Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/1D51CD02E0D311E8B285EA20F8AEA228.roa
File: 1D51CD02E0D311E8B285EA20F8AEA228.roa (raw, json)
Hash identifier: Mqax9DGQcH1iBSnzHcyz5hn5X+Wc6RKmMeYEwAhG4vI=
Subject key identifier: E3:2D:A6:95:D4:6F:89:7B:CA:DD:BC:58:5B:0B:E3:1F:28:32:FC:06
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 08
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/1D51CD02E0D311E8B285EA20F8AEA228.roa
Signing time: Mon 05 Nov 2018 08:16:38 +0000
ROA not before: Mon 05 Nov 2018 08:16:32 +0000
ROA not after: Sat 31 Dec 2022 08:16:32 +0000
asID: 36915
IP address blocks: 41.207.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Nov 5 08:16:32 2018 GMT
Not After : Dec 31 08:16:32 2022 GMT
Subject: CN=5bdffc66-9fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:bd:e7:d0:5f:b1:50:05:c1:05:01:d0:1b:
42:dc:34:35:dc:ca:de:aa:00:92:b0:e1:33:2b:dc:
76:b1:0d:18:f9:e1:b3:cb:92:d4:db:de:2e:99:72:
aa:83:09:ea:86:8f:c1:a9:80:c9:f1:6f:e1:65:4b:
58:72:d1:30:d3:0d:63:28:a7:f1:9e:89:03:5f:9b:
27:02:a3:e8:f2:4a:0e:86:7c:8e:02:44:ac:b7:27:
c8:52:76:03:88:b3:ef:ea:60:52:b4:cd:ab:6d:20:
e6:28:8e:20:8f:53:67:75:f3:40:a2:8c:c9:4c:6e:
b5:26:70:da:55:30:91:ad:7d:39:84:6c:e8:4c:b3:
a9:66:07:d7:52:d5:ca:6f:d6:d0:14:44:32:45:2c:
ba:f2:cc:fe:07:e3:72:ea:ea:f1:95:54:af:bf:20:
7f:fd:51:b7:67:a3:fd:f2:8f:78:20:dd:6e:78:46:
49:7d:05:c2:47:f3:8a:65:46:1a:be:8a:71:ce:0e:
c9:51:3e:24:49:e0:56:44:82:98:de:52:29:b0:94:
2e:f5:a8:8b:c1:ef:aa:f4:27:af:cb:44:95:ef:bd:
a1:d8:0e:cb:05:3e:33:93:75:92:88:9c:60:eb:2a:
55:70:87:b2:4d:81:53:66:03:8c:0a:1a:e3:1f:e9:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:A6:95:D4:6F:89:7B:CA:DD:BC:58:5B:0B:E3:1F:28:32:FC:06
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/1D51CD02E0D311E8B285EA20F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.207.64.0/23
Signature Algorithm: sha256WithRSAEncryption
88:86:e9:61:39:04:60:6d:bf:3f:a8:b3:b1:38:ce:2b:03:a1:
f7:ca:b1:43:07:2b:46:1d:16:bd:e6:e5:d2:32:f3:34:7d:88:
3a:5e:d6:af:ae:0c:7d:73:2f:b3:73:7b:bc:35:ad:dd:ae:22:
0a:23:a0:c2:0b:bd:d8:79:4d:ac:ec:0b:04:c3:ec:53:de:ce:
34:54:26:89:57:3a:7b:d0:64:a4:37:4c:d0:82:22:f3:b5:aa:
e6:f8:67:60:bd:71:3c:48:3b:cd:99:68:cc:da:7f:0a:a8:70:
37:9c:29:70:b8:4a:1a:5c:a0:5d:12:80:6d:84:a3:39:4a:44:
3e:f5:52:10:ba:68:17:f1:41:64:67:67:1e:62:e0:61:31:83:
b5:e4:3a:36:6f:03:bd:d5:1f:d2:89:34:28:71:d8:ca:4b:b8:
fa:52:c7:ac:1f:a2:3c:46:95:cc:13:65:8c:2a:d0:c0:88:d9:
aa:a2:da:9d:aa:0f:72:36:b3:8b:ec:2a:ce:d6:15:63:b2:5e:
db:d2:3b:92:8a:b9:28:ec:10:b7:11:2b:82:20:90:04:80:33:
c0:65:0a:c2:19:0a:19:bf:2e:7d:c3:7f:21:ef:d2:41:a8:ae:
0f:22:65:2b:f0:d3:68:24:26:71:5d:94:8a:e4:d9:01:22:c5:
48:a5:d2:66
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QzNBMUFGMTEwLwYDVQQFEyg5MEU5ODg3NzkxQ0YyRDk2MDUwMUY4QUVERTI0QTIz
MzRBQkE1NDAzMB4XDTE4MTEwNTA4MTYzMloXDTIyMTIzMTA4MTYzMlowGDEWMBQG
A1UEAxMNNWJkZmZjNjYtOWZjNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/TvefQX7FQBcEFAdAbQtw0NdzK3qoAkrDhMyvcdrENGPnhs8uS1NveLply
qoMJ6oaPwamAyfFv4WVLWHLRMNMNYyin8Z6JA1+bJwKj6PJKDoZ8jgJErLcnyFJ2
A4iz7+pgUrTNq20g5iiOII9TZ3XzQKKMyUxutSZw2lUwka19OYRs6EyzqWYH11LV
ym/W0BREMkUsuvLM/gfjcurq8ZVUr78gf/1Rt2ej/fKPeCDdbnhGSX0FwkfzimVG
Gr6Kcc4OyVE+JEngVkSCmN5SKbCULvWoi8HvqvQnr8tEle+9odgOywU+M5N1koic
YOsqVXCHsk2BU2YDjAoa4x/p8/8CAwEAAaOCAm4wggJqMB0GA1UdDgQWBBTjLaaV
1G+Je8rdvFhbC+MfKDL8BjAfBgNVHSMEGDAWgBSQ6Yh3kc8tlgUB+K7eJKIzSrpU
AzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhBRUEyMjgva09tSWQ1
SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva09tSWQ1SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhB
RUEyMjgvMUQ1MUNEMDJFMEQzMTFFOEIyODVFQTIwRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKc9AMA0GCSqGSIb3DQEBCwUAA4IBAQCI
hulhOQRgbb8/qLOxOM4rA6H3yrFDBytGHRa95uXSMvM0fYg6Xtavrgx9cy+zc3u8
Na3driIKI6DCC73YeU2s7AsEw+xT3s40VCaJVzp70GSkN0zQgiLztarm+GdgvXE8
SDvNmWjM2n8KqHA3nClwuEoaXKBdEoBthKM5SkQ+9VIQumgX8UFkZ2ceYuBhMYO1
5Do2bwO91R/SiTQocdjKS7j6UsesH6I8RpXME2WMKtDAiNmqotqdqg9yNrOL7CrO
1hVjsl7b0juSirko7BC3ESuCIJAEgDPAZQrCGQoZvy59w38h79JBqK4PImUr8NNo
JCZxXZSK5NkBIsVIpdJm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org