Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7FB03E68B1DC11E9BC2B9149F8AEA228.roa
File: 7FB03E68B1DC11E9BC2B9149F8AEA228.roa (raw, json)
Hash identifier: wS1Rotv9moMhDdDm37GSC5lIwwUvKr/rg3FuRDmX7sw=
Subject key identifier: FA:C1:FA:39:63:55:4A:97:0C:3F:60:DE:20:AB:AF:4C:C7:46:7A:7D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 70
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7FB03E68B1DC11E9BC2B9149F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:40:21 +0000
ROA not before: Mon 29 Jul 2019 08:40:15 +0000
ROA not after: Wed 27 Jul 2022 08:40:15 +0000
asID: 36916
IP address blocks: 41.221.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:40:15 2019 GMT
Not After : Jul 27 08:40:15 2022 GMT
Subject: CN=5d3eb0f5-b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:ce:5e:95:aa:9c:83:7b:b1:61:6c:11:a7:
ba:22:c8:58:d7:92:67:3e:87:34:fd:1f:27:c2:e0:
e7:8e:d5:7c:10:03:a2:99:4f:ad:5c:80:96:9c:4d:
c9:cd:dc:c2:f5:1f:8c:80:33:ca:06:19:df:6e:c2:
80:c6:5d:0f:83:51:88:53:ed:27:b5:aa:f4:b3:24:
af:2e:d8:c1:25:89:fa:ac:7a:29:56:c4:41:43:7a:
f7:29:d3:fe:1a:d3:f3:59:6f:16:86:9b:5d:76:fe:
6a:06:12:c7:34:25:7b:7a:cf:e8:7f:81:20:39:4f:
dd:13:06:d6:1a:41:10:b4:61:e2:a0:a2:e0:48:d1:
5e:96:9a:b1:07:2a:64:54:3e:3b:d5:fd:1f:be:12:
34:1e:97:5f:9c:92:1a:6e:01:fb:80:b7:c8:ce:cf:
3d:f9:30:1e:e0:26:8e:e9:5c:a3:fb:cf:24:08:23:
59:46:39:90:8d:c0:5c:89:50:93:3e:22:c1:95:4a:
b2:dd:50:b5:f0:ba:47:5f:32:86:22:6c:87:9c:6f:
80:eb:04:b8:07:c3:60:9d:a8:30:26:ca:84:5e:9c:
c4:f2:00:e7:2c:27:73:e6:2c:ca:86:a3:af:d6:99:
be:e7:d3:7e:8d:a8:42:d3:7c:25:7b:85:54:97:c8:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:FA:39:63:55:4A:97:0C:3F:60:DE:20:AB:AF:4C:C7:46:7A:7D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/7FB03E68B1DC11E9BC2B9149F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:91:f3:33:d5:5f:25:b5:9c:cd:6b:3a:3a:d3:b6:c9:c8:70:
12:25:52:23:e8:f7:3a:23:1b:0a:3a:c5:90:a2:1f:0f:41:ea:
e3:96:d2:fc:73:40:2a:52:cd:71:a3:55:2e:41:54:2b:9b:fc:
38:b7:3e:a0:f0:15:13:49:ab:ad:8d:fd:6b:82:2e:ed:42:cf:
38:6f:6d:5b:a9:4f:00:b2:3e:de:59:c3:23:c2:8f:2f:b9:74:
b9:41:ac:1b:48:eb:81:4f:af:fb:89:f0:01:19:c3:5d:08:17:
a4:02:75:c8:1b:1b:80:25:39:02:49:0c:95:97:e8:fa:4a:2b:
48:6f:a4:d4:9f:75:fc:9c:23:46:18:93:c7:67:c7:b0:b3:c0:
a2:44:7c:e6:2d:ba:c1:84:af:9b:a1:ff:57:1b:8b:5d:fe:3d:
9c:9f:94:77:c9:07:60:0b:3d:1b:a7:08:99:47:e1:b3:59:00:
66:3a:65:da:bd:ca:64:6b:8e:68:c8:30:19:c6:1f:70:bf:23:
12:8a:be:8c:96:51:82:1e:e8:3b:ea:2b:93:7e:8e:a7:43:1d:
ca:eb:8a:bf:ef:5d:03:7c:c8:94:b2:62:9e:ad:75:ac:05:0e:
b3:9a:c2:63:1d:44:13:5f:dd:59:c2:92:89:43:f9:85:69:70:
9d:e7:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org