Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/66FFA7363B7F11EBB8E46D63F8AEA228.roa
File: 66FFA7363B7F11EBB8E46D63F8AEA228.roa (raw, json)
Hash identifier: H5dSaaQYzvU9hIbFvam3Ne8Rkqea+zHOQEDe6cXtxs4=
Subject key identifier: 23:E4:FF:1C:0C:D1:F1:F3:8F:99:27:27:46:ED:D4:D7:08:2E:4D:0A
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 028A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/66FFA7363B7F11EBB8E46D63F8AEA228.roa
Signing time: Fri 11 Dec 2020 07:06:35 +0000
ROA not before: Fri 11 Dec 2020 07:06:29 +0000
ROA not after: Wed 13 Dec 2023 07:06:29 +0000
asID: 36916
IP address blocks: 41.180.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Dec 11 07:06:29 2020 GMT
Not After : Dec 13 07:06:29 2023 GMT
Subject: CN=5fd31a7a-8b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:26:64:ff:ee:6d:31:f3:b5:11:23:0f:7d:
66:0f:5c:0e:ba:39:1e:72:b2:1c:ab:eb:a6:37:11:
bf:df:29:8c:9e:e1:0b:81:66:00:60:29:99:90:c5:
c9:81:65:a1:e8:62:ec:08:94:65:83:11:7d:76:42:
a6:2d:23:dc:38:cd:01:bb:9e:6b:1e:08:22:65:d3:
fb:9e:82:31:aa:d9:4d:2b:8f:46:ea:d3:15:36:b4:
f4:da:1d:6b:ba:28:36:91:f2:95:ec:fe:4a:1a:9c:
e2:b2:a1:94:d5:e0:7c:49:fb:2e:e5:50:17:a4:1d:
29:b1:d6:b9:d9:09:64:70:f7:26:4d:91:63:2a:a7:
9a:4a:4e:fd:a6:f9:8b:9b:6a:f4:eb:d8:0b:f9:06:
8c:8b:f5:29:4d:7b:80:24:91:46:1d:c8:a8:84:ba:
22:90:a5:2c:56:ee:8b:07:30:a0:f3:a0:4c:48:03:
2c:3a:80:a4:61:dd:45:b6:b0:ce:0e:51:b2:30:a6:
93:bd:4c:ee:fd:b6:2c:82:c4:e8:2b:08:8e:17:33:
ed:b8:22:1b:fa:81:00:03:b7:39:a1:2b:55:b3:e1:
05:3a:a1:78:61:e5:cf:7d:be:6e:7f:6e:70:60:a9:
33:41:e3:6b:ce:eb:e9:8c:60:0a:c5:aa:ea:5b:f7:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:FF:1C:0C:D1:F1:F3:8F:99:27:27:46:ED:D4:D7:08:2E:4D:0A
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/66FFA7363B7F11EBB8E46D63F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.0.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:29:4e:60:2b:c6:9f:61:5a:39:07:77:b4:b6:0f:27:14:f2:
9a:dc:1d:2e:43:bd:82:c0:fa:8a:67:a7:8b:33:d0:26:fe:2e:
6f:30:77:11:3b:e8:d1:b8:4c:7d:f1:a0:b9:18:bc:e0:b9:2a:
0d:94:25:93:e7:73:a3:26:e2:d2:e2:76:f3:73:0e:99:9e:bc:
7f:e0:2d:0e:e2:ef:60:44:39:eb:5e:ee:be:3a:95:d7:70:5a:
82:69:e1:4e:4d:3c:22:7d:ef:e5:68:0a:5e:94:60:f8:7f:5e:
b6:a8:ed:67:4b:5a:1c:53:70:27:96:48:93:ba:a4:ae:b2:5b:
28:60:1d:2e:97:c6:29:6c:c3:dc:4d:20:a3:9b:52:5d:72:07:
55:a5:10:c6:a7:d0:14:79:54:0b:86:2f:41:23:db:db:8d:c7:
dc:65:e4:9c:af:aa:27:a8:aa:43:ae:4f:0c:bf:b6:5c:98:40:
44:93:c8:02:eb:45:91:c1:65:f4:98:a7:2c:34:2e:16:18:99:
f9:0e:d4:27:9a:56:26:d7:0f:44:0f:95:44:30:41:3f:f7:70:
4e:2f:0a:6d:41:f1:a6:ec:9f:fe:a8:9e:3b:bc:73:8c:06:0f:
a3:99:5d:a5:58:9d:6d:95:e4:8b:ef:bb:c2:60:03:5f:ce:a3:
66:80:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 01:42:27 2023 by rpki-client on console-ams.rpki-client.org