Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa
File: C9FE75EEB1DB11E9A79B0049F8AEA228.roa (raw, json)
Hash identifier: 5LWpTnvAF72GPbIenwqYvWIle50djelwsK+yD7mwl4c=
Subject key identifier: 2B:9A:04:41:5E:4D:A5:BE:74:C1:BE:58:A4:5B:18:F3:D2:9E:D1:43
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 6A
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:35:16 +0000
ROA not before: Mon 29 Jul 2019 08:35:09 +0000
ROA not after: Wed 27 Jul 2022 08:35:09 +0000
asID: 36916
IP address blocks: 41.180.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:35:09 2019 GMT
Not After : Jul 27 08:35:09 2022 GMT
Subject: CN=5d3eafc4-7513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:00:2a:73:d0:b4:85:6b:c6:3c:c2:c5:c9:
69:9e:49:eb:74:af:2c:3d:67:09:03:57:e7:d8:17:
19:d4:be:21:50:af:d9:6d:ce:e0:ba:1e:2f:0b:e7:
94:0f:a0:b0:37:fa:b3:06:16:0b:bc:63:f8:f5:9f:
4c:37:49:c0:3e:ca:9d:d3:af:cf:2a:da:8a:9c:b2:
29:23:70:6d:a2:c2:4d:05:ba:0b:5c:6d:fd:02:1c:
7f:55:ad:0d:06:f4:e9:47:1c:db:48:6e:d7:f9:c7:
6a:88:28:7d:43:0d:be:00:56:9c:27:5b:3e:64:ee:
fd:b5:4f:b8:c0:ea:19:00:66:ff:6c:f7:0a:6b:87:
1a:63:c3:bf:bb:e1:8a:6e:3a:62:c7:fa:09:f3:8f:
a7:dd:a3:ed:3f:94:3d:fd:97:92:97:6e:43:3f:f4:
4a:7f:db:31:fa:f4:45:1c:7e:41:18:36:7e:3b:62:
8b:4e:12:a8:58:f2:d3:38:7f:64:ed:1d:09:36:bf:
26:38:bf:f9:6f:17:b0:ce:ca:86:3f:31:a4:75:05:
6c:77:9f:86:6b:32:46:a7:d5:2d:76:22:4c:83:56:
09:17:7b:d2:95:0c:24:66:35:15:ca:73:36:3d:62:
03:52:b0:9e:71:b9:d6:85:da:fc:2c:af:a1:ca:5e:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9A:04:41:5E:4D:A5:BE:74:C1:BE:58:A4:5B:18:F3:D2:9E:D1:43
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/C9FE75EEB1DB11E9A79B0049F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.96.0/21
Signature Algorithm: sha256WithRSAEncryption
35:cb:fc:27:9b:ea:56:c1:da:22:4b:ba:92:92:20:a2:b5:a8:
70:a6:47:66:86:27:3d:a1:b8:a6:ae:11:27:ea:19:dd:e4:20:
7a:71:e0:94:c6:4b:02:ba:ef:1d:9f:7a:6c:a4:e1:0f:92:44:
c3:fd:a7:c6:6d:6f:17:e4:f8:dd:22:39:c1:d7:67:4a:34:28:
51:9e:1a:6c:8d:79:89:ad:f5:b8:4f:78:e1:3b:dc:0b:94:f2:
5e:d5:23:f0:ae:d8:0e:32:05:47:ad:dc:cb:b3:f7:80:2a:e7:
44:9d:67:c9:e5:46:82:aa:4e:67:ac:e4:db:91:c0:25:c3:83:
3a:03:b7:d1:9d:6e:55:b8:99:c8:41:30:73:03:24:dc:77:e5:
ca:8f:7a:7a:2f:b3:07:d0:b0:fb:d4:d2:92:d7:8d:f7:2e:20:
21:02:94:3a:71:12:57:ba:ac:ca:83:40:df:29:fd:d9:2e:7c:
6d:02:14:78:d1:f5:85:7d:6e:19:6c:bb:eb:9d:5c:fc:08:47:
f9:2c:7d:e2:72:b1:2f:85:66:79:2a:98:f0:7f:ea:1f:d0:bc:
8f:a7:55:b6:f9:e1:a0:9d:f2:1e:07:44:17:03:4a:0e:95:f4:
a8:a2:9d:d9:42:55:65:dc:a2:41:28:f6:13:f6:56:20:b8:b6:
07:dc:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org