Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
File: 92227C5A5D4511EE8283E82B4AD9E6FC.roa (raw, json)
Hash identifier: 7KHZRQid2YSIfxETIlfcyaKGdtG18VDnHt3JozX5SrQ=
Subject key identifier: 15:B2:30:FC:9A:AF:1A:25:42:2A:A0:17:C9:AB:35:F3:DB:34:B7:B3
Certificate issuer: /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial: 90
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
Signing time: Wed 27 Sep 2023 14:53:08 +0000
ROA not before: Wed 27 Sep 2023 14:53:05 +0000
ROA not after: Sun 31 Dec 2023 14:53:05 +0000
asID: 327765
IP address blocks: 41.211.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Validity
Not Before: Sep 27 14:53:05 2023 GMT
Not After : Dec 31 14:53:05 2023 GMT
Subject: CN=651441d4-0308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:ab:c7:27:13:8c:ca:2c:3e:37:4f:ee:4c:
4a:ad:ff:9b:24:fd:33:80:85:d2:ea:d0:2f:58:b7:
8e:b3:7f:a4:2d:bb:56:4d:fd:93:c8:48:6f:b2:2f:
36:16:b2:4f:67:e6:59:f9:aa:0d:a9:e3:d8:ea:c5:
c8:b5:9b:7c:11:68:a7:25:ee:c2:57:d3:8a:cc:17:
1e:24:75:fd:1a:43:ee:99:e9:36:4c:7a:41:95:61:
fa:65:ad:42:b8:e8:30:53:4e:35:76:d6:29:aa:3b:
ed:35:da:d3:ef:66:af:fe:72:7f:96:59:36:5e:a6:
4c:e1:20:4f:49:5c:24:96:66:5e:93:7a:3f:c0:35:
ba:5c:8e:41:91:a9:4f:01:7e:6c:cd:a1:5e:a8:76:
02:ff:2b:39:1a:b7:a0:51:cb:75:21:52:bb:63:7b:
3c:b3:b3:b7:6f:eb:e0:08:4e:b4:c9:c4:5d:42:02:
76:a2:fa:2c:dc:6d:96:95:b4:ec:92:58:6d:74:3f:
fb:21:2c:f1:b9:a3:bf:50:a0:19:29:79:f8:99:ad:
3b:70:fe:11:cf:f0:09:1c:b8:b9:8e:ce:25:ac:e0:
6d:fc:b0:60:a2:4c:ef:17:c2:fe:91:0e:55:c8:1b:
23:df:e1:5a:f6:ea:96:bd:18:ec:12:cd:07:c6:a4:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:30:FC:9A:AF:1A:25:42:2A:A0:17:C9:AB:35:F3:DB:34:B7:B3
X509v3 Authority Key Identifier:
keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/92227C5A5D4511EE8283E82B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.211.39.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e0:56:c9:e0:42:a0:7e:45:c4:4e:bb:fc:06:31:28:ec:69:
10:f1:98:b6:1d:aa:ab:ea:15:f9:dd:c8:e6:59:a7:94:33:42:
51:ce:2b:48:32:07:45:04:0d:3c:80:24:97:23:30:34:39:e0:
8d:69:81:c8:62:6a:68:19:a6:a2:4c:22:c9:81:fa:24:2c:c1:
ee:ff:9f:41:fe:91:21:72:74:d3:e5:c0:49:1d:36:f1:05:59:
2d:8c:17:83:0a:ee:bc:e2:69:0a:14:2f:34:b4:29:7e:55:1e:
52:1d:c6:9f:27:e2:3f:56:95:95:b2:b6:05:fe:72:ac:d6:88:
4a:73:ea:b3:20:36:22:0d:52:3a:ae:8d:79:78:26:37:56:c8:
e4:86:b5:2c:e4:09:8a:e2:7b:17:78:5d:57:33:c3:3e:e2:b2:
72:02:11:41:b2:1b:52:ad:92:68:7a:0a:8c:ee:f0:ae:a3:7e:
86:6a:10:df:60:ac:ee:1a:8c:45:6c:ac:a1:2b:73:15:42:1c:
bb:b9:4b:1a:15:7f:ce:59:3f:ee:69:4c:10:94:2b:2f:9d:b2:
0d:b4:d3:ba:27:5c:05:6e:86:63:bc:3a:0e:0f:bd:65:74:01:
05:dd:17:78:53:c5:5b:ba:16:00:02:9b:59:71:0e:d6:90:35:
90:0a:ef:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIzRTFBRjExMC8GA1UEBRMoRDExMERBMzIyRjk5ODVDRkJFQzI4Q0E5Q0U4NTIw
NDQ0ODY2QkEzNzAeFw0yMzA5MjcxNDUzMDVaFw0yMzEyMzExNDUzMDVaMBgxFjAU
BgNVBAMTDTY1MTQ0MWQ0LTAzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsdqvHJxOMyiw+N0/uTEqt/5sk/TOAhdLq0C9Yt46zf6Qtu1ZN/ZPISG+y
LzYWsk9n5ln5qg2p49jqxci1m3wRaKcl7sJX04rMFx4kdf0aQ+6Z6TZMekGVYfpl
rUK46DBTTjV21imqO+012tPvZq/+cn+WWTZepkzhIE9JXCSWZl6Tej/ANbpcjkGR
qU8BfmzNoV6odgL/Kzkat6BRy3UhUrtjezyzs7dv6+AITrTJxF1CAnai+izcbZaV
tOySWG10P/shLPG5o79QoBkpefiZrTtw/hHP8AkcuLmOziWs4G38sGCiTO8Xwv6R
DlXIGyPf4Vr26pa9GOwSzQfGpC/nAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFbIw
/JqvGiVCKqAXyas189s0t7MwHwYDVR0jBBgwFoAU0RDaMi+Zhc++woypzoUgREhm
ujcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyM0UxLzdFM0ZBM0YwRkExOTExRURCRThFRTQyNTRBRDlFNkZDLzBSRGFN
aS1aaGMtLXdveXB6b1VnUkVobXVqYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBSRGFNaS1aaGMtLXdveXB6b1VnUkVobXVqYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjcyM0UxLzdFM0ZBM0YwRkExOTExRURCRThFRTQyNTRB
RDlFNkZDLzkyMjI3QzVBNUQ0NTExRUU4MjgzRTgyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp0ycwDQYJKoZIhvcNAQEL
BQADggEBAGTgVsngQqB+RcROu/wGMSjsaRDxmLYdqqvqFfndyOZZp5QzQlHOK0gy
B0UEDTyAJJcjMDQ54I1pgchiamgZpqJMIsmB+iQswe7/n0H+kSFydNPlwEkdNvEF
WS2MF4MK7rziaQoULzS0KX5VHlIdxp8n4j9WlZWytgX+cqzWiEpz6rMgNiINUjqu
jXl4JjdWyOSGtSzkCYriexd4XVczwz7isnICEUGyG1Ktkmh6Cozu8K6jfoZqEN9g
rO4ajEVsrKErcxVCHLu5SxoVf85ZP+5pTBCUKy+dsg2007onXAVuhmO8Og4PvWV0
AQXdF3hTxVu6FgACm1lxDtaQNZAK74I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org