Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6F29E66B1DC11E9A89AAA49F8AEA228.roa
File: B6F29E66B1DC11E9A89AAA49F8AEA228.roa (raw, json)
Hash identifier: b16rHxIhgQWUbxZopNNBINO3uf5hqgxp5h8y8NlDbjQ=
Subject key identifier: 20:C7:42:EC:58:F2:18:A9:B7:4B:89:E3:DF:10:EC:F6:53:48:EB:4E
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 72
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6F29E66B1DC11E9A89AAA49F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:41:54 +0000
ROA not before: Mon 29 Jul 2019 08:41:48 +0000
ROA not after: Wed 27 Jul 2022 08:41:48 +0000
asID: 36916
IP address blocks: 41.221.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:41:48 2019 GMT
Not After : Jul 27 08:41:48 2022 GMT
Subject: CN=5d3eb151-230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:17:09:83:2d:71:bd:7a:88:32:f9:24:12:
26:68:bb:9b:51:8a:47:6f:e8:d5:f0:7e:86:05:20:
1a:9c:57:2d:4e:28:62:c8:23:f8:83:3e:d0:43:ba:
c5:0d:d2:08:36:cf:92:a2:11:d4:68:58:4b:64:ca:
46:ae:13:75:3b:94:55:2f:b0:46:ea:22:e7:70:02:
03:c9:a6:d0:d2:f1:3f:7e:6a:6b:f2:7a:3d:df:ac:
f2:5e:3f:0b:12:5b:e8:17:c5:80:35:c0:29:c4:4b:
c0:de:84:59:c7:f6:6d:75:d1:9f:14:4e:06:64:24:
3a:95:5a:93:b0:b6:e1:42:bc:2f:9f:8a:27:56:6e:
58:c0:d6:8c:f1:c6:99:26:17:72:b2:1d:a3:f8:1c:
5b:04:ea:9d:c1:01:be:75:4b:3e:5f:eb:a1:cc:11:
eb:9d:76:a2:de:93:de:27:f4:d7:e6:6e:30:e0:6e:
32:5c:91:df:bb:b2:31:aa:2c:ad:de:aa:4f:13:03:
3e:88:1e:de:9d:5c:c3:01:f5:7a:47:a0:fd:e6:63:
64:be:86:38:bd:37:20:d5:00:f4:43:0b:cf:06:e0:
58:c2:7e:04:7a:ef:65:eb:dd:83:84:21:f4:64:ba:
29:d9:54:b0:04:e9:e3:c7:56:ea:c7:55:51:2d:8c:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:42:EC:58:F2:18:A9:B7:4B:89:E3:DF:10:EC:F6:53:48:EB:4E
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/B6F29E66B1DC11E9A89AAA49F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0e:22:e8:cd:db:e6:3e:e5:bf:ed:91:82:bb:23:74:1d:bb:
de:94:2c:c8:28:8e:27:8d:ce:2c:f0:6e:d2:bd:04:bb:af:ad:
64:80:9c:22:ed:ed:9e:bf:48:06:cf:d8:17:1a:76:63:a6:f4:
29:29:c4:f3:c1:74:01:fd:9a:01:2d:78:80:a0:fe:85:8b:65:
5a:3f:0e:10:59:94:c4:9b:9c:e7:0c:ec:21:63:1f:7c:8c:48:
1f:eb:a0:3a:d0:8a:54:42:6e:38:c1:73:71:fc:ca:85:28:2c:
29:65:c8:f7:9f:8d:5e:70:d7:a6:d7:7f:9d:cb:2f:72:bf:cf:
4f:33:ee:df:97:46:33:14:86:82:91:25:e3:ea:78:8c:e7:6b:
3c:4c:b2:3b:70:da:2c:f6:89:2c:e1:ff:6c:6d:ee:42:2f:68:
39:45:a3:0d:df:3d:de:d7:e4:fb:1a:17:bd:ee:47:93:31:51:
ff:bb:00:dd:a1:bd:49:11:fa:c1:60:c8:55:3a:37:3b:ad:34:
01:fd:9e:bb:f2:b4:1d:77:0a:dd:86:76:f3:01:ea:81:19:d4:
3d:fe:76:48:72:e2:2b:80:48:1f:d1:d8:b0:f7:7a:64:51:0b:
4b:fa:fd:fb:1a:45:76:25:2d:fd:f5:ca:38:b9:27:ef:a9:cf:
b6:be:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org