Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
File: 8645BFF6FE2B11ED9378747C4AD9E6FC.roa (raw, json)
Hash identifier: ypGZy6gZ+HCsFuuHw3CtbOFZY7Y96c+7iYzIGs3OkuE=
Subject key identifier: C3:38:BF:68:01:58:8F:74:00:2D:26:DC:B5:8D:15:11:02:3B:74:FC
Certificate issuer: /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial: 0D
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
Signing time: Mon 29 May 2023 14:17:21 +0000
ROA not before: Mon 29 May 2023 14:17:17 +0000
ROA not after: Fri 29 Dec 2023 14:17:17 +0000
asID: 327765
IP address blocks: 41.211.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Validity
Not Before: May 29 14:17:17 2023 GMT
Not After : Dec 29 14:17:17 2023 GMT
Subject: CN=6474b3f1-79ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:c4:2e:97:5d:8d:6b:14:24:11:90:9f:71:
f6:0b:42:9e:7f:0e:fe:0f:23:a8:53:db:c3:ea:42:
17:a2:f4:ac:17:90:43:c8:de:d5:db:74:c8:c1:aa:
a3:ff:80:6a:70:6d:76:95:9b:a4:44:3d:d4:1b:13:
43:47:d2:00:21:d6:0e:8b:79:2b:63:29:66:e5:be:
a4:0f:d7:6b:f7:83:1e:9d:8f:3a:be:03:2a:66:00:
4d:34:e2:63:2d:88:10:a5:18:87:8a:ff:08:ae:15:
96:16:28:c1:b9:1a:ca:91:93:b5:41:47:e4:7c:5b:
17:88:56:5a:cd:11:3e:31:03:2c:bf:ad:33:d8:a9:
f4:10:d0:b4:ce:d5:72:f2:56:6e:dd:51:f1:91:b2:
2a:ba:7c:e5:05:fe:e3:a5:5c:57:51:f2:f6:14:c8:
74:df:7f:08:29:b0:2c:0e:9a:b7:28:9b:73:ca:94:
2d:b9:c6:ea:37:b0:71:e7:4a:73:05:11:64:d3:b3:
8c:d6:31:06:47:4d:2e:06:a4:d8:ef:b0:a4:e8:57:
cd:60:f5:c4:31:e8:e2:70:18:3c:c3:fc:73:5f:03:
b7:f8:69:63:09:db:53:43:aa:04:0f:f4:a1:f4:57:
4e:80:00:5c:df:53:69:b4:f1:14:4b:11:b8:62:ef:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:BF:68:01:58:8F:74:00:2D:26:DC:B5:8D:15:11:02:3B:74:FC
X509v3 Authority Key Identifier:
keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/8645BFF6FE2B11ED9378747C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.211.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:31:ec:0a:d6:fe:3d:f4:4b:75:ed:84:0c:74:a5:07:cf:41:
7c:c8:05:22:56:2e:d6:ad:06:50:9a:3f:42:b4:79:76:b9:78:
02:1b:40:6b:e8:58:66:ec:35:18:25:f7:b4:ab:73:69:1e:16:
50:b8:30:c4:a0:93:cd:35:f8:84:08:f7:e9:3a:82:8a:58:5c:
41:4d:bc:bf:b9:ba:fa:b2:72:1c:c7:22:12:a4:c1:f9:88:2a:
18:40:6a:e9:64:36:b5:15:48:cd:7c:79:d6:5d:ea:92:86:09:
da:9b:96:55:e0:51:62:4c:dc:8f:3a:34:9f:4f:05:19:14:61:
eb:da:cc:60:0d:b0:95:13:bb:16:24:0a:78:ca:e9:a2:a1:31:
72:2c:99:b5:f1:42:68:f4:a2:c2:00:9a:2d:47:ec:02:61:5f:
0e:98:d5:77:f4:27:dd:f9:da:4e:4a:f7:9a:08:38:c9:fa:b6:
24:ed:f7:dd:ba:5e:19:62:d6:81:40:8c:08:bb:10:f0:d6:c7:
3b:f3:4d:f1:c6:7e:6d:04:28:97:42:fa:b1:0c:9c:ee:c6:ec:
85:34:4a:60:8f:16:96:76:b1:99:7f:15:02:a5:5b:aa:58:2c:
85:fb:5f:ca:94:d1:44:e2:60:5d:b5:0d:7b:29:e3:86:ce:eb:
97:88:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org