Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/8204A6983E0B11EF89F3B484762E951A.roa
File: 8204A6983E0B11EF89F3B484762E951A.roa (raw, json)
Hash identifier: FIsQ9z+AahVgz96bLrkkqMoTEp6FrP1GSnx31FKxZUs=
Subject key identifier: 18:C7:3A:A1:2C:F4:58:A2:1C:FC:14:91:6C:BE:D4:68:1E:6F:69:52
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 07
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/8204A6983E0B11EF89F3B484762E951A.roa
Signing time: Tue 09 Jul 2024 15:54:22 +0000
ROA not before: Tue 09 Jul 2024 15:54:19 +0000
ROA not after: Wed 10 Jul 2024 15:54:19 +0000
asID: 37225
IP address blocks: 41.85.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Jul 9 15:54:19 2024 GMT
Not After : Jul 10 15:54:19 2024 GMT
Subject: CN=668d5d2e-0c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:7a:39:4e:09:eb:2a:3f:78:46:ac:18:e8:
7f:c7:0e:0e:91:65:c8:f5:13:dc:37:5c:38:8b:86:
27:a6:51:9f:6b:30:3a:e8:a7:0a:fd:17:ae:33:e5:
5d:e1:08:5a:f4:ff:9d:dd:cf:17:f8:23:2a:23:90:
f7:d2:61:58:87:ed:ff:02:9c:f3:34:e8:f4:b2:fe:
28:b5:90:1b:92:94:73:bb:4d:28:4c:bd:f5:90:b2:
42:54:be:24:29:c7:3a:7b:72:ab:26:a6:50:4a:cf:
d2:7f:c8:ac:53:6b:db:c5:53:1a:37:65:d7:66:4b:
4b:85:8c:af:5b:57:8f:37:62:5b:24:f6:c2:31:c7:
12:61:46:32:d2:72:6e:fb:3c:51:89:52:f2:24:48:
ab:5c:79:4a:07:f6:d8:e9:af:8f:1b:ab:b8:d7:19:
94:a8:a8:a1:bb:8b:70:9d:85:84:f0:45:d1:de:ca:
c9:ae:7d:ca:4c:04:38:a4:e7:18:5c:96:b1:fc:ba:
1a:5e:fb:7e:3f:5c:cd:2c:0d:f6:0e:9f:16:d6:72:
a9:8b:67:85:f6:be:10:86:2d:fe:05:4e:e3:58:83:
86:3a:e1:cf:a5:e9:a5:c4:de:cb:f6:54:f8:be:cc:
ad:7a:17:c8:95:1b:3c:f3:4c:48:3f:88:ff:51:b0:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:3A:A1:2C:F4:58:A2:1C:FC:14:91:6C:BE:D4:68:1E:6F:69:52
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/8204A6983E0B11EF89F3B484762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.224.0/19
Signature Algorithm: sha256WithRSAEncryption
35:09:8d:fb:3a:6e:78:12:d2:a3:6b:cb:f7:c3:37:db:0e:76:
dd:99:49:c8:54:af:51:41:dc:36:4d:4a:b2:74:56:b5:00:e7:
8f:10:ad:f2:4b:60:fe:79:cb:bc:94:ba:48:ee:1c:6d:72:0c:
01:d7:4a:de:b0:37:d6:3e:ed:37:ee:c0:19:14:4d:a3:35:6f:
4a:75:c9:72:2e:4e:31:43:15:d7:d0:a9:e0:6d:65:71:2f:2f:
1c:fb:4c:9b:b7:78:f9:34:28:d9:22:22:99:22:7d:8c:ab:c2:
2b:f5:28:c0:6e:b1:4b:48:72:5f:5c:43:51:d0:1d:15:b4:21:
a0:08:25:09:f8:d2:e5:23:4f:4b:f8:a6:51:3a:7d:80:6c:78:
6e:f6:f1:97:fb:4a:6b:85:df:9a:55:18:c9:6c:0d:23:d2:8e:
e5:2c:54:b6:57:43:74:75:f6:f2:2c:23:67:fc:dc:c2:6c:c7:
27:08:63:2c:7c:39:bf:ed:d1:fc:8b:b8:eb:b3:4c:37:0b:15:
7f:e0:9d:38:1f:c3:21:1d:ff:5f:68:61:6e:a5:84:9b:b6:c3:
94:d8:40:85:70:d0:34:91:30:b0:05:cc:24:0d:47:b7:a7:07:
d8:f7:dd:ce:19:e3:57:87:36:00:05:0f:01:37:01:aa:88:b0:
a4:14:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 04:17:17 2024 by rpki-client on console-fra.rpki-client.org