Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/2E3AD79635C911ECB410202CD8A014CE.roa
File: 2E3AD79635C911ECB410202CD8A014CE.roa (raw, json)
Hash identifier: 6+dZYlPDvZ5Gi5kcZRvNO70sh2MVNGV/3D3G7RwaDso=
Subject key identifier: 7B:05:53:14:F4:BA:A4:FE:AC:FF:FD:B4:A1:1D:5D:F5:19:71:FB:B2
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 1D
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/2E3AD79635C911ECB410202CD8A014CE.roa
Signing time: Mon 25 Oct 2021 19:24:32 +0000
ROA not before: Mon 25 Oct 2021 19:24:29 +0000
ROA not after: Wed 24 Jan 2024 19:24:29 +0000
asID: 26506
IP address blocks: 41.63.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Oct 25 19:24:29 2021 GMT
Not After : Jan 24 19:24:29 2024 GMT
Subject: CN=61770470-f5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:17:95:88:f4:21:1a:16:02:38:ae:1a:28:
78:b2:b3:3a:d6:f7:8e:4f:a2:92:26:c0:a1:a5:96:
a5:d6:a2:ad:b2:31:bc:02:66:72:9f:9f:e2:0e:13:
d1:05:dc:9b:77:18:e3:f9:3e:1c:ba:72:6b:15:cd:
b9:9c:ab:31:68:0f:0f:dc:3d:9d:25:10:81:8e:da:
c2:ad:01:47:1b:67:88:6b:94:a4:76:8e:f0:e7:06:
d9:56:25:49:63:3b:84:d4:95:0b:1a:7b:67:d5:41:
8a:09:45:71:af:d8:c0:6a:69:3a:48:3c:c0:55:a0:
f4:eb:2e:b8:3b:c5:61:b2:90:d6:94:28:4c:1f:d3:
4a:ff:60:ae:78:c1:0f:c1:fd:27:ca:a5:79:9c:5c:
0b:76:cb:eb:8a:69:d1:31:87:c1:5f:43:69:f9:8f:
75:9a:68:d4:59:bf:cf:2a:5b:ea:52:78:5e:03:3c:
3f:06:38:c3:77:58:47:21:37:32:0f:89:ec:a0:d4:
78:08:73:00:30:6f:42:bc:3d:9b:0b:db:68:e4:a3:
8c:8d:f0:48:64:b5:c0:2d:8b:e7:d2:a6:75:b0:88:
e8:85:3f:98:f1:02:0e:5c:14:e1:bb:6a:6d:a9:28:
b7:0b:f7:af:47:a0:01:c3:7d:a2:86:1b:3a:4c:06:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:53:14:F4:BA:A4:FE:AC:FF:FD:B4:A1:1D:5D:F5:19:71:FB:B2
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/2E3AD79635C911ECB410202CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:24:78:55:cb:6a:65:47:42:45:07:1c:dc:65:b5:53:88:f5:
82:50:ac:c9:c1:e1:0f:9f:3d:7b:f7:1e:3f:ff:43:21:3e:b6:
dc:c0:20:ed:fd:18:3c:f2:22:c2:52:c7:1b:c0:d5:de:17:e2:
0c:e7:64:a4:02:3e:75:59:33:66:28:c3:5d:bb:1e:09:fa:0d:
bf:47:4a:ad:b9:25:09:ed:26:bc:2a:04:72:0a:02:52:5f:4f:
1c:d3:4b:ce:c8:42:00:12:22:80:87:1e:2a:3e:1d:58:99:ef:
e9:ba:4c:b2:f6:31:24:42:6d:28:72:04:a6:13:56:63:3e:57:
4d:7a:77:01:87:20:95:16:8c:60:e8:07:e8:aa:cc:8a:e6:7a:
8d:94:e2:63:2f:c1:60:87:03:85:c3:49:d1:ad:4c:97:0c:28:
a3:b7:47:e7:8e:78:2f:91:67:3f:be:a1:ec:30:b3:f7:80:6e:
53:ae:68:88:62:8a:cb:59:68:c0:32:6d:9d:d3:7a:66:74:42:
a7:af:78:b6:a6:2d:3d:cd:5f:3e:0a:4e:0c:3b:b8:86:14:3e:
70:4d:78:6a:dd:ce:47:d3:6d:de:e1:15:ed:f9:a5:24:c0:b2:
a3:d9:16:74:9f:40:e3:5c:e2:d5:7e:b8:91:ec:b5:b9:f6:39:
1e:14:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 03:31:24 2024 by rpki-client on console-ams.rpki-client.org