Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/ECE5F21EE0D311E89368CD22F8AEA228.roa
File: ECE5F21EE0D311E89368CD22F8AEA228.roa (raw, json)
Hash identifier: deppYtNNeimYtqhU8tWmEin20uWPq14Oa9c8VQ1Jgvw=
Subject key identifier: 87:AE:AA:14:D7:CE:F5:52:4A:4C:00:D6:F3:0A:68:6B:11:DC:68:88
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0E
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/ECE5F21EE0D311E89368CD22F8AEA228.roa
Signing time: Mon 05 Nov 2018 08:22:26 +0000
ROA not before: Mon 05 Nov 2018 08:22:20 +0000
ROA not after: Sat 31 Dec 2022 08:22:20 +0000
asID: 36915
IP address blocks: 41.207.70.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF
Validity
Not Before: Nov 5 08:22:20 2018 GMT
Not After : Dec 31 08:22:20 2022 GMT
Subject: CN=5bdffdc1-db3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:f8:0b:3b:12:c9:a7:96:3d:b1:58:0e:84:
6a:80:c0:50:1d:a3:4f:66:da:a1:79:99:26:17:2d:
06:14:56:e2:bb:22:78:38:37:24:05:66:38:af:63:
91:a4:05:66:06:16:cd:06:a6:53:c3:00:90:02:b0:
45:3a:ff:42:f2:3e:5e:ed:e1:d1:ad:14:7c:f6:b3:
bc:8d:56:a3:ad:3a:2e:c9:14:74:e4:58:c0:ff:ab:
99:fd:60:5b:55:3a:82:00:4a:0e:07:17:ec:c7:8f:
72:d2:b4:e7:c2:69:4c:08:55:59:ad:7b:c0:95:5c:
66:f6:19:32:7d:0f:55:5d:41:7a:48:66:28:23:66:
45:29:82:f9:f3:76:ab:c4:59:5c:09:43:f7:15:35:
ab:78:e6:a5:4a:e9:9f:ba:6c:71:8a:20:30:d5:1f:
d8:3d:10:d9:c5:1e:56:bd:a2:29:8d:b6:f7:3e:d3:
bc:f7:fd:ed:47:2c:bf:1b:3d:ff:68:4a:4f:f6:86:
9a:a4:76:8a:f8:45:d6:19:91:d6:1d:74:78:cc:9b:
3b:93:37:2b:13:23:0c:02:7a:2e:55:2e:d3:bb:da:
27:ab:a9:dc:05:92:21:3b:53:a1:6f:bc:dd:72:85:
71:61:be:df:89:17:6a:ce:ad:63:e6:f8:e3:b4:8b:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:AA:14:D7:CE:F5:52:4A:4C:00:D6:F3:0A:68:6B:11:DC:68:88
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/ECE5F21EE0D311E89368CD22F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.207.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:43:09:63:c0:f6:a5:dc:a9:07:51:a6:6d:1e:00:ca:eb:15:
62:6a:1f:ef:23:ea:77:25:26:59:b4:b3:6a:ae:62:10:f1:94:
07:36:60:66:55:3e:af:b5:b2:b4:00:7b:6b:e9:7d:64:f3:58:
10:b2:83:7e:5a:9f:1d:bb:df:78:0c:07:03:f9:e5:c6:4f:2a:
61:e2:26:10:33:ab:5b:10:43:1d:05:8a:72:66:05:c0:41:b1:
b7:b1:79:18:77:cd:9e:e4:6e:87:60:99:a2:85:75:48:93:15:
62:74:3d:c7:39:3d:d2:39:2a:f0:df:6f:c3:62:2c:55:b0:13:
f3:fa:06:68:3c:5f:71:4f:ee:19:18:4d:ba:73:f3:48:c5:07:
0e:7f:67:82:7d:b5:4c:10:f8:23:b7:82:e9:39:89:2b:94:7a:
c7:08:4a:33:18:27:97:b5:a3:d4:52:8c:1b:91:aa:68:6a:2e:
b9:da:07:13:9a:af:a8:a5:05:3e:31:25:82:b4:dc:5b:d4:bb:
a8:26:b8:25:40:dd:90:9d:aa:42:04:74:69:ce:64:9a:31:34:
3e:f8:e0:29:75:a4:c1:17:24:58:ee:0a:94:f4:17:80:df:34:
89:fa:ea:5f:bb:d7:ff:b8:e4:8f:94:f1:a2:5e:28:8d:6a:fa:
b7:2a:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:01 2025 by rpki-client