Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E38FA8E0B1D911E9A0A54E47F8AEA228.roa
File: E38FA8E0B1D911E9A0A54E47F8AEA228.roa (raw, json)
Hash identifier: nAJKf/CmOghmj5QuCxFglts3KsLwOaiJ8P1Rw9joO1I=
Subject key identifier: B4:55:51:68:67:EA:86:79:7A:7D:CE:F1:40:D8:30:02:98:12:F7:27
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 56
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E38FA8E0B1D911E9A0A54E47F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:21:40 +0000
ROA not before: Mon 29 Jul 2019 08:21:35 +0000
ROA not after: Wed 27 Jul 2022 08:21:35 +0000
asID: 36916
IP address blocks: 41.180.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:21:35 2019 GMT
Not After : Jul 27 08:21:35 2022 GMT
Subject: CN=5d3eac94-d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:2e:d2:58:9f:6a:69:bf:bd:fe:32:4a:ee:
cd:53:be:c9:a8:84:23:0a:68:0e:63:89:b6:fe:60:
8c:a9:93:2f:62:3c:58:f3:ba:d8:a5:c1:d8:27:35:
98:c5:7d:2f:18:3a:a6:a9:f9:e3:33:ac:28:6f:40:
0f:d1:d3:91:c8:73:74:12:c9:f0:f5:52:8b:d5:3c:
1e:e1:24:5c:a6:c6:ed:42:7c:07:ca:5f:de:2e:8e:
c0:7f:b9:ce:78:b7:bf:43:83:6e:b7:09:06:41:35:
86:d0:5f:e1:7a:85:cf:61:a8:a9:c3:71:77:2b:fb:
ed:17:5b:c7:dc:70:7f:f2:ab:10:59:e7:8a:b6:cd:
b4:78:db:d4:0e:bf:99:34:42:d8:6e:90:39:1c:83:
dd:20:9a:88:4d:cf:55:a1:f7:c4:33:5d:4e:70:b3:
5f:81:bf:9a:57:18:81:97:03:b5:6c:25:7c:59:fc:
54:ac:a1:c6:21:38:b3:c0:05:dc:f5:2b:67:49:53:
4b:cf:f6:21:a5:d3:c3:b2:6e:76:65:0b:6d:79:ca:
ae:6e:26:b1:70:f7:9b:39:e7:10:11:67:32:aa:77:
87:c4:76:8b:5c:28:af:c5:ee:48:f0:49:1f:86:7f:
e1:9d:82:30:06:95:8e:da:21:d5:36:10:30:24:84:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:51:68:67:EA:86:79:7A:7D:CE:F1:40:D8:30:02:98:12:F7:27
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/E38FA8E0B1D911E9A0A54E47F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.48.0/22
Signature Algorithm: sha256WithRSAEncryption
79:07:83:03:7f:63:6a:db:0f:98:f3:cc:f4:fd:44:6f:c5:c3:
89:64:67:21:b3:f8:07:bf:60:87:44:3a:16:e6:64:88:da:e7:
97:5a:f3:4c:ff:ea:25:de:fb:aa:52:87:e8:37:a2:0a:d9:17:
c9:e7:49:99:88:cc:22:3d:a0:22:92:07:ed:5b:70:03:60:ed:
eb:2f:cd:ea:a4:a1:68:f1:f0:df:a9:c4:39:ae:e7:03:b3:76:
0c:e4:63:5d:5c:92:3a:08:ff:47:4c:0a:ba:6e:3f:0d:e0:65:
91:3d:b4:43:48:7e:84:64:38:b9:b5:52:98:20:c1:b3:6d:64:
7f:ab:16:08:52:ef:d6:a6:d1:02:8e:48:e3:82:1c:49:6e:29:
3a:e6:5c:f3:97:90:34:94:90:99:93:87:8a:cf:78:e3:99:0b:
0b:ec:b5:85:fd:58:90:1c:ac:7d:80:6a:a8:0a:3a:43:ee:4e:
7e:96:70:41:0c:7d:86:52:0a:49:12:ef:93:ee:69:3f:43:a4:
ee:dd:f2:2e:06:ab:65:3b:d6:f7:4b:33:d1:e9:91:0e:68:f3:
0a:31:de:a2:6f:68:2a:56:da:10:ec:92:68:b5:1b:73:f9:2b:
b1:47:a5:d9:32:01:09:f0:e0:e5:1d:f8:0e:dd:4e:83:d4:29:
56:ef:5a:44
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIBVjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
OUQ2QkFGMTEwLwYDVQQFEyg5NTk3MzNERjU5RTg2RUE3QzIzQjJGQjM3QTZFODQ2
REJCMTg4MjdCMB4XDTE5MDcyOTA4MjEzNVoXDTIyMDcyNzA4MjEzNVowGDEWMBQG
A1UEAxMNNWQzZWFjOTQtZDdmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQULtJYn2ppv73+MkruzVO+yaiEIwpoDmOJtv5gjKmTL2I8WPO62KXB2Cc1
mMV9Lxg6pqn54zOsKG9AD9HTkchzdBLJ8PVSi9U8HuEkXKbG7UJ8B8pf3i6OwH+5
zni3v0ODbrcJBkE1htBf4XqFz2GoqcNxdyv77Rdbx9xwf/KrEFnnirbNtHjb1A6/
mTRC2G6QORyD3SCaiE3PVaH3xDNdTnCzX4G/mlcYgZcDtWwlfFn8VKyhxiE4s8AF
3PUrZ0lTS8/2IaXTw7JudmULbXnKrm4msXD3mznnEBFnMqp3h8R2i1wor8XuSPBJ
H4Z/4Z2CMAaVjtoh1TYQMCSEC5kCAwEAAaOCAm4wggJqMB0GA1UdDgQWBBS0VVFo
Z+qGeXp9zvFA2DACmBL3JzAfBgNVHSMEGDAWgBSVlzPfWehup8I7L7N6boRtuxiC
ezAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhBRUEyMjgvbFpjejMx
bm9icWZDT3ktemVtNkViYnNZZ25zLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFpjejMxbm9icWZDT3ktemVtNkViYnNZZ25zLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjlENkIvQkVGQjQ0RUU4NzlBMTFFOTlGMzkzMzUxRjhB
RUEyMjgvRTM4RkE4RTBCMUQ5MTFFOUEwQTU0RTQ3RjhBRUEyMjgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKbQwMA0GCSqGSIb3DQEBCwUAA4IBAQB5
B4MDf2Nq2w+Y88z0/URvxcOJZGchs/gHv2CHRDoW5mSI2ueXWvNM/+ol3vuqUofo
N6IK2RfJ50mZiMwiPaAikgftW3ADYO3rL83qpKFo8fDfqcQ5rucDs3YM5GNdXJI6
CP9HTAq6bj8N4GWRPbRDSH6EZDi5tVKYIMGzbWR/qxYIUu/WptECjkjjghxJbik6
5lzzl5A0lJCZk4eKz3jjmQsL7LWF/ViQHKx9gGqoCjpD7k5+lnBBDH2GUgpJEu+T
7mk/Q6Tu3fIuBqtlO9b3SzPR6ZEOaPMKMd6ib2gqVtoQ7JJotRtz+SuxR6XZMgEJ
8ODlHfgO3U6D1ClW71pE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org