Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa
File: ED0033ECB1DC11E9892FF349F8AEA228.roa (raw, json)
Hash identifier: 9mXrCra47C5/p4AQj0Z6osfcEdc8LZ8Bk6RDeLn2nEI=
Subject key identifier: 94:E3:1D:2A:1A:FD:9A:93:24:D7:0B:D1:DF:5B:01:B8:43:C1:94:67
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 74
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:43:24 +0000
ROA not before: Mon 29 Jul 2019 08:43:18 +0000
ROA not after: Wed 27 Jul 2022 08:43:18 +0000
asID: 36916
IP address blocks: 41.221.230.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:43:18 2019 GMT
Not After : Jul 27 08:43:18 2022 GMT
Subject: CN=5d3eb1ac-4333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:fc:94:b5:1f:42:c3:5e:c8:9e:92:d4:7b:
b4:05:8e:ce:07:6d:ac:a4:d3:e2:ba:8e:00:74:26:
b7:eb:2d:31:e1:06:7a:79:82:97:2c:34:f3:31:a6:
b8:b9:ee:5f:7f:13:b7:6d:e3:b8:92:83:48:97:f0:
79:9d:64:d5:cc:e2:3f:4a:cc:d4:33:71:9c:38:35:
81:f6:c8:76:4f:4f:06:dc:28:b3:0c:33:1e:7e:a0:
d7:da:18:a6:86:18:e9:3e:dd:f2:42:6c:bf:c0:7c:
9d:9e:30:e5:db:50:f0:8f:d4:43:bb:6e:ed:97:4c:
01:e6:61:0b:22:6f:ca:2e:ce:67:53:57:0d:5d:8a:
9e:e3:0a:12:21:53:05:8d:4b:b1:a1:72:7e:c3:e4:
25:37:ce:a4:21:ab:9d:15:14:47:e8:ad:a9:79:a9:
d0:0f:69:ba:e7:a8:ef:25:c4:66:68:b1:b6:af:25:
75:15:f0:df:b2:ad:12:82:e6:e1:46:1c:bf:c2:fe:
06:4a:98:f1:3d:7e:ca:4f:6e:7e:e8:30:8f:d6:7d:
b3:3c:97:86:a5:fb:71:b8:1a:df:93:fc:9a:92:2f:
ea:44:1b:35:ca:b5:cf:70:5a:7a:fb:6d:b4:af:f6:
08:44:c3:d6:c0:2d:a2:21:5f:c1:55:f0:0c:4b:2d:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:1D:2A:1A:FD:9A:93:24:D7:0B:D1:DF:5B:01:B8:43:C1:94:67
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/ED0033ECB1DC11E9892FF349F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:2c:19:21:1c:7d:19:e3:bb:c0:ca:27:e6:6b:de:d6:95:54:
4b:db:39:14:bd:03:63:9b:b8:28:93:18:e9:04:88:63:1d:c3:
4e:3a:10:cd:77:0e:8b:65:c9:79:b7:fd:00:88:30:f0:86:5d:
43:e7:10:ee:1c:ff:65:0e:c4:0a:87:6e:6d:98:9b:b4:15:10:
bc:6d:44:7a:fb:94:54:b6:ce:90:37:7d:ce:0f:5a:04:b9:63:
92:d1:15:89:77:1e:01:f5:30:b9:b0:39:4d:4d:54:5e:06:ed:
14:21:64:84:21:b7:b6:31:63:2a:e7:29:cc:e3:f8:34:cb:ce:
e5:b8:dc:33:8a:60:c4:3c:15:d1:98:e9:ab:6a:72:8f:e8:c2:
22:a8:cb:88:2d:b0:e2:2c:55:68:3d:8d:c6:27:7c:61:2d:e9:
eb:32:51:3b:a7:0d:5e:39:88:e4:79:7c:a9:65:a9:5a:b5:da:
20:54:8a:fd:a1:44:2b:e6:25:58:4d:79:af:ff:fd:07:6e:38:
55:12:68:07:9c:0d:18:67:f8:e4:b7:a1:a1:16:a9:f7:74:f9:
a9:6a:49:7a:dc:ac:3c:15:30:b9:e7:c6:8d:7a:21:7f:18:35:
ed:26:be:06:94:94:47:ac:5d:19:c2:cc:41:79:c3:31:ea:4e:
b6:a1:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org