Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa
File: 5F8B1A14B1DB11E9BC0B8848F8AEA228.roa (raw, json)
Hash identifier: O1EHMQGj0k2VdtJmlZnPhuAg2wdSklnl5slYskzDtAM=
Subject key identifier: 34:49:15:B3:9F:99:36:59:FF:2E:CB:4C:C8:2A:0E:B3:C5:8D:84:76
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 64
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:32:17 +0000
ROA not before: Mon 29 Jul 2019 08:32:12 +0000
ROA not after: Wed 27 Jul 2022 08:32:12 +0000
asID: 36916
IP address blocks: 41.180.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:32:12 2019 GMT
Not After : Jul 27 08:32:12 2022 GMT
Subject: CN=5d3eaf11-38f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:91:37:e2:7f:18:9b:ba:8e:5c:07:f4:ea:
90:a5:79:90:e1:50:4f:f3:37:93:78:a0:7a:be:4b:
67:3f:dc:79:af:55:bb:ff:b5:6c:4f:59:3f:32:08:
78:cd:2c:44:76:ce:ff:7d:50:be:65:7d:ec:91:e1:
6c:97:4f:2f:60:d1:61:04:3c:08:8a:a6:62:a8:38:
81:f0:55:20:d4:02:a6:3f:98:e6:3e:5e:bf:9f:bf:
44:60:13:fb:ff:b5:e4:0e:5b:cc:b3:e3:b3:2c:a7:
80:cf:42:dc:a6:2b:25:7f:6e:f3:b7:21:20:57:ed:
f2:e1:51:b4:46:4a:4c:5d:8b:8a:4f:e0:b2:6c:10:
4b:26:80:28:15:e2:ee:27:f1:ad:ce:c6:05:66:e2:
03:82:ba:cc:8e:b9:ea:39:96:aa:ac:f3:96:0a:db:
78:2c:39:5c:ac:5b:81:55:c0:df:94:01:50:d1:56:
9d:4b:a3:0a:cf:62:89:10:63:6a:25:92:9a:a1:bf:
9d:53:dd:fa:1e:93:1b:5a:42:e0:e3:95:18:cf:88:
cd:f6:fc:98:ae:d5:26:36:36:36:2f:6e:f7:0e:b9:
8c:d3:6c:f9:04:cc:b4:c0:29:d0:fe:fc:da:1a:62:
6f:63:e8:72:e2:bf:6a:e4:87:d3:2e:9c:27:fe:f0:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:15:B3:9F:99:36:59:FF:2E:CB:4C:C8:2A:0E:B3:C5:8D:84:76
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/5F8B1A14B1DB11E9BC0B8848F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:d5:ae:8f:07:4b:4f:d3:18:1c:4a:cc:72:21:6a:af:01:43:
bd:29:af:2f:96:05:97:67:51:98:d8:c3:f8:ca:dc:e7:d7:53:
3d:53:17:09:b2:77:71:f0:be:9d:8e:56:2b:19:b1:b2:5c:05:
a9:5b:d2:11:06:04:20:e2:f8:94:15:31:64:e2:1a:f2:72:78:
4f:9e:71:28:5d:ae:63:a2:2e:26:13:63:54:e2:68:f5:aa:d5:
b2:18:ed:17:c6:fa:73:f5:9c:07:d4:89:3a:3b:96:7d:c8:eb:
e9:b5:f6:53:ec:f2:06:6c:3f:4d:3a:ae:69:1d:74:5e:85:cd:
c3:de:0b:2e:5f:1e:bc:ec:c3:59:70:0f:fa:72:4b:9c:ab:ec:
5e:9c:66:51:25:0a:17:9c:a1:9f:33:d1:96:c6:a4:a9:78:58:
af:cd:9a:04:f3:7c:ad:7f:2c:e2:26:5c:f1:5a:7a:a9:fa:0e:
db:3c:40:81:76:ea:63:6e:e4:97:ba:a9:78:2a:55:f9:6d:f4:
2e:0b:d6:9e:2f:22:54:69:7f:52:3f:5e:93:c1:35:85:c0:44:
9b:d3:8c:cc:27:8b:d2:e2:3d:81:e0:67:07:ae:77:81:21:e0:
a0:ad:ce:33:31:fd:77:24:a0:cc:e0:81:cf:b2:bb:55:6b:a3:
b0:b0:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org