Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6C77AEAB1D911E98CCA3547F8AEA228.roa
File: B6C77AEAB1D911E98CCA3547F8AEA228.roa (raw, json)
Hash identifier: 4mfQyOS2Ij1jJiu2sI8Oh39TTZJCnKP0MguNxAPGbcQ=
Subject key identifier: 65:D7:40:40:2A:40:3A:E9:47:57:58:CE:1A:E8:DF:73:48:7B:3B:6A
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 54
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6C77AEAB1D911E98CCA3547F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:20:25 +0000
ROA not before: Mon 29 Jul 2019 08:20:18 +0000
ROA not after: Wed 27 Jul 2022 08:20:18 +0000
asID: 36916
IP address blocks: 41.180.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:20:18 2019 GMT
Not After : Jul 27 08:20:18 2022 GMT
Subject: CN=5d3eac48-58fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:59:8c:d5:6e:36:09:f3:fc:2d:d5:90:09:
e4:d4:aa:c6:62:44:86:23:84:47:ce:82:bf:6c:57:
a9:a9:22:6b:b1:43:ad:0b:df:e6:65:9a:3d:74:a4:
06:2c:7e:c3:b5:e3:de:c5:6a:d7:a5:a3:6b:cb:2f:
45:d2:ca:34:f0:81:81:65:8a:bf:1f:09:a5:dd:ef:
37:eb:5c:85:1c:c6:3d:bb:be:50:c9:23:8c:3c:04:
82:e2:fb:75:0b:6d:2b:38:fd:5f:14:29:70:d9:13:
c9:c0:ab:22:c0:94:05:77:81:3e:a8:9b:80:47:59:
3d:77:62:99:c4:d7:21:6a:fb:c2:59:d8:59:95:0e:
26:7f:e7:aa:47:83:b5:d4:27:e4:87:6b:dc:0c:4b:
91:a1:84:8c:79:16:84:b7:38:11:5d:a7:2a:89:6c:
ef:9a:74:07:32:47:ab:2b:32:af:4b:3a:27:ae:67:
b6:7a:fe:3d:ac:94:c9:c7:32:51:19:0e:3f:ca:b5:
e8:27:a4:6c:37:fb:b9:89:28:21:e5:f0:22:ec:b1:
cc:6d:23:fa:71:40:8b:23:1c:3b:c6:48:c6:e4:ea:
01:91:c6:83:8e:c3:ac:56:d3:8d:42:e3:cf:d6:89:
64:b4:6d:50:84:bb:0a:96:55:bb:c8:d3:fd:73:6a:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:40:40:2A:40:3A:E9:47:57:58:CE:1A:E8:DF:73:48:7B:3B:6A
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6C77AEAB1D911E98CCA3547F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b4:d9:64:2d:c0:03:1a:4c:b6:7b:b3:15:ba:0d:4b:a1:12:
69:c9:9f:83:58:4f:91:7e:5f:fa:36:a2:53:14:90:bc:f1:0e:
5e:77:2d:41:a4:5c:ad:3e:a6:de:cd:d6:95:8e:0d:78:92:90:
83:f6:34:9b:a6:d2:80:c7:2b:8f:19:ff:14:27:4c:b8:e3:a1:
0e:55:99:7b:e7:e4:99:c6:0f:fb:d9:2f:94:67:53:06:0d:47:
53:bc:98:b6:96:04:78:40:a4:aa:c6:45:2e:b9:3d:97:32:57:
53:af:4c:fd:51:c5:33:14:62:2b:91:2a:2b:ab:e8:9e:05:da:
d2:aa:55:4c:39:d1:30:58:c1:05:13:15:83:9a:eb:e6:09:fb:
75:41:b4:af:e8:20:61:4a:3a:1a:a3:6f:b8:c2:fd:a5:3e:73:
a1:4c:b4:67:10:6f:ae:91:55:16:39:58:48:04:ec:bc:84:3d:
d2:71:e1:17:88:52:89:20:24:10:80:f1:4c:ee:2c:7f:a5:9c:
24:39:4a:63:9f:15:c0:c1:01:15:50:af:1e:85:54:42:55:58:
5d:42:f0:af:f9:8b:dd:c5:35:06:bd:81:b3:b8:c4:e5:a0:7c:
42:00:b7:87:3e:58:f8:4b:80:59:1c:53:8c:8b:09:ad:89:96:
fa:47:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org