Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2B71C10CE0D411E894800C23F8AEA228.roa
File: 2B71C10CE0D411E894800C23F8AEA228.roa (raw, json)
Hash identifier: +eLS46PDyahB/tG2jfUXLdk6TtB+CJOCYTQeKweQNis=
Subject key identifier: 25:09:32:29:CC:F0:4E:BA:52:65:06:2D:EB:E7:1B:50:7B:7D:D8:CD
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 10
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2B71C10CE0D411E894800C23F8AEA228.roa
Signing time: Mon 05 Nov 2018 08:24:11 +0000
ROA not before: Mon 05 Nov 2018 08:24:06 +0000
ROA not after: Sat 31 Dec 2022 08:24:06 +0000
asID: 36915
IP address blocks: 41.207.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Nov 5 08:24:06 2018 GMT
Not After : Dec 31 08:24:06 2022 GMT
Subject: CN=5bdffe2a-4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:f0:d9:60:ca:cf:07:a0:fc:08:4a:aa:00:
48:b2:45:cb:97:38:4f:2b:93:fe:30:d0:35:67:9a:
79:d9:a2:12:c9:be:2a:b9:9e:9e:f9:f3:13:35:d3:
ad:3e:f7:4c:6d:0c:af:05:ca:cc:76:d5:f2:54:68:
00:51:b7:6e:5e:0c:d1:3e:68:a0:7c:6f:ef:72:15:
ba:82:45:64:6e:c3:4e:16:67:3a:ce:c1:52:3e:11:
9f:de:9b:52:0c:93:68:79:66:14:24:2e:17:99:5f:
28:5d:19:d4:5a:1a:d5:d4:d6:37:8c:a1:4e:e6:c6:
60:ea:b1:e6:f0:e2:64:65:f0:1f:5d:cc:87:ff:72:
5f:08:74:33:9d:bf:40:95:4d:c7:95:0a:97:b5:51:
17:25:68:b2:59:c0:2c:da:7f:ce:a7:c5:02:7b:95:
9a:cc:b6:10:db:15:fe:c2:cb:95:e8:15:a8:8e:48:
da:3c:dc:50:a4:70:04:7b:eb:4f:7d:c5:3f:95:8b:
b2:3a:6e:05:b0:39:ee:a3:8a:0d:0b:cd:e3:ad:69:
11:c1:d6:24:a2:db:03:be:aa:e4:94:ae:da:ad:05:
9c:b6:19:ac:05:c1:87:0e:00:d4:af:7a:76:b6:ee:
aa:9f:a9:4f:ac:72:23:27:9c:68:f2:95:cc:7d:a0:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:09:32:29:CC:F0:4E:BA:52:65:06:2D:EB:E7:1B:50:7B:7D:D8:CD
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/2B71C10CE0D411E894800C23F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.207.64.0/19
Signature Algorithm: sha256WithRSAEncryption
44:fa:34:b0:5f:14:a7:e8:a9:a3:87:33:e1:01:21:bd:2c:02:
23:6a:de:41:52:ed:9d:4c:34:ec:17:0b:29:4c:ff:3f:ac:0e:
d3:5e:05:87:c4:59:b5:50:fd:54:48:2d:1a:d3:9a:0e:2b:98:
be:e7:cf:9d:56:73:c4:77:1d:1f:37:7e:6d:e8:d8:ae:9c:a5:
67:15:37:8e:8f:81:5d:0e:cf:49:35:36:52:2e:c8:d7:60:9d:
a8:4c:85:31:6e:4a:a9:eb:db:eb:23:98:fa:c4:95:ff:88:c5:
5f:6c:47:92:73:94:f5:da:7f:23:ea:20:60:f3:e2:e1:50:e5:
8d:be:d6:a9:30:b7:25:ed:41:0f:55:66:47:b7:f4:22:36:38:
b5:3e:5f:8b:58:fa:25:2f:be:0a:2b:75:42:e4:27:ff:16:d1:
8c:5f:0d:16:32:bb:01:b0:f5:13:9b:00:f7:1a:71:2a:6b:5a:
c8:67:1a:1a:50:6d:e3:b1:ea:b2:f8:68:5f:c8:94:51:d1:35:
ba:7c:5d:c0:74:d1:cf:c3:16:6a:23:f3:51:09:49:58:f8:34:
c5:d5:bc:81:ef:bd:c3:f2:42:ef:d3:ee:39:1c:f1:3d:8c:f0:
36:2e:91:46:a3:23:70:58:de:19:c0:3d:6a:e9:02:89:74:9a:
72:c7:9d:78
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QzNBMUFGMTEwLwYDVQQFEyg5MEU5ODg3NzkxQ0YyRDk2MDUwMUY4QUVERTI0QTIz
MzRBQkE1NDAzMB4XDTE4MTEwNTA4MjQwNloXDTIyMTIzMTA4MjQwNlowGDEWMBQG
A1UEAxMNNWJkZmZlMmEtNDMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFE8Nlgys8HoPwISqoASLJFy5c4TyuT/jDQNWeaedmiEsm+KrmenvnzEzXT
rT73TG0MrwXKzHbV8lRoAFG3bl4M0T5ooHxv73IVuoJFZG7DThZnOs7BUj4Rn96b
UgyTaHlmFCQuF5lfKF0Z1Foa1dTWN4yhTubGYOqx5vDiZGXwH13Mh/9yXwh0M52/
QJVNx5UKl7VRFyVoslnALNp/zqfFAnuVmsy2ENsV/sLLlegVqI5I2jzcUKRwBHvr
T33FP5WLsjpuBbA57qOKDQvN461pEcHWJKLbA76q5JSu2q0FnLYZrAXBhw4A1K96
drbuqp+pT6xyIyecaPKVzH2gdfMCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBQlCTIp
zPBOulJlBi3r5xtQe33YzTAfBgNVHSMEGDAWgBSQ6Yh3kc8tlgUB+K7eJKIzSrpU
AzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhBRUEyMjgva09tSWQ1
SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva09tSWQ1SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhB
RUEyMjgvMkI3MUMxMENFMEQ0MTFFODk0ODAwQzIzRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKc9AMA0GCSqGSIb3DQEBCwUAA4IBAQBE
+jSwXxSn6KmjhzPhASG9LAIjat5BUu2dTDTsFwspTP8/rA7TXgWHxFm1UP1USC0a
05oOK5i+58+dVnPEdx0fN35t6NiunKVnFTeOj4FdDs9JNTZSLsjXYJ2oTIUxbkqp
69vrI5j6xJX/iMVfbEeSc5T12n8j6iBg8+LhUOWNvtapMLcl7UEPVWZHt/QiNji1
Pl+LWPolL74KK3VC5Cf/FtGMXw0WMrsBsPUTmwD3GnEqa1rIZxoaUG3jseqy+Ghf
yJRR0TW6fF3AdNHPwxZqI/NRCUlY+DTF1byB773D8kLv0+45HPE9jPA2LpFGoyNw
WN4ZwD1q6QKJdJpyx514
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org