Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3447160EB1DC11E9978D5A49F8AEA228.roa
File: 3447160EB1DC11E9978D5A49F8AEA228.roa (raw, json)
Hash identifier: fZXsIsSu3TBBU29JInyXiAGnmFmoZSDmNGLObQtNw4g=
Subject key identifier: 7F:B3:A8:E5:F0:D4:74:13:5C:D4:35:04:37:D7:E2:21:7B:1D:B4:8D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 6E
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3447160EB1DC11E9978D5A49F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:38:14 +0000
ROA not before: Mon 29 Jul 2019 08:38:10 +0000
ROA not after: Wed 27 Jul 2022 08:38:10 +0000
asID: 36916
IP address blocks: 41.221.224.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:38:10 2019 GMT
Not After : Jul 27 08:38:10 2022 GMT
Subject: CN=5d3eb076-574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7b:c6:52:c7:04:7a:00:86:58:b3:1b:96:98:
54:47:22:6b:84:86:f9:4b:f0:30:c4:62:98:7e:e2:
68:fa:08:c1:e1:7f:99:6d:ff:9c:86:fb:47:a1:e1:
0a:61:c6:75:4e:66:2e:15:37:3f:86:32:f5:4c:d4:
51:26:17:3f:d2:b4:fb:d2:58:9c:a5:5b:3b:1e:7e:
24:1e:d2:09:c5:12:ca:c1:cb:52:6f:f4:18:f0:54:
ec:0b:93:bb:35:f6:13:61:a4:d4:22:16:58:90:44:
55:80:03:aa:31:f5:e7:db:e5:94:4c:1b:e0:68:7a:
96:cf:07:99:93:e7:5e:2d:39:ef:59:46:02:d7:c0:
5e:15:2c:f4:26:5e:c1:90:b9:35:68:bd:8a:ec:d7:
15:5e:82:f7:80:24:a9:40:4c:50:99:9d:49:12:24:
47:b6:f2:44:c5:7b:53:3c:f3:11:97:73:82:97:95:
ca:63:62:da:b8:8d:d5:d7:b6:df:5e:2e:03:7a:5c:
39:c6:8f:b4:5d:b3:16:76:de:11:2d:f3:1f:bb:24:
6f:89:30:c7:7c:9d:55:58:0b:df:32:30:d2:af:87:
29:bd:d9:14:9b:fa:d5:6a:1b:e8:05:b5:04:c9:a9:
e2:07:b6:fe:ec:18:cc:cf:b0:9c:ab:18:b4:97:17:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:A8:E5:F0:D4:74:13:5C:D4:35:04:37:D7:E2:21:7B:1D:B4:8D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/3447160EB1DC11E9978D5A49F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.224.0/23
Signature Algorithm: sha256WithRSAEncryption
28:66:0c:73:35:aa:0a:be:ea:2f:c8:65:8d:bb:29:3e:53:dd:
fd:91:7d:1e:f8:90:fc:2b:94:70:78:2b:42:18:2f:51:2f:26:
b0:38:96:ea:30:d9:d0:9d:d7:2b:78:5c:43:ee:54:7a:23:97:
b2:b9:fd:c1:27:42:a8:34:31:b7:06:53:4a:a1:2d:9f:da:e0:
fa:40:a0:a3:0a:29:7a:47:66:1a:66:4f:e1:c6:24:ba:9b:e1:
77:b4:c2:7f:44:c8:45:91:03:81:37:e2:6f:98:b0:64:5b:78:
44:27:c9:5f:6f:ca:c2:b6:03:55:a7:fa:97:7d:e3:75:31:f7:
2b:1e:94:c5:b2:8f:df:6a:41:85:64:19:90:a0:78:98:78:c1:
5c:38:12:ea:82:72:39:ff:4c:df:33:c7:29:73:6f:36:9c:30:
a0:ea:32:42:9f:44:d7:6e:2e:b0:9d:de:fb:dc:5d:96:89:da:
81:7f:24:e3:a1:c5:52:e6:70:7e:ef:f1:b3:a2:49:bb:5c:04:
62:9c:e3:d7:ba:a3:20:6e:c7:87:ac:7c:3c:12:ce:b5:c5:54:
3e:7e:d2:af:88:bb:40:47:d0:f1:6c:71:15:20:9b:f6:a2:9b:
ca:34:0a:b4:5d:1c:96:ad:49:8c:e0:96:6f:e6:1d:3c:80:6b:
4d:ab:4e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org