Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa
File: 387C4C0EAF8D11E9BEA6984AF8AEA228.roa (raw, json)
Hash identifier: P5o4HQEC/q/whbnaxinnx1yfIL27jrUaxzmUpPQJw7w=
Subject key identifier: F7:C2:15:1E:C9:B2:01:A1:6F:30:FE:7E:52:18:37:8C:51:9B:0D:34
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 47
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa
Signing time: Fri 26 Jul 2019 10:07:49 +0000
ROA not before: Fri 26 Jul 2019 10:07:43 +0000
ROA not after: Wed 27 Jul 2022 10:07:43 +0000
asID: 36916
IP address blocks: 41.180.112.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 26 10:07:43 2019 GMT
Not After : Jul 27 10:07:43 2022 GMT
Subject: CN=5d3ad0f4-f5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:1c:45:8d:f6:4c:af:05:ab:f4:f0:85:67:
30:ee:d2:bc:bc:e3:86:c7:5e:89:2d:94:77:06:c8:
2d:cf:d2:2f:49:c1:a7:c0:b9:8f:77:76:95:7d:74:
49:39:f0:58:1f:3d:a9:ed:18:09:c5:e2:a9:95:d2:
e8:5a:fd:3a:fd:21:15:6b:56:b5:fc:52:a6:6a:a5:
20:4d:60:d6:88:9e:88:52:c7:c3:0b:ff:90:01:d3:
8e:b1:c4:36:84:df:fd:fc:0b:ad:34:b6:b4:60:11:
d3:7d:bc:45:3c:bb:7b:f4:a7:ab:87:8d:37:94:bb:
08:d6:94:58:50:cd:bb:52:99:bd:e9:19:ac:0d:5d:
94:99:34:14:1b:01:65:2a:9d:68:01:b0:d0:cc:b4:
cd:f7:f4:ba:68:29:f8:4e:f8:20:3b:13:2e:84:ce:
76:7b:7f:7d:43:57:0b:28:42:a2:56:44:a8:e2:62:
23:87:1e:18:4e:dc:62:b0:2a:13:b5:c6:2f:ae:de:
0e:52:b0:98:54:bd:fd:b4:14:92:7d:2a:bb:eb:68:
bd:5c:a8:aa:3d:e4:70:0b:2e:e1:5c:5c:dc:f4:46:
85:32:40:8d:8a:d5:ad:c2:f5:68:a2:37:34:16:f4:
a6:59:cc:b3:30:20:10:fa:49:5f:ad:ec:3c:15:93:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C2:15:1E:C9:B2:01:A1:6F:30:FE:7E:52:18:37:8C:51:9B:0D:34
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/387C4C0EAF8D11E9BEA6984AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:e6:11:5d:92:c9:0e:28:33:dd:39:00:22:99:4e:c4:33:b1:
f2:5d:d8:60:61:44:fd:87:53:7a:be:f2:60:a7:f0:d9:2b:dd:
75:84:4c:33:54:84:ef:22:16:84:eb:f2:4d:28:09:27:53:c2:
01:fc:c4:de:52:a9:49:ac:12:6c:ff:8c:e1:20:68:52:06:4c:
5f:ae:36:11:32:34:8a:bb:27:e7:bd:d1:a8:ed:d8:04:38:77:
40:65:66:9d:a4:f2:d4:ae:e1:f5:31:9f:fa:6c:06:b6:48:c4:
a5:63:c7:a6:a1:bc:9a:64:63:ae:d0:49:e2:0b:a9:ac:47:be:
e5:37:c9:ad:f0:65:92:b3:ec:5e:04:21:c6:f3:45:c4:89:34:
dc:55:1b:ae:df:90:0c:fd:5b:2c:fb:c6:a4:73:d5:7b:61:95:
76:24:c5:58:54:c7:f9:3c:d4:d5:65:13:6f:93:1d:1e:6e:9c:
2e:b0:7c:05:c5:b6:e5:69:51:99:5c:74:bc:e6:09:ef:b8:fa:
2a:79:73:4d:82:f7:0f:0d:14:95:40:f3:72:f1:7b:cb:ed:db:
df:72:47:36:33:c1:08:7d:11:e5:7e:30:33:f3:99:c6:d1:1f:
ba:28:5c:89:6a:0f:a3:59:41:3f:dd:17:2f:20:6f:de:bf:95:
46:a4:d3:10
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBRzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OUQ2QkFGMTEwLwYDVQQFEyg5NTk3MzNERjU5RTg2RUE3QzIzQjJGQjM3QTZFODQ2
REJCMTg4MjdCMB4XDTE5MDcyNjEwMDc0M1oXDTIyMDcyNzEwMDc0M1owGDEWMBQG
A1UEAxMNNWQzYWQwZjQtZjVmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNiHEWN9kyvBav08IVnMO7SvLzjhsdeiS2UdwbILc/SL0nBp8C5j3d2lX10
STnwWB89qe0YCcXiqZXS6Fr9Ov0hFWtWtfxSpmqlIE1g1oieiFLHwwv/kAHTjrHE
NoTf/fwLrTS2tGAR0328RTy7e/Snq4eNN5S7CNaUWFDNu1KZvekZrA1dlJk0FBsB
ZSqdaAGw0My0zff0umgp+E74IDsTLoTOdnt/fUNXCyhColZEqOJiI4ceGE7cYrAq
E7XGL67eDlKwmFS9/bQUkn0qu+tovVyoqj3kcAsu4Vxc3PRGhTJAjYrVrcL1aKI3
NBb0plnMszAgEPpJX63sPBWTSekCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBT3whUe
ybIBoW8w/n5SGDeMUZsNNDAfBgNVHSMEGDAWgBSVlzPfWehup8I7L7N6boRtuxiC
ezAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhBRUEyMjgvbFpjejMx
bm9icWZDT3ktemVtNkViYnNZZ25zLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFpjejMxbm9icWZDT3ktemVtNkViYnNZZ25zLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhB
RUEyMjgvMzg3QzRDMEVBRjhEMTFFOUJFQTY5ODRBRjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKbRwMA0GCSqGSIb3DQEBCwUAA4IBAQCK
5hFdkskOKDPdOQAimU7EM7HyXdhgYUT9h1N6vvJgp/DZK911hEwzVITvIhaE6/JN
KAknU8IB/MTeUqlJrBJs/4zhIGhSBkxfrjYRMjSKuyfnvdGo7dgEOHdAZWadpPLU
ruH1MZ/6bAa2SMSlY8emobyaZGOu0EniC6msR77lN8mt8GWSs+xeBCHG80XEiTTc
VRuu35AM/Vss+8akc9V7YZV2JMVYVMf5PNTVZRNvkx0ebpwusHwFxbblaVGZXHS8
5gnvuPoqeXNNgvcPDRSVQPNy8XvL7dvfckc2M8EIfRHlfjAz85nG0R+6KFyJag+j
WUE/3RcvIG/ev5VGpNMQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org