Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/42DFDF9ECAAC11EB8C0E2D5CF8AEA228.roa
File: 42DFDF9ECAAC11EB8C0E2D5CF8AEA228.roa (raw, json)
Hash identifier: 5IwXfkoDt2k9uwiuHz7LePtJMRCCMMcT9uCIPlDSovo=
Subject key identifier: 5F:D3:38:83:56:FB:73:33:A3:99:40:3A:23:5F:BF:B5:0E:F3:BC:D2
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 04
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/42DFDF9ECAAC11EB8C0E2D5CF8AEA228.roa
Signing time: Fri 11 Jun 2021 11:57:57 +0000
ROA not before: Fri 11 Jun 2021 11:57:52 +0000
ROA not after: Thu 30 Jun 2022 11:57:52 +0000
asID: 11845
IP address blocks: 41.85.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jun 11 11:57:52 2021 GMT
Not After : Jun 30 11:57:52 2022 GMT
Subject: CN=60c34fc5-a5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:47:8a:74:03:cd:9b:7d:f4:fd:34:54:38:
fa:9e:f3:9e:94:14:03:56:47:b7:87:9f:d8:8b:47:
e2:53:63:f8:39:9c:2d:6f:85:aa:53:a3:bd:71:e4:
86:3a:fc:2b:b2:27:27:3d:17:41:2d:aa:60:5e:f9:
06:3e:18:c3:7a:5f:3b:b3:b7:5d:b0:c8:01:7e:ea:
36:60:62:96:96:e7:d7:9a:a1:73:75:64:5b:51:83:
7a:0c:18:c3:ae:e8:77:6c:97:38:e1:14:1a:86:5b:
0e:09:49:83:8c:77:1a:39:a2:52:36:72:c3:c7:9d:
90:82:c5:69:bc:cb:35:50:45:f2:49:cd:60:d0:68:
a4:e8:c1:ba:ec:4b:eb:95:70:97:84:6a:97:04:70:
c1:0a:ef:f6:9e:47:68:a2:67:23:5b:05:8b:9c:16:
e2:04:1a:bd:05:5d:4d:62:38:68:15:a8:b0:4e:e9:
dd:63:80:14:fd:5e:f7:0b:7f:b0:b9:f0:e7:3a:75:
20:e0:6b:1c:f4:26:70:53:b1:6f:05:1e:3d:c9:70:
01:11:2d:8d:1a:35:3e:c5:38:ed:f5:31:18:35:76:
31:ee:a2:49:8e:b7:71:2d:20:6d:0d:e5:11:8d:dd:
2f:e8:c2:d7:9c:b2:d2:d8:92:9f:45:e7:cc:a5:b6:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:38:83:56:FB:73:33:A3:99:40:3A:23:5F:BF:B5:0E:F3:BC:D2
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/42DFDF9ECAAC11EB8C0E2D5CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:a9:60:72:95:42:e3:e4:7a:af:dd:af:a0:54:8a:a1:e2:
87:25:e3:52:41:02:3a:0d:94:ba:a9:03:07:02:e9:30:3b:ec:
75:fd:0f:e6:19:df:3a:ee:d9:29:05:35:c3:cd:c5:cb:ee:22:
e4:7c:1e:11:d1:35:a9:89:ed:96:07:24:8a:c8:3b:70:fa:4f:
59:f7:4e:4d:4c:68:4a:a5:52:73:67:28:02:e0:08:c5:3f:1b:
fa:ed:2f:72:f9:65:62:c1:b4:c9:95:5e:e9:df:c9:f7:39:1a:
b0:95:44:f3:05:72:17:45:1c:11:6c:12:51:de:27:d5:3c:ac:
52:e8:01:5f:b1:47:12:b7:6d:be:95:cd:7d:07:bd:e7:f6:6e:
a9:3c:98:04:79:e2:c2:70:7c:35:b0:dd:52:d0:00:b3:99:33:
16:5d:32:d6:02:17:ed:ea:6c:33:18:c0:a0:15:24:c7:92:72:
f5:ab:c0:5e:3b:17:33:d2:09:71:0f:b7:e3:fb:3a:8c:31:41:
80:a9:3b:1f:dd:43:91:e1:66:14:95:70:f4:8c:49:35:34:b9:
b3:c4:1d:81:0d:6b:4d:45:63:d4:1d:8c:0f:3e:65:38:a7:41:
dc:f4:a0:e7:36:27:59:cd:f3:a5:67:d0:dc:89:06:f8:6d:16:
e6:b0:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-fra.rpki-client.org