Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/2AD2180297C211ECA5D323915A40D577.roa
File: 2AD2180297C211ECA5D323915A40D577.roa (raw, json)
Hash identifier: 2t2hDY0Iev1ab2rn8V1d/LDuJDNdkOUBce7YB8uTED4=
Subject key identifier: 03:84:9C:87:49:3E:0D:75:35:F5:41:D7:07:66:16:3F:16:A3:66:28
Certificate issuer: /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial: 0661
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/2AD2180297C211ECA5D323915A40D577.roa
Signing time: Sun 27 Feb 2022 11:41:14 +0000
ROA not before: Sun 27 Feb 2022 11:41:09 +0000
ROA not after: Sun 25 Feb 2024 11:41:09 +0000
asID: 37314
IP address blocks: 41.79.20.0/22 maxlen: 22
41.79.20.0/24 maxlen: 24
41.79.21.0/24 maxlen: 24
41.79.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Validity
Not Before: Feb 27 11:41:09 2022 GMT
Not After : Feb 25 11:41:09 2024 GMT
Subject: CN=621b635a-12e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:10:20:e0:31:39:f9:24:a9:9e:11:a0:e0:f5:
0d:11:48:8b:a9:0e:f5:f1:ea:c8:ba:24:a1:5f:46:
e5:20:b4:05:0b:80:32:e6:9c:69:59:fd:e5:47:83:
a2:b8:b9:40:e7:ba:f3:08:b3:9b:a1:8f:8a:43:b2:
59:a3:47:ed:54:0e:5a:89:4f:b0:cc:6f:56:b0:15:
75:95:32:e5:12:14:8b:41:64:f9:39:36:4e:0f:e9:
b8:3f:e1:a0:de:5d:ea:c3:88:43:79:13:4d:07:87:
fa:6d:6b:25:32:70:7d:95:4a:1d:55:c0:d0:06:ca:
f7:bc:44:46:13:af:bb:a0:52:a6:2f:c7:59:e8:26:
56:29:2c:c8:80:bd:95:86:89:bd:ff:82:62:5a:13:
d1:a2:8d:fb:b7:e1:e2:dd:de:75:89:aa:b2:98:fc:
31:84:41:d0:2e:2b:19:d0:c3:7e:16:16:4b:2a:d2:
af:91:97:42:d1:b1:11:c5:ff:6f:33:a2:3b:1c:ec:
9a:c7:b1:a7:50:78:4a:aa:98:e4:70:7d:49:da:39:
d7:8d:b7:74:63:8f:57:d0:b8:01:b3:d5:a3:f7:dc:
18:82:22:df:d2:06:44:54:d8:1e:90:4b:93:89:7e:
8f:dd:8c:b5:99:f6:10:1b:3c:18:0a:d1:a4:e6:18:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:9C:87:49:3E:0D:75:35:F5:41:D7:07:66:16:3F:16:A3:66:28
X509v3 Authority Key Identifier:
keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/2AD2180297C211ECA5D323915A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.20.0/22
Signature Algorithm: sha256WithRSAEncryption
94:36:83:e4:81:52:2b:db:3a:80:9e:cd:ba:f3:3b:f9:bf:de:
72:fb:65:66:2d:37:7c:b5:a9:c3:2d:66:e3:fb:df:0e:d8:73:
af:ec:88:df:0a:5b:5f:bf:de:a4:ef:49:b9:52:93:b0:4d:2e:
c3:ea:46:97:51:1b:c6:fd:9e:2c:57:b2:61:1a:9e:ae:59:68:
8b:36:78:7c:a3:c4:65:06:4e:2f:da:f4:40:d3:42:e5:b2:19:
07:52:1d:4e:9c:21:b0:50:88:9e:ab:92:52:18:3f:c2:78:cf:
ea:1f:db:36:4a:d8:ef:bb:7d:3b:a4:ac:8e:e8:7b:bb:8a:ab:
a1:61:4c:18:c4:b9:91:af:95:eb:ca:4f:f9:d6:2c:49:90:e5:
99:b8:7d:ca:49:fb:0c:05:fc:38:d5:67:9e:7c:ff:dc:fa:bb:
3b:35:91:f5:78:60:cf:75:f5:81:9d:11:66:e6:b4:1d:7b:9d:
bc:8e:c6:8f:9b:ee:45:26:95:43:86:ad:fe:e3:35:04:fe:56:
26:76:b1:ff:1e:0a:c1:e7:d8:6b:c6:4b:aa:d1:97:2d:52:72:
f0:ee:d7:3e:3e:e1:3e:b7:86:7c:61:24:80:ad:19:cb:57:58:
3b:81:d8:4d:38:c6:ac:a6:a6:89:ed:bd:d5:18:e7:b1:d5:3c:
9c:4b:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-ams.rpki-client.org