Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D00919C0653B11EB8244DA44F8AEA228.roa
File: D00919C0653B11EB8244DA44F8AEA228.roa (raw, json)
Hash identifier: qshLfe4KtGV8kv8GP4sfBRFho17m5vlvE75OrRcbr/s=
Subject key identifier: F9:59:3E:34:D7:5A:F9:38:D8:DC:FE:F7:25:01:9B:79:6D:BD:E7:99
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 02D2
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D00919C0653B11EB8244DA44F8AEA228.roa
Signing time: Tue 02 Feb 2021 09:48:33 +0000
ROA not before: Tue 02 Feb 2021 09:48:29 +0000
ROA not after: Wed 08 Feb 2023 09:48:29 +0000
asID: 36916
IP address blocks: 41.180.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Feb 2 09:48:29 2021 GMT
Not After : Feb 8 09:48:29 2023 GMT
Subject: CN=60191ff1-b19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:33:b5:c7:17:c3:c9:e5:1f:9d:e1:74:fd:
f5:f5:26:8a:bd:51:73:97:b1:4e:3f:37:7d:e4:aa:
ec:15:7b:c3:58:ff:db:40:b8:d8:f8:9f:31:46:c8:
00:fa:39:94:4f:f8:c8:a9:0c:31:fc:fe:5a:3a:d7:
eb:ae:3a:e8:15:fb:37:75:be:43:25:c0:94:d3:67:
48:fc:0f:0d:d3:e9:9c:08:fa:18:0b:b2:3e:42:25:
27:99:ce:71:27:ab:0a:cb:96:4e:03:f6:d6:74:78:
d9:c5:96:04:e8:8e:39:54:d9:68:c2:18:ae:3e:e3:
8d:53:f8:e2:88:c0:3e:b5:a5:ad:01:7e:6c:b4:72:
5d:47:c7:d2:21:ab:56:19:e9:f3:bd:a0:9b:d9:c6:
82:ec:cc:f4:e1:6a:af:c7:c4:7b:5a:9f:cf:0a:13:
4a:4a:ff:d3:d3:bb:bd:46:45:10:11:a1:1f:55:a0:
f0:09:3b:85:e0:5b:43:6c:12:cb:61:5a:72:43:0e:
64:69:c6:7c:ec:c9:1c:05:90:21:f1:63:7b:e8:5f:
2c:5b:22:0e:73:da:3a:df:d4:c0:cc:b2:04:08:09:
98:13:5a:2a:b1:54:66:e3:29:31:40:f0:05:f0:f7:
0c:49:7f:37:a1:6a:2b:eb:2f:25:02:4e:f8:04:47:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:3E:34:D7:5A:F9:38:D8:DC:FE:F7:25:01:9B:79:6D:BD:E7:99
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/D00919C0653B11EB8244DA44F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.180.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:15:1d:f7:d4:68:95:41:c6:8e:d8:0f:0d:c4:72:60:d1:96:
f3:ef:bb:f2:b5:ba:e4:e1:d9:2a:d0:14:98:90:ec:3f:3c:07:
70:b0:bd:1d:21:ae:af:29:3d:0b:af:16:34:aa:ae:61:1a:dd:
6b:c9:20:cf:02:1a:2c:93:de:22:75:f9:74:e2:e8:25:61:95:
6d:b9:aa:b1:47:11:68:ee:8e:80:58:55:b5:d3:65:16:0c:29:
71:b6:3f:7d:b4:a6:c2:d5:20:bc:59:d9:df:2e:ab:f8:7a:38:
7b:17:92:01:3a:4d:ee:f9:b4:86:d5:d3:90:5d:ec:f1:b3:be:
37:c4:2f:de:c1:41:40:84:e0:08:7b:e9:4e:53:1c:43:ab:b3:
d0:8a:fe:cd:81:45:9a:66:cd:7c:9a:47:9f:80:89:9f:e4:eb:
aa:6a:53:94:56:f1:f5:f2:4d:a8:d0:f1:98:39:a3:d6:da:1a:
cd:d7:00:86:59:35:fe:26:bb:d2:8c:81:17:f4:2a:eb:3e:c3:
7e:7b:a3:39:b8:12:d2:ba:cf:a8:c0:63:75:81:c8:ea:a7:ca:
5b:17:f9:2f:3b:5b:2a:07:78:6f:30:3d:56:7e:82:2a:e9:25:
28:9d:bb:fe:db:21:d4:d5:20:ce:6c:d9:32:95:bf:c3:71:d0:
57:ad:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org