Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa
File: 1D96F944AF9111E9AF7E654DF8AEA228.roa (raw, json)
Hash identifier: Ta8HFpMb+oU6YGanGa9ushJrmQxN8S43hgdfEbdN9RU=
Subject key identifier: 22:01:C9:1D:CF:1E:5B:51:11:2D:3F:00:AE:20:43:61:DD:3C:D9:C5
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 49
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa
Signing time: Fri 26 Jul 2019 10:35:42 +0000
ROA not before: Fri 26 Jul 2019 10:35:36 +0000
ROA not after: Wed 27 Jul 2022 10:35:36 +0000
asID: 36916
IP address blocks: 41.180.120.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 26 10:35:36 2019 GMT
Not After : Jul 27 10:35:36 2022 GMT
Subject: CN=5d3ad77d-3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:56:84:0c:0c:ba:39:20:18:81:18:c9:c3:
57:43:1b:01:b0:0c:f1:47:8f:a1:3d:68:bd:51:96:
0a:e6:df:53:09:93:64:f3:15:6d:54:01:bc:89:5d:
83:b8:0b:b5:67:1d:c2:1e:6d:6c:a3:dd:24:c4:b6:
39:27:90:24:22:cb:52:1c:65:71:d5:bd:e6:20:16:
b4:eb:6b:27:87:10:0c:14:c1:b9:14:c3:98:3c:f0:
77:3c:71:be:ae:b9:ad:bf:6b:dd:db:81:65:f9:33:
b9:69:68:29:ef:52:52:c1:a2:62:78:66:36:50:03:
78:e0:75:b2:e7:3a:9b:b8:46:6b:1b:1d:95:8e:53:
68:f2:6c:f8:f2:5a:6c:02:c6:73:7f:b5:b2:33:ef:
55:8f:b5:28:33:28:8a:bf:7a:3a:e5:b3:b1:03:48:
61:85:22:94:e0:4d:17:34:64:8a:91:f7:77:fc:4b:
0b:f5:a1:64:a2:42:e0:03:40:a3:e4:63:07:66:42:
5e:13:18:c5:1a:3e:d6:ba:1c:42:f4:d2:eb:e6:45:
c4:62:63:37:d4:8b:d0:53:a9:30:a3:7c:ac:7f:11:
bc:98:0f:d4:32:09:d9:b3:90:dc:89:aa:21:4b:2f:
b8:ef:ec:b4:82:2c:34:ce:dd:e5:bc:f3:81:63:32:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:C9:1D:CF:1E:5B:51:11:2D:3F:00:AE:20:43:61:DD:3C:D9:C5
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/1D96F944AF9111E9AF7E654DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.120.0/21
Signature Algorithm: sha256WithRSAEncryption
45:ad:65:64:23:d4:5d:42:42:1d:34:a1:20:d6:36:ff:76:55:
00:9b:80:b6:7b:f5:16:8f:98:57:42:62:a1:ca:9f:5f:f0:dc:
a7:e6:bd:6c:a6:36:dc:52:bd:da:bf:8a:3c:ee:57:26:cf:ae:
a1:5c:f4:af:1b:2f:17:e6:6b:91:a8:9a:81:a0:13:ea:5e:4a:
38:7f:9f:de:e9:e6:fd:bc:4f:cf:fb:b1:30:ca:15:d2:aa:29:
73:98:0f:f7:5e:86:74:f0:7f:b7:3b:d5:39:82:46:28:24:78:
c9:a8:8c:d4:d7:09:6a:27:f1:98:ba:20:e7:04:8c:61:7d:17:
3a:cc:57:65:e2:5c:49:df:b7:fe:d8:1d:af:04:6e:66:6c:f2:
1c:31:ff:8c:0c:27:77:5e:3b:66:15:0e:70:f1:ee:81:f5:55:
ad:d0:2c:b2:6c:8a:f6:1b:ba:0d:f8:b6:73:98:cf:ce:3d:b7:
04:0a:2a:0a:83:11:e4:11:a8:56:73:71:3c:c1:40:43:2b:e8:
07:d1:04:f9:96:b1:ba:5d:45:3d:4e:f6:06:f4:3c:05:9a:20:
40:0b:66:3c:a1:15:33:c0:38:c9:b6:02:53:82:04:f7:aa:8d:
67:5c:1d:96:d2:e3:d1:24:fa:ea:fa:9a:f5:e7:0c:79:7a:62:
4a:60:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org