Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B984D458FADC11EDB9A99B7A4AD9E6FC.roa
File: B984D458FADC11EDB9A99B7A4AD9E6FC.roa (raw, json)
Hash identifier: hMByT29ddCTx8llb6xZFyK0OegVAtXRuFwPS2s13KWk=
Subject key identifier: 21:E9:CB:9C:2A:15:04:53:AC:2E:D7:C6:F7:77:6C:45:B9:43:D6:7B
Certificate issuer: /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial: 03
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B984D458FADC11EDB9A99B7A4AD9E6FC.roa
Signing time: Thu 25 May 2023 09:15:43 +0000
ROA not before: Thu 25 May 2023 09:15:39 +0000
ROA not after: Wed 31 May 2023 09:15:39 +0000
asID: 327765
IP address blocks: 41.211.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Validity
Not Before: May 25 09:15:39 2023 GMT
Not After : May 31 09:15:39 2023 GMT
Subject: CN=646f273f-6dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:27:58:b3:59:e0:69:b3:f8:a7:de:11:76:
b7:73:05:82:c4:2a:43:c7:71:85:3a:fd:20:0c:0a:
92:4b:30:44:ca:12:bf:bf:b5:ab:cd:5c:5b:58:94:
46:75:92:39:95:39:9e:13:87:ad:57:2b:dc:c1:f2:
4d:4a:f4:fb:81:4c:36:fe:c8:4e:cc:0a:1d:75:88:
21:0d:4a:f8:bd:81:23:4b:1f:38:62:f9:c5:f5:c8:
7e:15:26:62:70:8b:46:02:67:19:9d:e6:30:b6:cb:
4b:f8:24:42:a9:38:1c:b5:2e:5f:2d:28:37:ff:f5:
ba:35:f6:9a:43:9d:aa:3d:23:c1:f0:f9:27:d9:ec:
19:e9:24:28:67:5b:90:7a:40:70:06:a5:e0:5f:29:
4f:72:66:14:00:f8:28:16:52:fa:da:fa:60:02:9d:
da:d9:8e:18:c3:ae:8b:bd:96:0a:55:7c:2b:eb:5d:
de:c7:7a:bd:3c:57:c3:11:ae:4c:dd:ad:db:f2:e0:
2c:ea:54:e8:07:c9:5b:22:52:b7:35:52:3d:ee:52:
b3:66:96:21:cf:6b:2e:99:21:ba:91:f8:27:42:3e:
2a:21:eb:72:01:ab:b3:97:18:c9:03:dd:84:49:9e:
8d:79:ae:bc:a6:9f:72:64:a0:56:d6:20:04:89:93:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E9:CB:9C:2A:15:04:53:AC:2E:D7:C6:F7:77:6C:45:B9:43:D6:7B
X509v3 Authority Key Identifier:
keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/B984D458FADC11EDB9A99B7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:b1:c7:51:a3:d9:23:31:e7:c1:77:a7:8f:41:e0:e8:55:9c:
31:eb:c4:c0:94:78:6f:1a:fd:47:7e:f0:3c:50:81:40:2a:e8:
54:72:2d:73:da:99:62:94:ae:2d:3d:fe:9e:57:53:b0:f9:66:
07:07:a6:32:91:e4:6c:bc:20:e3:e7:9f:e7:40:33:7e:46:12:
08:25:09:7d:2e:66:52:d0:6d:6a:82:e2:d6:da:c5:ca:ff:35:
d2:fd:bb:e3:fc:24:ab:4a:b8:df:0d:0f:a6:c8:66:d6:5e:0f:
dc:81:81:67:50:a9:fb:40:a7:be:3d:da:68:61:c2:a2:b1:51:
73:01:cc:d1:1b:8d:3e:c0:ea:cd:be:84:94:74:f4:d1:4a:89:
76:a5:74:7e:da:b4:2d:4f:e2:42:6d:fe:a3:fb:8d:4d:50:f2:
6a:52:07:37:4a:00:ca:1e:1a:ae:33:52:04:6a:7d:e4:4a:c8:
01:8b:3e:fb:08:8d:a9:60:50:9a:b7:49:7b:7c:4a:21:98:04:
a0:4a:df:2f:d3:24:6d:02:10:17:88:12:d8:d9:8c:d2:39:94:
ec:79:0c:43:1f:3e:fb:a7:96:af:8b:64:b4:f3:cc:2f:c9:81:
63:2a:54:88:4c:2e:58:7a:dc:20:47:05:a7:56:e3:ee:b5:0f:
65:98:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org