Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A5F6C052B1DB11E994F0EB48F8AEA228.roa
File: A5F6C052B1DB11E994F0EB48F8AEA228.roa (raw, json)
Hash identifier: gkT5Le3Fa9gzylNmkbhqVHAhvRq2sXbPWwwEGJu/mQw=
Subject key identifier: B2:49:F8:B8:AC:CC:B1:38:FD:C2:A3:D3:38:15:87:BD:6B:BB:B0:3D
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 68
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A5F6C052B1DB11E994F0EB48F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:34:16 +0000
ROA not before: Mon 29 Jul 2019 08:34:10 +0000
ROA not after: Wed 27 Jul 2022 08:34:10 +0000
asID: 36916
IP address blocks: 41.180.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:34:10 2019 GMT
Not After : Jul 27 08:34:10 2022 GMT
Subject: CN=5d3eaf87-5522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:5e:f5:f5:47:3e:02:ee:ce:dd:67:f1:f7:
1e:98:93:d2:a8:de:d0:67:28:22:e9:9f:ba:b8:1f:
06:3d:5d:df:68:f6:3b:b7:24:fd:7e:48:65:ec:cc:
5c:72:ed:bf:c6:3d:8d:a1:95:1e:1b:97:31:a9:01:
19:84:b4:aa:08:b1:1b:f5:d2:23:68:c1:fd:39:3a:
f2:60:78:6c:ed:5e:19:51:3f:fa:cf:c8:3a:70:82:
95:4a:13:b5:0d:4f:e2:65:2b:48:ef:b2:85:13:50:
29:a8:a7:7f:9e:6e:15:96:ae:f8:06:47:57:e1:75:
0f:d2:8f:e2:4d:f5:7d:95:27:53:7f:66:2c:2a:3c:
59:00:b5:71:e3:a9:82:c5:62:49:66:70:5a:22:e0:
f7:61:f0:3e:81:1f:81:10:ec:e6:8d:23:45:37:19:
2c:b4:0e:d3:c0:af:a9:cf:24:c0:0f:e4:55:5d:d0:
a2:fb:46:fb:4c:02:9d:45:94:f5:85:24:ad:c4:76:
ea:69:c3:f4:68:98:10:e8:96:aa:89:26:98:e5:7c:
b9:0f:a7:1a:4f:35:b7:58:e2:1c:a9:1a:e6:8e:bb:
1f:74:29:52:91:40:e0:5d:1a:f4:ba:a6:29:8c:3d:
7a:01:5c:cf:0b:f0:56:ed:ae:9e:a0:ee:f0:3a:0b:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:F8:B8:AC:CC:B1:38:FD:C2:A3:D3:38:15:87:BD:6B:BB:B0:3D
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/A5F6C052B1DB11E994F0EB48F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.9.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6a:0d:0a:88:56:73:bd:09:76:d7:d7:57:78:c6:ca:19:28:
f7:6a:9f:1b:c1:05:83:56:b3:22:43:90:d3:7e:c1:c5:38:56:
5f:97:23:ea:dc:c6:47:ab:b8:e1:d3:40:24:bd:77:da:7c:51:
35:37:23:2a:e7:53:8a:30:6a:c0:86:63:ea:e4:0b:f0:b6:c9:
7f:39:1f:15:4c:39:ec:ee:74:30:70:e0:68:6b:d0:89:b8:e8:
2a:2e:f3:74:81:9f:b6:04:cb:c2:c6:1a:d8:3a:27:d0:c2:8c:
a7:a5:77:0a:dc:41:f2:59:60:fd:b4:8a:9c:1d:fe:2f:ef:c5:
fb:78:91:a7:da:79:a7:cf:57:11:69:6a:31:fe:c7:bd:34:ee:
62:fe:3e:7d:b4:f8:aa:4d:1f:7d:f2:e3:49:a4:ed:97:f1:25:
04:ea:22:61:2f:88:1f:36:81:47:a8:d8:6d:80:f9:4e:13:d1:
44:3b:d0:7e:8e:c9:d4:d0:0b:32:06:70:d1:13:9d:35:27:27:
b8:c4:14:f7:72:9b:dc:1c:3b:40:67:71:a6:e3:cf:9e:d4:29:
a5:e0:e8:72:b4:d5:ed:d5:15:ef:d2:e3:f3:8d:a0:03:6d:ec:
45:f9:c7:57:8a:40:1d:1d:f4:ea:dd:21:43:ce:70:2a:76:39:
4b:46:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org