Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/461BFFAA3E0B11EF9EECB180762E951A.roa
File: 461BFFAA3E0B11EF9EECB180762E951A.roa (raw, json)
Hash identifier: IU5uZIlSLPJRUdN9W4MpP0pFvgxMkoN/LCrpA9Yt2VY=
Subject key identifier: 73:12:5E:51:5B:C5:7B:D5:7C:DF:A9:E2:3E:C8:F4:D9:9E:5D:5D:A1
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 05
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/461BFFAA3E0B11EF9EECB180762E951A.roa
Signing time: Tue 09 Jul 2024 15:52:41 +0000
ROA not before: Tue 09 Jul 2024 15:52:38 +0000
ROA not after: Wed 10 Jul 2024 15:52:38 +0000
asID: 37225
IP address blocks: 41.76.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Jul 9 15:52:38 2024 GMT
Not After : Jul 10 15:52:38 2024 GMT
Subject: CN=668d5cc9-6136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:26:d3:26:7e:23:05:4c:35:d2:11:e4:32:dc:
75:69:5b:f2:78:15:c6:51:b0:6c:be:e6:0a:ba:07:
c9:19:d5:18:f8:e2:ff:87:86:58:81:5f:ab:81:d2:
ea:fd:fd:a2:e0:3f:d7:93:b0:62:6e:a9:d7:9d:e1:
c3:77:f5:ea:a0:c6:43:45:bf:29:c3:35:73:09:4d:
cf:78:db:ed:17:62:cf:5e:fe:f7:00:e7:c0:29:99:
46:cb:c4:ca:d2:81:26:c2:b5:0c:91:ab:ca:27:6d:
b4:25:4a:f3:74:23:c1:90:a7:7d:71:bd:7f:ca:c0:
4f:46:74:ab:54:92:c4:46:14:2e:f9:0b:b7:21:f6:
77:e3:4d:e2:f4:0f:5c:65:b1:a9:0f:38:dc:d2:6f:
17:ad:d5:44:b3:8c:75:52:dc:5b:38:6e:35:ec:d7:
21:be:51:e0:f4:5e:de:bf:81:7a:b4:84:f3:e2:0f:
0b:b6:67:fc:d7:b4:5d:52:13:d3:b8:3a:2c:44:3f:
16:0e:bc:32:a7:38:3b:f5:16:19:d1:ed:c9:a3:c8:
93:d4:6d:81:df:9f:56:99:a9:af:a9:4d:fb:02:66:
a9:11:63:88:83:37:e2:ec:af:eb:37:d6:73:76:cc:
59:45:a7:bb:fc:d3:0d:bb:7d:da:44:e4:f4:3a:33:
4b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:5E:51:5B:C5:7B:D5:7C:DF:A9:E2:3E:C8:F4:D9:9E:5D:5D:A1
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/461BFFAA3E0B11EF9EECB180762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.176.0/21
Signature Algorithm: sha256WithRSAEncryption
23:0f:a8:b7:1e:82:bc:9e:39:dc:d4:38:a0:92:7b:00:07:2a:
9a:d8:17:ed:26:2b:52:80:17:c4:f6:e8:2d:a0:75:2f:2d:df:
f3:1d:51:e4:ef:1a:43:1c:9e:c6:d1:5c:19:63:58:b8:67:de:
92:4f:48:b6:09:df:71:51:c2:40:a4:16:97:3b:a1:fa:7e:70:
78:dd:c8:1e:fe:c3:67:a3:3b:ee:f1:36:bd:95:c2:65:cb:62:
66:73:2e:42:dc:0a:3f:d8:5b:8f:ed:87:30:c1:7f:36:ec:62:
ea:23:cf:e1:00:4c:f3:94:30:ee:d6:f2:83:ed:f3:9c:aa:c6:
a7:22:f3:08:c8:8b:0e:67:31:b4:df:9e:d8:3a:b4:d4:dd:60:
1b:1e:0d:11:0d:78:8f:40:3b:f7:9f:25:36:ce:76:08:ae:c8:
51:67:b7:6a:f9:4e:70:b1:74:ca:2f:93:ea:23:ac:4f:b7:39:
78:7f:17:6e:03:ca:ea:50:4c:ae:8c:53:b1:96:08:96:5c:8e:
48:0f:da:ef:e1:3a:1a:ce:c0:86:00:eb:32:20:75:3e:1b:27:
5c:fd:12:ae:b0:0e:be:ba:25:69:72:5b:ac:89:03:b4:f4:cc:
50:3c:e4:2e:d7:02:e3:12:7c:d7:1e:a8:f5:c6:0d:6c:66:4d:
8a:59:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 04:11:31 2024 by rpki-client on console-ams.rpki-client.org