Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
File: 3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa (raw, json)
Hash identifier: 2zCkWYptTtvNHjlc41VS/S3roHukIhVjl9rmfDyOico=
Subject key identifier: C0:C0:EF:EB:BF:C2:EF:FA:50:48:67:15:30:B3:92:47:A2:B1:70:EE
Certificate issuer: /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial: 0B
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
Signing time: Mon 29 May 2023 14:15:10 +0000
ROA not before: Mon 29 May 2023 14:15:05 +0000
ROA not after: Fri 29 Dec 2023 14:15:05 +0000
asID: 327765
IP address blocks: 41.211.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Validity
Not Before: May 29 14:15:05 2023 GMT
Not After : Dec 29 14:15:05 2023 GMT
Subject: CN=6474b36e-cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:14:30:fa:b9:4a:a3:9a:bb:fc:12:38:d8:
ab:21:5c:e7:c9:39:04:77:e2:37:1f:a8:61:de:75:
bd:c8:78:fb:84:99:ff:db:1b:d8:46:bc:ca:4a:0d:
3e:21:d3:d2:9b:c5:0c:83:d3:0c:7b:1a:2a:4e:e9:
dd:23:2e:52:a4:01:e6:24:48:c6:d9:11:71:73:57:
49:5f:df:d1:28:f2:ce:a6:fd:5b:db:63:0b:d5:4d:
82:8e:99:0b:a5:aa:72:a2:fd:6a:e5:6e:3e:da:9d:
e9:d1:c8:b6:53:75:e0:72:de:81:b1:8f:2f:9d:68:
8b:41:a7:23:e7:03:a7:0f:b3:4b:f6:57:d8:00:bb:
bd:f2:5f:f4:f5:92:42:84:03:c6:87:0c:2a:0d:0f:
a5:4d:9d:75:3e:f6:e1:1a:5f:b0:6b:68:5e:90:17:
b6:bb:75:6e:7e:16:9a:5c:f6:db:5f:e2:5f:c9:e9:
c0:9b:72:d7:34:c5:ad:97:6e:fe:2d:74:aa:30:20:
64:0d:ca:62:3c:ca:81:f2:0c:f1:e6:ce:56:af:d3:
cb:ef:1e:7b:ff:1c:b9:d9:92:c3:75:d8:4a:a5:a1:
12:74:72:58:ce:7a:04:41:6f:dc:15:df:c7:f3:30:
f2:48:10:45:d0:a3:68:dc:3f:65:2c:51:09:47:6c:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C0:EF:EB:BF:C2:EF:FA:50:48:67:15:30:B3:92:47:A2:B1:70:EE
X509v3 Authority Key Identifier:
keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/3844DCA6FE2B11EDB1D48F7B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.211.36.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d9:f3:78:b2:a4:2d:c0:24:50:49:00:1b:bf:4d:b8:65:d8:
62:69:b3:0e:17:d8:17:59:3b:05:19:7d:e8:89:3d:c0:66:42:
b6:3e:1a:b5:4d:74:e6:10:0f:e3:a4:cf:e4:3d:20:d9:2e:8f:
36:03:10:40:6d:96:03:04:43:61:79:ae:74:6d:0e:9f:59:b6:
99:82:24:d5:e3:d5:74:5a:ca:15:9d:51:ad:ea:06:cc:e3:f6:
9a:c4:48:46:88:2a:06:af:4a:eb:79:a8:8a:2f:05:e8:96:ef:
64:c7:a2:17:c0:27:38:fb:d4:29:3e:65:f4:78:19:8f:f0:ea:
32:f1:2a:ef:ad:e9:d7:22:b1:88:62:90:f0:a2:e2:41:83:f0:
e3:b0:f9:86:5e:d8:79:c7:86:2b:6d:36:27:2b:da:75:92:15:
54:f9:c7:c2:1a:04:cf:6d:b9:a2:52:f9:5f:d0:cd:f8:af:4e:
b3:7f:26:b0:46:ba:86:6e:a0:fc:14:64:6d:48:ba:64:c8:37:
8f:c8:e8:3d:c8:c0:db:09:ec:32:c0:56:43:cf:b2:74:80:57:
34:6e:45:a7:f7:6d:a5:c8:b8:3e:09:a6:ef:e9:0d:9a:c9:07:
88:f5:50:52:9f:2d:a5:a5:f8:62:2e:ab:16:01:a0:d7:ed:92:
8c:31:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org