Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/BB498DA8615E11EFA18E4ABD762E951A.roa
File: BB498DA8615E11EFA18E4ABD762E951A.roa (raw, json)
Hash identifier: kubsQ2qWLzZqPgzCLZbycqlgbhsglDciR0SE+to6k3A=
Subject key identifier: F7:7A:79:22:85:CE:86:46:4A:EC:DF:66:9D:BC:66:71:C2:2D:34:EA
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 0586
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/BB498DA8615E11EFA18E4ABD762E951A.roa
Signing time: Fri 23 Aug 2024 14:48:17 +0000
ROA not before: Fri 23 Aug 2024 14:48:14 +0000
ROA not after: Fri 30 Aug 2024 14:48:14 +0000
asID: 37619
IP address blocks: 41.197.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Aug 23 14:48:14 2024 GMT
Not After : Aug 30 14:48:14 2024 GMT
Subject: CN=66c8a131-b51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:77:84:dc:5f:27:c3:a5:5a:93:2a:d3:35:
41:0f:9c:dc:e2:23:08:ac:e8:dd:8d:63:7e:71:1a:
59:6f:a0:b5:f5:68:2a:e8:0b:be:16:08:9d:b6:62:
eb:f2:ae:32:83:c8:b0:a9:b1:dc:06:c3:0f:48:b1:
dc:1a:f7:91:d3:31:00:22:10:2b:18:84:46:ea:d0:
2e:aa:90:48:70:a9:ee:9f:83:27:bc:7c:a6:0c:b5:
77:f6:8c:8e:de:9a:be:6c:29:02:63:9d:8e:dd:65:
18:e2:7e:98:2e:d6:09:3f:5c:9c:b6:be:7b:ae:38:
89:07:4d:fc:ab:e7:49:db:31:3f:e8:60:4a:c0:13:
35:50:1f:2b:f6:1b:e1:50:e4:a3:f0:64:36:d5:8e:
d9:b1:b8:67:16:98:18:ae:86:26:ee:3f:2a:54:1c:
c9:0a:a4:6c:e3:75:2c:c9:0a:9c:87:04:70:b2:23:
11:48:8e:9c:bd:a9:44:e0:42:1e:6d:a1:bd:35:3d:
5c:f4:03:5c:b5:50:c7:fd:91:e7:83:6b:7d:ee:1a:
b9:fa:24:4b:0e:e2:e6:9a:69:f9:10:b8:19:17:18:
5e:d4:e0:81:99:43:b6:5d:26:2e:a9:46:08:ce:e1:
e0:68:23:ca:a0:ef:24:09:0d:b6:c7:56:90:da:60:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:79:22:85:CE:86:46:4A:EC:DF:66:9D:BC:66:71:C2:2D:34:EA
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/BB498DA8615E11EFA18E4ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.197.240.0/22
Signature Algorithm: sha256WithRSAEncryption
60:63:5a:d1:be:31:2e:83:ea:2c:a5:dd:6e:3d:aa:50:4d:2a:
56:3e:c4:11:c4:85:d4:03:66:23:76:c5:27:bf:63:6f:89:53:
20:f5:38:9f:2c:eb:02:61:0b:27:c2:0c:70:23:6a:7f:00:5e:
51:64:25:eb:13:df:54:5e:1b:c1:93:73:bb:1e:fb:67:8a:35:
d8:ad:dc:9b:bc:3f:62:25:55:d8:81:af:dc:8a:9c:e1:71:ac:
6f:fe:e0:0e:e6:3a:bb:6f:ee:fa:d2:27:a1:de:0c:28:cf:2a:
86:cd:f9:5e:1d:37:85:68:93:4d:8f:8d:95:d3:62:5b:00:95:
db:2e:00:ee:6b:80:09:55:df:da:09:87:dd:48:a9:62:c1:c3:
68:34:33:0a:c9:42:4f:93:4c:99:81:64:13:47:86:72:ab:02:
dd:bb:f6:b0:6b:bb:a7:e0:31:2c:66:4d:c9:52:0b:3d:8f:d7:
8e:4c:31:a7:f5:ac:57:4f:61:8d:09:56:3c:b0:0c:88:83:35:
4c:a6:8a:c2:74:4e:2b:dc:1a:59:ec:da:8a:fb:e9:c9:99:a5:
f0:03:6f:0e:33:55:4a:9b:3e:98:30:d7:60:d2:76:7f:07:ab:
f8:91:60:87:1d:9e:06:38:44:0b:5f:6a:c3:c4:ed:47:89:c2:
12:30:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:56 2024 by rpki-client on console-ams.rpki-client.org