Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/62DA687C653B11EB905B5D44F8AEA228.roa
File: 62DA687C653B11EB905B5D44F8AEA228.roa (raw, json)
Hash identifier: ndRghziiFNhm8Iu9oyKK9VcKEmAER2Z7o+hLsv/5Id4=
Subject key identifier: D2:54:04:8A:25:D6:99:B9:A9:09:26:99:CC:86:C6:A8:BC:E9:4E:04
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 02CC
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/62DA687C653B11EB905B5D44F8AEA228.roa
Signing time: Tue 02 Feb 2021 09:45:31 +0000
ROA not before: Tue 02 Feb 2021 09:45:25 +0000
ROA not after: Wed 08 Feb 2023 09:45:25 +0000
asID: 36916
IP address blocks: 41.180.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716 (0x2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Feb 2 09:45:25 2021 GMT
Not After : Feb 8 09:45:25 2023 GMT
Subject: CN=60191f3a-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:8a:ae:f2:30:0e:df:6c:53:42:f7:c0:86:
f1:66:d7:fb:34:0e:4c:0b:3c:57:9b:0e:6d:f8:b1:
b5:1a:3e:6c:37:a7:f9:6f:61:4b:d2:08:4f:3d:42:
04:97:fa:0c:c7:b2:70:bc:0c:e2:ad:29:e4:aa:ef:
d7:96:30:53:27:ec:11:11:98:77:8e:a9:81:d9:51:
61:e4:7c:3a:27:4b:73:d2:bf:1e:cf:21:8f:1d:b9:
5c:c2:1b:ce:46:2b:e8:41:d4:49:48:ee:c6:1a:32:
41:29:cc:8d:4f:ea:88:8f:d6:f2:ee:a9:e6:c3:98:
49:5c:a4:6f:94:5c:86:e7:d6:f4:aa:c0:9a:a5:c8:
7f:c6:87:a4:3a:aa:8a:90:97:97:f3:9e:b2:65:2f:
e9:88:43:19:3e:de:a0:6e:c8:47:26:ab:70:d1:c8:
c6:e4:68:b6:31:e5:54:b9:09:f6:e0:34:bf:6f:57:
08:79:14:3f:f7:ad:14:56:dd:0d:dc:da:81:f5:78:
53:b6:68:24:27:d4:ed:1f:51:ae:fa:f8:f0:bd:11:
ee:c0:3f:3a:33:e0:49:0f:63:cb:53:7b:ca:c2:bd:
5a:eb:01:20:c0:e0:d8:22:68:d2:41:e3:be:5f:29:
a4:f9:b4:b5:53:74:6c:5c:62:f0:0d:45:33:64:9d:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:04:8A:25:D6:99:B9:A9:09:26:99:CC:86:C6:A8:BC:E9:4E:04
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/62DA687C653B11EB905B5D44F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:f0:99:0d:80:d4:f3:b8:38:5c:69:25:ca:0d:f5:0d:f1:4f:
ca:32:2b:ea:1a:04:2c:7a:4f:9e:be:2e:d1:f4:ea:2f:aa:60:
ea:76:ae:b5:f5:b2:eb:d6:ad:81:99:66:54:e3:85:93:47:3d:
a8:22:50:7c:42:59:ea:1d:fc:79:f5:04:0c:67:7d:7c:00:d9:
84:c0:8c:d6:b6:2d:0e:47:03:cb:63:57:3e:cc:56:94:54:99:
2c:d0:64:bf:36:c5:8b:dc:14:76:06:17:1d:bc:ab:71:a1:b8:
fd:51:e9:d9:68:6f:79:37:6e:0d:d3:09:0e:e7:a9:d3:ac:f6:
2c:5e:a0:e5:67:24:dc:e9:11:25:2d:94:b1:cf:4c:cb:7b:8f:
95:55:9c:a9:30:6a:2d:70:be:a9:02:59:4b:e9:d1:45:3a:b5:
20:ce:d8:10:f2:3d:45:6e:99:2d:d1:82:7b:8a:01:73:0c:4e:
fd:86:7f:ac:87:a7:32:49:18:0d:49:77:96:69:ae:05:f9:34:
b5:08:55:45:77:80:bb:ae:c3:d5:9c:61:66:b1:8a:20:10:fa:
fb:ea:da:d9:90:4b:23:27:80:86:1c:31:7e:aa:86:3b:97:53:
3b:a4:9b:60:2b:32:5f:c9:31:5c:46:88:35:f6:82:17:90:9e:
a2:00:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org