Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DFB48AC4B1DE11E98CA97A4BF8AEA228.roa
File: DFB48AC4B1DE11E98CA97A4BF8AEA228.roa (raw, json)
Hash identifier: gonyoDywyZNzJrIgy+1ivfgyYI+j/oCZCecEq/HXnPk=
Subject key identifier: 4D:A2:FA:86:D0:EB:8D:44:AE:D4:2B:3F:5C:51:66:30:B8:6E:B7:29
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 84
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DFB48AC4B1DE11E98CA97A4BF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:57:21 +0000
ROA not before: Mon 29 Jul 2019 08:57:16 +0000
ROA not after: Wed 27 Jul 2022 08:57:16 +0000
asID: 36916
IP address blocks: 41.223.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:57:16 2019 GMT
Not After : Jul 27 08:57:16 2022 GMT
Subject: CN=5d3eb4f1-08cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:8a:44:ef:fa:5f:25:e5:32:f1:43:4b:cc:
7c:44:4e:e7:d6:20:39:cf:81:1d:b5:51:a5:d7:ba:
47:37:3b:e2:fb:86:45:4e:07:2d:c0:b2:5d:8b:1a:
9f:aa:8a:c4:32:68:cc:f9:39:db:8d:5f:22:f7:ac:
a6:97:ef:d4:80:76:8c:ad:fe:6d:55:32:e5:09:4e:
ab:ec:3d:44:15:b4:3f:32:3a:74:dc:0a:db:2a:e7:
67:ad:17:56:36:6d:ef:0b:60:28:97:43:e6:dc:d8:
72:7b:c1:e2:c6:c4:59:d0:eb:6a:7a:6e:2c:bd:73:
c9:de:67:7a:cb:5e:ba:95:c8:e0:d6:8e:a0:96:e2:
72:6b:e4:30:3e:eb:38:db:fe:7e:ea:0e:1f:1a:c2:
10:0d:0b:c0:ec:a8:ad:60:17:fa:3f:c0:62:62:94:
38:0f:fa:8e:fb:9a:e2:22:21:b8:2e:26:6a:f8:38:
7b:8a:83:bd:bb:8e:ab:b5:d3:75:48:57:35:e6:b5:
89:59:9a:0f:71:45:ef:ab:5e:36:81:82:e9:5f:ea:
72:4a:62:87:58:c3:85:f3:9c:88:38:d7:b2:c3:01:
dc:49:15:c1:57:0f:27:e9:85:9f:6b:3e:d0:87:27:
46:e7:28:7a:66:6e:aa:4f:86:79:94:36:65:d5:3c:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:FA:86:D0:EB:8D:44:AE:D4:2B:3F:5C:51:66:30:B8:6E:B7:29
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/DFB48AC4B1DE11E98CA97A4BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.223.63.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1b:9f:3c:bf:55:7d:9d:48:0c:a4:34:f0:6e:28:6d:c7:f7:
48:bd:b0:09:fe:32:c4:28:83:60:a8:cd:29:f2:9f:4d:9c:da:
ec:e5:eb:31:fe:46:a2:2a:09:1c:93:a4:de:01:6b:23:45:a9:
2b:17:23:e8:be:08:54:6f:ee:e7:69:f5:bb:8f:08:8b:1a:ca:
a8:a3:2e:52:f8:3c:ac:1e:a1:7b:27:dc:c2:25:b2:c4:9a:ae:
74:cd:9c:05:23:7b:22:dc:4a:36:04:d9:fc:0d:d9:27:91:09:
a4:10:a3:8b:2d:cd:dc:47:ff:85:2b:d7:4f:26:5c:3c:98:7b:
b7:aa:53:41:70:c5:04:fe:bf:82:ef:4e:68:89:1e:44:81:b2:
64:bc:26:f1:46:c4:b4:08:42:26:2b:cb:c2:e8:03:fe:31:33:
2b:69:f9:51:47:2b:8a:7c:3f:a5:b9:84:c0:67:ab:1b:7b:2f:
a3:ed:a5:8c:8b:29:1d:5e:e8:a4:40:89:30:c1:ff:8e:d9:19:
67:9e:0b:f6:ca:aa:09:f3:22:ab:bc:d4:d4:20:96:22:0d:4d:
86:21:91:d1:e9:95:d0:95:61:33:9a:b1:52:86:a3:4f:a9:33:
8a:95:c0:4f:31:c0:66:32:dd:c7:e3:fb:fc:ae:90:7a:cb:31:
eb:27:90:c1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBRjExMC8GA1UEBRMoOTU5NzMzREY1OUU4NkVBN0MyM0IyRkIzN0E2RTg0
NkRCQjE4ODI3QjAeFw0xOTA3MjkwODU3MTZaFw0yMjA3MjcwODU3MTZaMBgxFjAU
BgNVBAMTDTVkM2ViNGYxLTA4Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCvYpE7/pfJeUy8UNLzHxETufWIDnPgR21UaXXukc3O+L7hkVOBy3Asl2L
Gp+qisQyaMz5OduNXyL3rKaX79SAdoyt/m1VMuUJTqvsPUQVtD8yOnTcCtsq52et
F1Y2be8LYCiXQ+bc2HJ7weLGxFnQ62p6biy9c8neZ3rLXrqVyODWjqCW4nJr5DA+
6zjb/n7qDh8awhANC8DsqK1gF/o/wGJilDgP+o77muIiIbguJmr4OHuKg727jqu1
03VIVzXmtYlZmg9xRe+rXjaBgulf6nJKYodYw4XznIg417LDAdxJFcFXDyfphZ9r
PtCHJ0bnKHpmbqpPhnmUNmXVPGqZAgMBAAGjggJuMIICajAdBgNVHQ4EFgQUTaL6
htDrjUSu1Cs/XFFmMLhutykwHwYDVR0jBBgwFoAUlZcz31nobqfCOy+zem6EbbsY
gnswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4QUVBMjI4L2xaY3oz
MW5vYnFmQ095LXplbTZFYmJzWWducy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xaY3ozMW5vYnFmQ095LXplbTZFYmJzWWducy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY5RDZCL0JFRkI0NEVFODc5QTExRTk5RjM5MzM1MUY4
QUVBMjI4L0RGQjQ4QUM0QjFERTExRTk4Q0E5N0E0QkY4QUVBMjI4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACnfPzANBgkqhkiG9w0BAQsFAAOCAQEA
lRufPL9VfZ1IDKQ08G4obcf3SL2wCf4yxCiDYKjNKfKfTZza7OXrMf5GoioJHJOk
3gFrI0WpKxcj6L4IVG/u52n1u48IixrKqKMuUvg8rB6heyfcwiWyxJqudM2cBSN7
ItxKNgTZ/A3ZJ5EJpBCjiy3N3Ef/hSvXTyZcPJh7t6pTQXDFBP6/gu9OaIkeRIGy
ZLwm8UbEtAhCJivLwugD/jEzK2n5UUcrinw/pbmEwGerG3svo+2ljIspHV7opECJ
MMH/jtkZZ54L9sqqCfMiq7zU1CCWIg1NhiGR0emV0JVhM5qxUoajT6kzipXATzHA
ZjLdx+P7/K6Qessx6yeQwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org