Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/0EA0E28635C911ECA106D12BD8A014CE.roa
File: 0EA0E28635C911ECA106D12BD8A014CE.roa (raw, json)
Hash identifier: 7JQEnRQRo+M1k1UEs24wDXicxZ3ytpUp5GdJ99sGDU0=
Subject key identifier: AD:30:CB:DB:2E:C0:17:82:9D:C3:04:16:49:92:A2:55:42:09:69:15
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 1B
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/0EA0E28635C911ECA106D12BD8A014CE.roa
Signing time: Mon 25 Oct 2021 19:23:39 +0000
ROA not before: Mon 25 Oct 2021 19:23:35 +0000
ROA not after: Wed 24 Jan 2024 19:23:35 +0000
asID: 55429
IP address blocks: 41.63.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Oct 25 19:23:35 2021 GMT
Not After : Jan 24 19:23:35 2024 GMT
Subject: CN=6177043b-5fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:ff:45:e2:93:30:1c:30:a3:1c:91:dd:dc:
bf:b4:07:87:51:71:53:cd:d7:37:24:cf:ec:77:68:
fe:df:c4:82:6f:b5:f3:b1:b8:70:bd:f3:09:04:1f:
08:dc:d3:f6:bb:de:02:64:45:dd:3b:ef:00:ae:78:
2c:a2:0b:7f:47:af:bd:06:ac:c2:ee:b2:62:07:ff:
6c:06:9f:e2:51:33:31:a7:ae:b4:c8:91:50:8e:49:
ac:9f:2c:2e:6e:c7:85:ea:7b:77:d3:0a:fd:46:14:
6c:08:61:81:5f:a3:db:4d:35:9b:1c:11:38:cf:60:
a9:d6:7a:b6:72:9e:f5:f7:bd:55:9e:bd:9e:87:fe:
6a:03:3b:a0:ae:b2:84:07:fa:71:f6:dd:ee:8d:1e:
6d:14:4d:d6:4d:38:25:9d:83:a4:52:e1:3b:43:39:
55:19:6f:1a:d5:50:b6:c2:d2:5b:da:14:e3:e9:97:
8e:ea:c1:25:ee:67:49:41:9a:ac:fc:43:66:1d:0a:
1b:e8:e0:79:26:a3:c9:a2:26:85:bb:62:c5:2c:2a:
d5:01:03:bf:6c:9a:e9:11:8c:ac:29:ae:58:2e:cb:
69:e1:e1:a0:24:26:eb:d5:ed:97:24:8a:a3:e1:81:
66:8e:da:61:67:91:87:9f:34:e0:4f:d9:7e:d0:ea:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:CB:DB:2E:C0:17:82:9D:C3:04:16:49:92:A2:55:42:09:69:15
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/0EA0E28635C911ECA106D12BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:94:00:14:e4:87:3f:8a:8a:5e:09:1e:77:ea:ba:17:86:54:
37:42:e9:00:02:05:c7:08:bc:27:2f:89:b1:ad:e7:c7:53:98:
7a:fa:56:be:c5:a6:b8:a0:80:c0:b7:d5:86:c4:53:a1:1a:ef:
62:b3:38:1c:00:5f:bc:27:ab:f3:10:0c:b4:6b:fb:8e:f5:e9:
67:44:bc:d9:b5:ed:46:25:de:6b:95:d8:38:8b:77:18:94:28:
5a:61:e7:51:9f:4a:f8:d8:86:da:8c:f0:ee:35:f8:35:d4:51:
62:b6:0f:84:93:b6:7d:de:e2:21:c2:a2:51:ed:73:21:04:6d:
4d:d3:a1:91:1f:05:5a:6e:08:b9:c2:ac:6f:2a:12:8d:24:7b:
15:f2:4d:20:61:59:d0:db:f8:97:f4:49:69:23:0a:13:fb:12:
a6:5c:57:2d:33:5c:fd:f9:76:90:35:9c:6a:aa:88:76:db:ef:
0e:46:7d:9c:67:14:e9:eb:19:e2:28:05:58:24:11:bb:c4:dc:
c0:17:ea:04:4a:19:1b:a9:75:e8:8c:c4:82:a9:0b:ce:7e:3e:
94:5b:c9:ac:c1:f7:d7:dc:b7:7e:63:74:af:c7:53:37:98:16:
14:30:3f:84:2f:88:2c:3d:0a:27:d6:3a:fb:c9:83:7f:d2:6e:
29:76:c6:58
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYz
NjE4NUFGMTEwLwYDVQQFEyhFRjg3OTg5ODlFNEI4RkIzNTk0NjU3NEY3QkM3RjA4
RTJDRjdGRTRCMB4XDTIxMTAyNTE5MjMzNVoXDTI0MDEyNDE5MjMzNVowGDEWMBQG
A1UEAwwNNjE3NzA0M2ItNWZiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4b/0XikzAcMKMckd3cv7QHh1FxU83XNyTP7Hdo/t/Egm+187G4cL3zCQQf
CNzT9rveAmRF3TvvAK54LKILf0evvQaswu6yYgf/bAaf4lEzMaeutMiRUI5JrJ8s
Lm7Hhep7d9MK/UYUbAhhgV+j2001mxwROM9gqdZ6tnKe9fe9VZ69nof+agM7oK6y
hAf6cfbd7o0ebRRN1k04JZ2DpFLhO0M5VRlvGtVQtsLSW9oU4+mXjurBJe5nSUGa
rPxDZh0KG+jgeSajyaImhbtixSwq1QEDv2ya6RGMrCmuWC7LaeHhoCQm69XtlySK
o+GBZo7aYWeRh5804E/ZftDqM3cCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBStMMvb
LsAXgp3DBBZJkqJVQglpFTAfBgNVHSMEGDAWgBTvh5iYnkuPs1lGV097x/COLPf+
SzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzYxODUvNkVGRDc4QjYyNzA5MTFFQ0FGODBEQzdCRDhBMDE0Q0UvNzRlWW1K
NUxqN05aUmxkUGU4ZndqaXozX2tzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNzRlWW1KNUxqN05aUmxkUGU4ZndqaXozX2tzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzYxODUvNkVGRDc4QjYyNzA5MTFFQ0FGODBEQzdCRDhB
MDE0Q0UvMEVBMEUyODYzNUM5MTFFQ0ExMDZEMTJCRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBik/QDANBgkqhkiG9w0BAQsF
AAOCAQEAGZQAFOSHP4qKXgked+q6F4ZUN0LpAAIFxwi8Jy+Jsa3nx1OYevpWvsWm
uKCAwLfVhsRToRrvYrM4HABfvCer8xAMtGv7jvXpZ0S82bXtRiXea5XYOIt3GJQo
WmHnUZ9K+NiG2ozw7jX4NdRRYrYPhJO2fd7iIcKiUe1zIQRtTdOhkR8FWm4IucKs
byoSjSR7FfJNIGFZ0Nv4l/RJaSMKE/sSplxXLTNc/fl2kDWcaqqIdtvvDkZ9nGcU
6esZ4igFWCQRu8TcwBfqBEoZG6l16IzEgqkLzn4+lFvJrMH319y3fmN0r8dTN5gW
FDA/hC+ILD0KJ9Y6+8mDf9JuKXbGWA==
-----END CERTIFICATE-----
Generated at Thu Jan 25 03:31:24 2024 by rpki-client on console-ams.rpki-client.org