Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/4C969110E0D311E89DE20E21F8AEA228.roa
File: 4C969110E0D311E89DE20E21F8AEA228.roa (raw, json)
Hash identifier: h1PQaQKnMVmbEPhD75sFQrUq1FMmoo2qRSLMOfbrboQ=
Subject key identifier: 44:FE:85:5F:D0:5E:1A:79:72:D5:A0:2F:A7:A9:D8:E4:F4:87:12:28
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0A
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/4C969110E0D311E89DE20E21F8AEA228.roa
Signing time: Mon 05 Nov 2018 08:17:57 +0000
ROA not before: Mon 05 Nov 2018 08:17:52 +0000
ROA not after: Sat 31 Dec 2022 08:17:52 +0000
asID: 36915
IP address blocks: 41.207.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Nov 5 08:17:52 2018 GMT
Not After : Dec 31 08:17:52 2022 GMT
Subject: CN=5bdffcb5-9b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:30:07:b3:86:4a:a5:a1:dd:60:b6:2e:80:
34:d8:ef:36:49:c3:7a:ac:2b:7a:3b:9f:e1:ca:16:
cc:53:33:20:5e:12:62:70:f2:f1:5a:6f:dd:4d:66:
30:31:4e:c9:a8:a1:9d:26:8a:72:7c:ab:45:0f:bd:
d7:e5:ab:72:1f:33:54:aa:77:95:e5:ab:79:87:d8:
64:9f:8d:dc:55:7b:d5:28:05:53:6f:5b:b8:8d:e5:
73:29:4e:e9:5d:1d:bf:2b:59:16:00:20:d0:00:ff:
43:fd:3e:3e:83:a7:3b:56:10:2c:ff:30:60:ac:b0:
3d:cb:11:b0:b6:e9:cf:5b:08:f2:f0:45:de:54:f9:
00:d9:fc:5a:14:9c:e6:9e:89:b3:3f:9d:b8:d2:de:
17:e8:bf:42:03:cd:87:1b:54:67:ec:56:45:c5:cf:
4a:30:9f:2b:31:8f:f3:83:f2:ef:d1:b7:3e:ba:a4:
6f:82:99:c1:c2:ce:d9:de:87:25:5e:fc:53:98:d7:
13:41:7a:2c:db:b9:4e:7c:e5:dc:d5:c2:43:3e:58:
49:b7:7d:a0:93:00:2d:2a:e0:6e:a0:ef:99:ef:5c:
9d:8b:c8:31:dc:cf:cd:24:ff:34:2c:4e:03:78:02:
e4:73:0f:44:f1:fc:50:a2:55:5b:c2:6c:db:11:6e:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:85:5F:D0:5E:1A:79:72:D5:A0:2F:A7:A9:D8:E4:F4:87:12:28
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/4C969110E0D311E89DE20E21F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.207.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:c9:7d:91:8c:3a:03:47:ef:28:25:bf:16:de:a3:fa:8c:e5:
97:d6:07:7a:00:b2:70:32:52:a9:25:71:de:58:22:15:86:06:
bb:be:fb:77:a3:3f:70:df:8c:c4:87:0b:d8:c3:92:88:f9:d5:
b2:5f:bc:d9:e6:f6:a6:e9:6b:58:c2:b0:17:a5:ef:c2:da:ef:
2e:df:38:c2:1b:68:93:ec:52:bc:52:6a:88:0f:ca:0c:d1:72:
90:ae:6e:c6:a1:5a:df:18:d8:cd:12:66:8b:99:43:5b:32:f3:
c4:2b:25:61:d0:56:49:ef:1f:3d:51:7a:18:82:89:0c:05:14:
8e:46:0d:25:ca:9c:79:75:32:bc:c5:2b:2a:6e:df:9d:85:da:
f7:dd:98:56:38:56:21:01:31:bc:c5:1f:b3:5c:87:a2:c6:6a:
fc:60:c1:b6:4d:aa:28:56:e6:9a:75:83:db:fc:68:d1:6a:47:
56:46:ff:ae:13:e3:61:b8:b2:08:03:b3:6e:bb:ae:0e:6e:96:
dd:08:0e:60:f0:54:58:b1:5e:88:94:60:0e:1f:f7:77:25:0b:
b0:82:3b:36:bc:be:77:0c:fa:2c:b5:d3:d2:0d:9c:e0:63:95:
45:8c:db:b6:f2:f9:77:11:9c:bf:47:6e:bc:e7:20:ce:68:ee:
77:ba:54:d0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QzNBMUFGMTEwLwYDVQQFEyg5MEU5ODg3NzkxQ0YyRDk2MDUwMUY4QUVERTI0QTIz
MzRBQkE1NDAzMB4XDTE4MTEwNTA4MTc1MloXDTIyMTIzMTA4MTc1MlowGDEWMBQG
A1UEAxMNNWJkZmZjYjUtOWIzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWfMAezhkqlod1gti6ANNjvNknDeqwrejuf4coWzFMzIF4SYnDy8Vpv3U1m
MDFOyaihnSaKcnyrRQ+91+Wrch8zVKp3leWreYfYZJ+N3FV71SgFU29buI3lcylO
6V0dvytZFgAg0AD/Q/0+PoOnO1YQLP8wYKywPcsRsLbpz1sI8vBF3lT5ANn8WhSc
5p6Jsz+duNLeF+i/QgPNhxtUZ+xWRcXPSjCfKzGP84Py79G3Prqkb4KZwcLO2d6H
JV78U5jXE0F6LNu5Tnzl3NXCQz5YSbd9oJMALSrgbqDvme9cnYvIMdzPzST/NCxO
A3gC5HMPRPH8UKJVW8Js2xFuwXkCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBRE/oVf
0F4aeXLVoC+nqdjk9IcSKDAfBgNVHSMEGDAWgBSQ6Yh3kc8tlgUB+K7eJKIzSrpU
AzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhBRUEyMjgva09tSWQ1
SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva09tSWQ1SFBMWllGQWZpdTNpU2lNMHE2VkFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUMzQTEvMkQ5Njc3MkVFMEQwMTFFODhBRTYwNzFDRjhB
RUEyMjgvNEM5NjkxMTBFMEQzMTFFODlERTIwRTIxRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKc9CMA0GCSqGSIb3DQEBCwUAA4IBAQBd
yX2RjDoDR+8oJb8W3qP6jOWX1gd6ALJwMlKpJXHeWCIVhga7vvt3oz9w34zEhwvY
w5KI+dWyX7zZ5vam6WtYwrAXpe/C2u8u3zjCG2iT7FK8UmqID8oM0XKQrm7GoVrf
GNjNEmaLmUNbMvPEKyVh0FZJ7x89UXoYgokMBRSORg0lypx5dTK8xSsqbt+dhdr3
3ZhWOFYhATG8xR+zXIeixmr8YMG2TaooVuaadYPb/GjRakdWRv+uE+NhuLIIA7Nu
u64ObpbdCA5g8FRYsV6IlGAOH/d3JQuwgjs2vL53DPostdPSDZzgY5VFjNu28vl3
EZy/R2685yDOaO53ulTQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org