Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8A1ED0E6B1DA11E98A9BE447F8AEA228.roa
File: 8A1ED0E6B1DA11E98A9BE447F8AEA228.roa (raw, json)
Hash identifier: gDlFHY8RIszmTW495Xt2sy25eSLxuEggmnQSmTHYxLM=
Subject key identifier: 83:03:08:60:0E:D9:62:01:71:AF:B5:4B:BD:F5:64:07:4D:03:17:E4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 5C
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8A1ED0E6B1DA11E98A9BE447F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:26:19 +0000
ROA not before: Mon 29 Jul 2019 08:26:14 +0000
ROA not after: Wed 27 Jul 2022 08:26:14 +0000
asID: 36916
IP address blocks: 41.180.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:26:14 2019 GMT
Not After : Jul 27 08:26:14 2022 GMT
Subject: CN=5d3eadab-e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c5:46:ab:1d:d4:09:31:96:9d:65:1d:dd:d8:
ef:48:67:81:d3:a3:03:93:db:dc:26:1d:12:34:21:
b9:2f:92:28:f1:70:13:2a:39:7b:a4:94:9e:5a:b7:
e0:9c:d6:10:e0:2c:d7:6a:50:b9:49:49:f5:ff:94:
05:f5:7c:ac:22:44:9e:2f:89:90:61:87:de:26:dd:
f0:cf:82:7b:19:d6:c8:90:d1:70:e7:98:56:85:ce:
29:32:a0:99:c9:ff:b3:bd:86:8e:9b:76:ea:bc:b3:
9a:80:58:10:33:8e:fa:7a:a7:3b:a1:c4:09:14:98:
c2:2b:85:f8:76:e5:4c:09:c1:fc:d4:39:27:1a:68:
8a:59:0f:56:12:ce:fd:41:8f:5e:d9:69:12:e4:be:
24:67:24:ce:2d:85:ca:ae:df:b4:66:45:23:29:23:
3d:d3:0b:9b:80:81:9c:ee:9e:69:5a:f0:c0:a6:4f:
47:d7:ce:36:79:90:95:e4:98:53:1a:63:f0:79:e1:
ab:dd:38:78:10:7f:57:3e:3f:a4:3b:ee:88:50:1b:
15:4b:6e:0e:19:32:b0:47:91:33:13:36:40:1e:ed:
b2:2c:d3:e7:44:aa:c8:63:a2:0a:99:b0:06:fe:ec:
7d:4c:d9:1d:ff:c1:47:20:bc:0c:20:96:3e:de:c1:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:08:60:0E:D9:62:01:71:AF:B5:4B:BD:F5:64:07:4D:03:17:E4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/8A1ED0E6B1DA11E98A9BE447F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.72.0/21
Signature Algorithm: sha256WithRSAEncryption
57:59:54:8a:a9:34:61:06:f6:da:91:09:ac:75:5d:5f:8e:89:
79:10:37:bf:b1:df:1f:5b:cd:dd:2c:d6:3c:ef:58:49:2a:be:
0a:3b:f1:f8:ea:3b:3e:8f:6c:71:65:a4:92:e2:38:88:b4:43:
a0:e1:ee:07:f9:ba:94:5a:09:79:91:a7:f2:35:17:55:a6:c8:
41:d4:db:2a:63:3a:37:12:91:67:cc:cd:3e:92:39:8f:fa:95:
72:fd:c9:ab:75:9c:3a:65:a0:4e:af:3a:64:be:c9:a9:1a:42:
cf:c0:59:8e:64:a9:c6:08:d9:de:d5:bd:6a:de:1f:5c:58:3b:
54:45:c1:c3:5d:1a:34:15:9a:59:de:4b:3c:0b:a8:fb:0d:ce:
71:20:7d:96:ad:12:cc:1c:03:51:62:61:01:bc:58:c3:b6:63:
b1:c8:af:32:56:85:7e:be:95:25:53:7b:9f:41:5c:a4:53:3c:
a7:71:d7:86:e8:d8:b8:2c:65:38:e8:0a:74:12:7a:71:58:ab:
e8:1e:2c:97:11:47:36:c5:b5:8f:8d:91:75:1b:a1:35:b8:9e:
2b:23:73:6f:b7:92:86:fe:a9:43:df:2e:73:b4:36:79:66:6d:
3c:84:33:ae:99:81:08:f2:1c:aa:b2:7f:17:68:3d:c1:8a:72:
01:26:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org