Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EB3E2F2CB1DD11E98F1CC74AF8AEA228.roa
File: EB3E2F2CB1DD11E98F1CC74AF8AEA228.roa (raw, json)
Hash identifier: HfiyeecUehBg1VnVrimXct5mc5y1s0FoqE0f0FMXwys=
Subject key identifier: 68:98:E8:67:1F:15:D3:DD:D7:7D:2C:71:67:7A:B9:D7:D3:F8:18:25
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 80
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EB3E2F2CB1DD11E98F1CC74AF8AEA228.roa
Signing time: Mon 29 Jul 2019 08:50:31 +0000
ROA not before: Mon 29 Jul 2019 08:50:24 +0000
ROA not after: Wed 27 Jul 2022 08:50:24 +0000
asID: 36916
IP address blocks: 41.223.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:50:24 2019 GMT
Not After : Jul 27 08:50:24 2022 GMT
Subject: CN=5d3eb357-e7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:bd:91:c1:c1:8d:cb:18:0d:32:ff:39:37:
ee:47:2c:d0:bb:be:a8:27:79:bb:09:45:ab:5b:0d:
20:b8:64:dc:af:b2:86:7c:49:16:d1:69:1a:43:94:
a1:f0:b3:cc:9d:57:ee:3b:25:b2:95:5f:e8:91:5b:
03:23:c9:16:4c:a9:bd:3d:ec:31:2c:13:29:aa:7d:
9f:78:34:f2:a5:2d:2b:7f:e0:91:0f:79:30:b4:f0:
86:0d:8a:a1:85:7d:bd:7d:03:8a:33:9a:6e:e7:5d:
6b:14:e7:b3:cc:ff:22:a9:a6:b0:27:26:09:e5:dd:
ce:10:67:aa:79:c2:27:3c:02:41:2f:f5:1d:75:20:
3c:f9:d7:f4:27:9d:20:04:8c:af:ae:01:5d:14:9e:
36:be:1c:26:07:ff:f0:f6:cd:58:ab:ab:ce:f8:a3:
ff:1f:46:6a:3c:08:94:40:85:26:f1:2e:4e:23:89:
57:58:c1:f7:fb:2a:e8:58:c8:de:bf:a7:fa:cb:2c:
4b:fe:fe:60:81:99:36:90:c7:d8:9c:8a:48:86:40:
69:f7:ef:2d:73:2f:83:4d:39:58:23:41:b0:b1:6e:
1c:9b:11:df:c8:a1:a9:68:bc:53:ce:4e:cc:91:f3:
a6:35:ee:71:09:fc:7d:cf:60:b3:f6:d1:2b:d6:03:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:E8:67:1F:15:D3:DD:D7:7D:2C:71:67:7A:B9:D7:D3:F8:18:25
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/EB3E2F2CB1DD11E98F1CC74AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.223.60.0/22
Signature Algorithm: sha256WithRSAEncryption
08:ed:af:95:7b:58:d5:27:3a:1d:60:cc:8a:20:94:cc:d8:c6:
4d:f8:ae:24:93:1a:02:5c:8d:81:1d:23:17:c5:a2:2b:5d:cb:
c3:0b:09:d2:24:40:4d:18:9c:65:a5:7e:63:96:cc:2a:c2:43:
d6:02:0c:10:ef:c2:93:96:84:2f:bf:fa:c6:14:01:2c:6b:8b:
ec:68:9b:d3:fc:3f:d0:26:c5:e0:e3:0f:34:2d:bc:31:62:97:
ec:95:12:db:80:f8:64:56:05:a9:bd:7b:07:9d:f3:67:a1:46:
73:ed:35:8d:bd:c1:1c:4f:d4:e2:d4:d7:ab:18:e1:25:be:8f:
76:1d:5b:ba:8b:10:5d:79:94:95:bb:b5:20:ce:7f:dc:75:db:
31:ab:0f:06:9d:e8:7a:05:9b:fb:ba:15:12:b5:2d:0d:63:88:
70:03:46:e5:57:84:ec:a4:f8:96:b0:f9:94:1d:9e:e6:00:78:
83:53:79:3a:69:6d:76:30:11:c1:8f:9b:72:1e:81:79:5f:b0:
a4:85:f6:ab:3f:f7:6f:9a:27:62:9b:12:5c:a5:8e:9d:d1:4c:
87:5f:6f:16:88:c7:77:8c:ef:31:e1:b0:4c:93:2e:5e:c3:e3:
2c:74:cd:27:28:80:92:66:d6:82:71:a7:86:b5:d1:ee:87:58:
7a:e3:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org