Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/EEF7B83835C811ECA23DA72BD8A014CE.roa
File: EEF7B83835C811ECA23DA72BD8A014CE.roa (raw, json)
Hash identifier: xUwF6Gmu0ukfeP1WDV/eHbTbBFNdndoVTCCU2KRbi50=
Subject key identifier: FB:71:F6:E0:5A:55:72:BB:2F:FE:7A:EE:09:9D:BD:44:7E:15:EF:98
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 19
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/EEF7B83835C811ECA23DA72BD8A014CE.roa
Signing time: Mon 25 Oct 2021 19:22:46 +0000
ROA not before: Mon 25 Oct 2021 19:22:42 +0000
ROA not after: Wed 24 Jan 2024 19:22:42 +0000
asID: 37277
IP address blocks: 41.63.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF
Validity
Not Before: Oct 25 19:22:42 2021 GMT
Not After : Jan 24 19:22:42 2024 GMT
Subject: CN=61770406-8eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:4d:9e:b3:17:49:18:b7:14:e0:e8:82:28:
2b:95:38:9d:1e:6c:ed:19:2f:c1:19:e7:90:8f:22:
fa:3f:f8:4d:4b:c5:f3:c1:54:63:75:83:08:ef:b0:
e5:90:40:75:cd:08:6e:a3:c0:8f:b0:5e:bb:14:77:
38:c0:54:ee:d9:61:8e:40:d1:56:8d:dc:60:b0:d2:
97:14:31:8b:84:10:66:ae:b6:4a:43:3d:63:83:ad:
ad:0e:41:dc:89:70:6a:06:ec:d8:ec:a4:22:2c:53:
ea:85:29:c3:0b:5d:fa:39:ca:46:f5:77:0c:59:59:
8c:d4:aa:30:21:55:a6:e2:dd:02:b9:02:db:4e:7f:
9d:26:34:d1:3d:60:01:61:d5:49:a8:14:d1:1f:65:
f1:a1:1b:8d:97:ef:44:d1:fc:f4:e8:bc:77:72:d1:
0a:22:f3:2a:f1:07:f9:e7:89:d2:c6:96:53:14:4b:
34:58:e8:aa:8e:76:f8:27:5c:bf:26:61:76:ac:b3:
44:6d:e1:b9:3c:df:21:cf:9f:b7:c2:d0:47:d9:3f:
9c:1b:4b:8e:0b:4d:89:e9:19:08:dd:f5:a9:d6:33:
bd:6f:ba:ca:81:fb:de:6d:16:fa:e4:37:c5:db:b6:
34:96:07:43:18:bd:aa:de:16:64:dc:0c:80:06:c4:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:71:F6:E0:5A:55:72:BB:2F:FE:7A:EE:09:9D:BD:44:7E:15:EF:98
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/EEF7B83835C811ECA23DA72BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.64.0/18
Signature Algorithm: sha256WithRSAEncryption
65:c0:8a:fa:9c:c2:47:db:f9:4b:a5:03:1f:67:6b:22:27:00:
11:e0:81:da:99:05:52:9c:49:6d:21:3d:f8:98:bb:e5:c8:3f:
4c:7e:db:dc:1b:52:fa:d8:ce:00:35:b6:0a:09:0a:41:ba:12:
1c:b4:6b:07:7c:dd:73:c8:1e:99:24:a9:84:81:b3:15:2f:b5:
26:35:fe:02:e5:a0:1a:49:c3:0d:d8:05:68:0a:32:32:65:d4:
54:f9:6b:f0:7d:b6:6e:db:65:32:90:31:3b:c1:4f:2b:78:ef:
0c:b9:1f:9d:a5:a7:99:00:e8:99:9d:d9:ed:21:41:9a:b4:4d:
b9:68:a7:1e:4b:95:0d:f0:1c:35:5a:99:ea:c4:9f:04:ec:29:
63:5a:a4:ac:e3:ae:c9:33:ec:21:42:81:9b:ec:b4:ec:73:4b:
b2:18:b9:16:01:50:62:7e:fe:d0:45:f3:58:a2:2c:8c:18:d5:
04:c3:29:89:28:21:1e:f6:40:6d:10:b9:be:05:d4:97:4c:ab:
f0:8c:ac:2c:9e:17:04:33:29:f1:bf:27:a2:0a:9c:d5:9d:e3:
77:53:41:6d:a8:12:d3:7b:c5:02:b8:8b:e6:ea:93:16:c0:a7:
00:53:fc:4c:ca:1f:69:c5:1e:e1:c0:58:a0:74:a2:e3:d1:d3:
01:f4:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:05 2025 by rpki-client