Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/5839AB322EEE11EFBEA57B62762E951A.roa
File: 5839AB322EEE11EFBEA57B62762E951A.roa (raw, json)
Hash identifier: iR8VM79DR3bZbxSWCNjtnmCZ6pQBgEnmN0PBziLA4A0=
Subject key identifier: E7:EC:1F:C2:AF:06:7D:2E:95:9E:69:3E:96:14:E2:A9:ED:61:10:9A
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 04
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/5839AB322EEE11EFBEA57B62762E951A.roa
Signing time: Thu 20 Jun 2024 10:17:49 +0000
ROA not before: Thu 20 Jun 2024 10:17:45 +0000
ROA not after: Tue 25 Jun 2024 10:17:45 +0000
asID: 198381
IP address blocks: 41.188.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF
Validity
Not Before: Jun 20 10:17:45 2024 GMT
Not After : Jun 25 10:17:45 2024 GMT
Subject: CN=667401cd-686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:06:d6:e4:7b:6e:4f:f0:18:27:5c:49:b7:
6f:17:17:6c:bf:0a:6f:c3:4c:8f:b5:18:7c:aa:ae:
10:05:52:d4:09:fd:72:aa:33:34:54:d1:c8:d1:a8:
5d:24:83:fc:37:4f:21:e3:22:9b:6c:d8:8c:29:81:
15:77:41:1f:e2:ef:5c:a5:51:7f:57:ae:e2:93:8a:
b0:99:84:54:26:08:d3:fb:60:ea:fc:dc:de:7f:86:
a2:80:30:5e:79:88:9a:a1:31:68:27:6d:14:22:08:
02:43:ec:ce:38:65:a4:82:4c:54:10:fb:21:d9:00:
71:ad:2d:d8:1b:5c:17:0e:b4:fc:d3:9a:75:f7:18:
00:48:da:2f:43:54:52:8a:ab:9d:b6:ee:d5:c4:40:
a2:f5:81:7b:8d:38:93:8b:aa:02:08:e1:12:18:3a:
dc:34:97:0b:c4:d3:34:76:49:c8:db:6f:c7:98:fc:
5a:12:ff:08:62:92:5b:26:16:17:f2:e2:e4:61:9d:
cd:3c:94:3f:44:99:bc:ea:c8:9d:bd:46:13:4d:88:
49:f4:4a:33:b3:4b:33:b4:5e:43:06:cb:30:ad:97:
e8:32:d1:8b:eb:14:c6:c2:6d:1b:39:b9:ed:67:81:
58:66:1a:5d:6e:cc:72:7b:b8:3e:d5:95:7a:8a:5d:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:1F:C2:AF:06:7D:2E:95:9E:69:3E:96:14:E2:A9:ED:61:10:9A
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/5839AB322EEE11EFBEA57B62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.188.168.0/24
Signature Algorithm: sha256WithRSAEncryption
af:05:70:60:fd:c1:38:8a:7c:e8:9a:c2:62:f2:56:c7:9b:8b:
f9:43:0a:39:da:c6:7e:9b:4d:20:c6:5c:32:8e:3c:9f:49:99:
e1:ba:10:9a:47:78:72:d7:4a:b5:36:8a:b0:c4:94:ea:6d:69:
dc:9b:7b:7e:c6:26:96:46:c3:26:81:bb:4b:61:dd:60:db:8b:
32:4e:10:87:5f:6b:ed:ca:a7:32:8e:8b:db:40:ab:a8:36:dc:
88:cb:20:33:b6:52:76:ad:6e:f0:f5:ed:6c:c6:fe:3e:de:c4:
67:83:8d:71:7e:8a:6e:ee:c4:bf:ec:42:81:f9:fe:cd:ca:9d:
eb:74:b6:0f:da:33:34:f0:cf:cc:40:46:92:f5:e7:5e:eb:c4:
7c:87:d1:a7:0c:6b:92:f6:d0:00:2d:4b:8e:94:b8:98:9e:82:
b8:b8:ef:c9:85:6b:4b:14:15:76:39:f0:9a:94:d8:68:3e:0a:
dc:c8:fe:72:08:3b:40:64:8b:bf:6e:9f:ff:69:ce:fc:4a:8b:
ba:fc:b5:ab:70:85:a8:59:e4:af:60:4a:06:59:2e:bf:fb:e7:
8d:c8:23:45:15:cd:1f:f4:f1:43:56:8d:ff:73:15:6b:90:fa:
cf:87:63:d7:7a:5a:97:7f:fd:11:90:cc:1c:64:7f:82:27:33:
39:ff:1b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:07 2025 by rpki-client