Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9662D856653A11EBB8F77643F8AEA228.roa
File: 9662D856653A11EBB8F77643F8AEA228.roa (raw, json)
Hash identifier: WX0ur+zYoc3EWedh5hUeH1R0mcO17aqVYfG/GI2fx38=
Subject key identifier: F8:EC:AD:C5:57:8A:F0:F7:A8:CC:26:E1:42:77:79:B3:7F:AC:21:4F
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 02C4
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9662D856653A11EBB8F77643F8AEA228.roa
Signing time: Tue 02 Feb 2021 09:39:48 +0000
ROA not before: Tue 02 Feb 2021 09:39:42 +0000
ROA not after: Wed 08 Feb 2023 09:39:42 +0000
asID: 36916
IP address blocks: 41.180.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 708 (0x2c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Feb 2 09:39:42 2021 GMT
Not After : Feb 8 09:39:42 2023 GMT
Subject: CN=60191de3-f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:c0:81:c3:3e:71:48:64:7c:00:56:11:aa:
c1:92:c9:e6:c7:28:a0:dd:47:9b:d9:18:45:5e:71:
a1:75:90:dc:12:e0:29:c4:1a:19:43:8b:5b:bb:60:
fc:b4:bc:7e:1f:8e:3a:68:29:61:76:e6:51:ee:c1:
b1:55:4d:02:7b:ce:1c:0c:6f:0f:e1:03:fe:b0:b0:
30:4a:9b:a1:2b:3d:e5:3b:c6:7a:e1:a3:d3:87:66:
e7:d4:21:2e:87:1b:67:9f:9d:d5:dd:b7:b2:9d:d3:
c4:87:4d:90:44:20:b1:ed:33:79:1b:c7:92:05:99:
89:01:45:a2:68:44:b3:4e:0e:07:26:92:00:02:e6:
00:bc:1e:38:74:c7:f3:e3:cf:54:64:b4:c9:54:85:
91:c3:ed:2f:78:eb:65:91:2d:36:70:92:8f:cd:35:
ef:79:66:26:11:3c:85:95:7c:b2:e5:0f:5b:87:00:
88:96:cd:23:2f:0a:de:f2:f3:59:88:ee:a3:b7:94:
a8:15:d5:ad:f9:19:95:f1:a2:84:1a:00:af:57:07:
4f:1c:fa:3d:6f:b7:28:bb:bd:2b:af:75:fd:0a:6c:
c3:64:df:c0:52:f7:41:05:59:f0:62:1e:9c:e6:89:
81:5e:d3:03:79:11:e9:53:2e:9e:97:58:d9:a3:07:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:AD:C5:57:8A:F0:F7:A8:CC:26:E1:42:77:79:B3:7F:AC:21:4F
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/9662D856653A11EBB8F77643F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.128.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:cb:67:73:54:e4:c4:9f:9e:b0:d7:84:75:bd:9c:f8:cd:3e:
9b:f9:4b:35:57:73:3b:92:98:29:10:86:d1:99:16:d3:14:aa:
c4:d8:6b:e7:39:90:84:d2:b9:3c:c3:c9:e6:f9:79:0e:e5:03:
37:1d:1a:07:28:2f:25:72:55:10:10:57:c4:49:bc:d4:b9:6d:
6e:d2:74:47:73:18:7c:16:14:3f:f9:8d:70:06:f8:36:18:9e:
84:ec:b0:13:74:5d:dd:9e:31:4a:2f:93:ec:94:38:d3:ea:18:
1e:6e:a4:bd:3f:11:28:ac:21:be:1e:6c:b7:80:12:5f:fa:3b:
f9:3b:18:c9:9e:06:b9:75:22:c2:4d:04:b3:0f:62:6f:c9:6a:
6a:65:53:7c:2e:2b:57:8a:bf:ee:fc:3a:c7:c9:ac:f0:6c:ae:
b4:33:53:ab:e6:8c:17:7f:ff:1c:2c:8d:a7:d8:23:cc:b5:5e:
7c:f1:9b:cc:aa:e2:ed:f3:32:fe:71:d3:4f:dc:3f:61:75:78:
fe:62:a5:3b:99:b1:9b:a4:5d:f8:df:b9:18:94:19:c6:82:73:
1a:0f:b6:5e:1b:6a:03:a5:70:8d:12:b1:a9:9e:0c:4a:b6:b6:
75:08:6c:8e:90:9a:0b:5f:b9:93:73:02:6f:60:10:2a:dc:5c:
f5:0b:d1:c7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0yMTAyMDIwOTM5NDJaFw0yMzAyMDgwOTM5NDJaMBgxFjAU
BgNVBAMTDTYwMTkxZGUzLWYxYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbccCBwz5xSGR8AFYRqsGSyebHKKDdR5vZGEVecaF1kNwS4CnEGhlDi1u7
YPy0vH4fjjpoKWF25lHuwbFVTQJ7zhwMbw/hA/6wsDBKm6ErPeU7xnrho9OHZufU
IS6HG2efndXdt7Kd08SHTZBEILHtM3kbx5IFmYkBRaJoRLNODgcmkgAC5gC8Hjh0
x/Pjz1RktMlUhZHD7S9462WRLTZwko/NNe95ZiYRPIWVfLLlD1uHAIiWzSMvCt7y
81mI7qO3lKgV1a35GZXxooQaAK9XB08c+j1vtyi7vSuvdf0KbMNk38BS90EFWfBi
HpzmiYFe0wN5EelTLp6XWNmjBxxbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+Oyt
xVeK8PeozCbhQnd5s3+sIU8wHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4Lzk2NjJEODU2NjUzQTExRUJCOEY3NzY0M0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIptIAwDQYJKoZIhvcNAQEL
BQADggEBAG7LZ3NU5MSfnrDXhHW9nPjNPpv5SzVXczuSmCkQhtGZFtMUqsTYa+c5
kITSuTzDyeb5eQ7lAzcdGgcoLyVyVRAQV8RJvNS5bW7SdEdzGHwWFD/5jXAG+DYY
noTssBN0Xd2eMUovk+yUONPqGB5upL0/ESisIb4ebLeAEl/6O/k7GMmeBrl1IsJN
BLMPYm/JamplU3wuK1eKv+78OsfJrPBsrrQzU6vmjBd//xwsjafYI8y1Xnzxm8yq
4u3zMv5x00/cP2F1eP5ipTuZsZukXfjfuRiUGcaCcxoPtl4bagOlcI0SsameDEq2
tnUIbI6QmgtfuZNzAm9gECrcXPUL0cc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org