Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF2D6A12653B11EB8207B644F8AEA228.roa
File: AF2D6A12653B11EB8207B644F8AEA228.roa (raw, json)
Hash identifier: p+MnblCnJOh+ApCy8uLdLf4R1Og0vS/kOwZKTYnQbEI=
Subject key identifier: E5:06:BB:F8:52:12:48:B6:57:09:1E:CF:E1:10:BD:2A:C1:2F:5E:BD
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 02D0
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF2D6A12653B11EB8207B644F8AEA228.roa
Signing time: Tue 02 Feb 2021 09:47:38 +0000
ROA not before: Tue 02 Feb 2021 09:47:34 +0000
ROA not after: Wed 08 Feb 2023 09:47:34 +0000
asID: 36916
IP address blocks: 41.180.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Feb 2 09:47:34 2021 GMT
Not After : Feb 8 09:47:34 2023 GMT
Subject: CN=60191fba-f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:82:9a:a0:c8:37:16:cf:a0:ef:61:bc:aa:
14:4f:63:73:44:8f:7d:7c:eb:d6:88:f7:3e:75:dd:
60:28:46:5f:0c:ca:a8:e3:ac:65:d4:d1:75:c9:fa:
92:ea:98:f7:08:7c:7d:c5:dc:bc:ae:f9:66:99:f3:
d1:2d:34:d0:14:96:b8:0f:eb:30:4f:3b:4f:06:4b:
b1:68:99:7c:d3:1b:7c:44:b7:39:6a:cf:a4:32:7d:
27:f8:40:9e:52:53:0c:71:88:5f:80:a7:ad:2b:33:
2c:0d:ab:1d:e8:a2:a6:a5:75:1d:91:b5:06:cc:62:
b2:68:92:c5:7b:4c:66:c8:18:2b:e5:51:41:5c:70:
6e:83:6b:23:ff:30:88:94:0b:e9:d2:d0:7b:b2:22:
ef:84:36:26:a7:25:9d:fa:6e:0f:df:93:b0:a7:4f:
89:2c:9e:ec:c4:23:7e:9b:e8:73:f9:d8:c3:e4:74:
c2:f5:fc:b6:c5:af:4a:9d:41:bd:60:c2:84:b1:7f:
be:bb:81:d8:1d:bc:2c:03:e5:47:0f:02:3f:62:5e:
54:85:ef:91:9b:21:16:8c:63:21:94:27:68:3e:49:
54:80:a1:be:c0:42:bc:3f:1e:47:97:e7:b2:22:7a:
1f:4c:7e:2a:38:09:45:4d:22:1e:2f:41:ae:60:24:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:BB:F8:52:12:48:B6:57:09:1E:CF:E1:10:BD:2A:C1:2F:5E:BD
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/AF2D6A12653B11EB8207B644F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.176.0/22
Signature Algorithm: sha256WithRSAEncryption
69:76:7f:11:72:3e:1c:a1:71:43:fe:fb:3a:23:06:7c:ff:e4:
5e:06:a0:c7:9a:53:a7:df:f1:fa:f0:4f:0e:7f:37:0e:0e:a9:
e8:d5:17:81:03:dc:f7:c3:7a:a9:0a:ef:7e:0f:d2:8e:a4:b7:
f7:1c:cb:26:49:97:7b:98:0a:19:ba:7d:11:35:9d:d7:ef:0b:
16:fe:49:d9:7d:f1:53:95:bd:92:89:c0:de:e9:37:95:86:28:
88:fe:2b:ec:47:35:16:33:fe:e5:db:29:a2:27:e0:c5:6e:1e:
a4:f6:43:3c:01:18:c3:ee:5b:d6:9a:1e:b0:21:09:42:c2:72:
66:db:be:66:78:72:c4:6f:31:9e:1b:3a:62:52:05:39:5e:d2:
06:e5:ea:36:d4:f2:b9:7f:04:08:b0:6d:ab:32:90:87:b1:15:
36:a7:63:1a:39:d0:d2:7d:b6:e4:54:4e:82:27:40:b0:a3:a7:
f0:3b:bd:75:a3:5a:e6:9c:d3:2c:67:2c:ab:ea:f1:f1:d4:69:
f7:35:39:5d:13:1d:a9:72:53:e3:0e:39:83:5d:f7:29:cd:c9:
54:6d:66:f5:5c:78:a6:39:e1:66:b5:fd:92:ec:e0:a3:92:7b:
d9:fd:f4:69:1c:93:49:1c:4c:99:8b:dc:bd:45:d4:09:9a:d3:
2d:bb:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org