTz/4pMFIHpz4f59lVeVfwMS2vP+2/clmVKgmjjiuxQmpiVr
XhGsY52rH2wNqnOeUhQuC6/TchMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRJxnOT
Gr98BoyCZir5kOlbyKOLxDAfBgNVHSMEGDAWgBTcF6DsWGUtMYlhI6ZWEMOjIEZV
azAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjhGNEYvOEEzNzdCQkMyQTc1MTFFQzkwODE3NTU5RDhBMDE0Q0UvM0JlZzdG
aGxMVEdKWVNPbVZoRERveUJHVldzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvM0JlZzdGaGxMVEdKWVNPbVZoRERveUJHVldzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhGNEYvOEEzNzdCQkMyQTc1MTFFQzkwODE3NTU5RDhB
MDE0Q0UvQ0JDMkQ5RkEzMEUyMTFFQ0FEQzI0Mzc1RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAin8MA0GCSqGSIb3DQEBCwUA
A4IBAQBS2cq81+oKVezwSPecxGWvoSiKeEulj5mqr6cQlCq0wu89071zZvWkKtWD
EjSsqPixsnPyzPan8gukDoterxg+LEER8inSWvxNe3srMa9ic13Z7s1EJby77fpa
ud8YPdkdGk7AXY9ajbUyEQQZkwvNvT6PIymzNLeJezOGrLbumlCkkhyg5gCa+Ypu
J6l9IqC3S/N/D+VEIuhWIfwxCPB+WaFiBu5SmLTJ11+JS9srH7fMGMrUd7hWgyAK
a/DWiN6KXXfcN/TVJ/M0J40AfbJJS0xezJntGjYH8LATU4HPuUy33svVN4/kmE6Q
tvVsF1SP14fIPGZ61+BOuUSExQo0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org