Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/DCDCD3D6211E11ECA51E4F30D8A014CE.roa
File: DCDCD3D6211E11ECA51E4F30D8A014CE.roa (raw, json)
Hash identifier: lJgJ9Z7HFRaICyh4hYS2mvvuO1rTQ1P8mZK6/Ew82gE=
Subject key identifier: B0:54:6C:39:4F:0B:4E:62:12:CF:78:3E:78:C1:11:5E:73:0E:A5:0E
Certificate issuer: /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial: 04
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/DCDCD3D6211E11ECA51E4F30D8A014CE.roa
Signing time: Wed 29 Sep 2021 12:14:58 +0000
ROA not before: Wed 29 Sep 2021 12:14:54 +0000
ROA not after: Fri 29 Sep 2023 12:14:54 +0000
asID: 37443
IP address blocks: 41.78.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Validity
Not Before: Sep 29 12:14:54 2021 GMT
Not After : Sep 29 12:14:54 2023 GMT
Subject: CN=615458c2-4486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:50:77:5d:a0:47:88:cb:58:3e:00:29:7d:
9a:13:03:1d:ec:f3:70:5f:45:c2:2c:cd:39:db:58:
65:b2:ab:2f:73:e4:d9:57:d8:91:e3:36:58:3d:47:
24:c6:ec:58:25:f9:40:66:f3:e1:40:25:e5:21:e9:
0f:9f:1d:01:b6:62:6a:83:f7:ad:46:6b:29:3b:30:
53:97:b8:65:7a:c5:5b:9a:82:84:d8:dd:cf:56:14:
47:e7:5b:bc:21:ff:03:78:3c:d1:9b:8f:bc:30:6e:
e9:16:a8:77:44:95:12:ed:c4:75:01:f7:04:5c:be:
de:30:76:70:07:79:2a:6a:8d:2b:f2:02:ce:ea:57:
41:dd:d3:88:85:08:80:31:f4:a5:8f:fe:cc:0a:7d:
5d:a0:aa:75:61:a3:c6:bf:db:05:20:45:41:f0:e2:
ce:52:56:45:ce:9c:ba:98:b8:57:1b:24:d2:0e:11:
88:ab:e6:6c:78:5b:20:0a:88:02:da:ab:93:0f:04:
0d:05:98:0d:28:3d:00:23:c2:f5:4a:08:07:9a:a8:
dc:e3:86:49:8c:de:10:3f:e6:73:e0:48:5e:30:e7:
9a:26:35:e6:90:4e:3a:dc:7d:06:aa:01:72:5c:cc:
0f:b1:c7:c9:0c:fb:e4:04:ba:7a:8b:ff:22:17:0d:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:6C:39:4F:0B:4E:62:12:CF:78:3E:78:C1:11:5E:73:0E:A5:0E
X509v3 Authority Key Identifier:
keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/DCDCD3D6211E11ECA51E4F30D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.224.0/22
Signature Algorithm: sha256WithRSAEncryption
93:52:e0:7f:ed:8d:96:0f:1c:32:08:f2:f2:c4:4a:8f:be:b8:
de:33:28:14:84:6b:7a:38:dd:18:2a:ab:e7:cf:27:bf:78:63:
90:fb:15:de:70:d4:c9:d1:6e:eb:39:ce:98:bf:00:e2:0c:91:
07:5c:af:5e:ce:15:1e:a6:41:e8:34:97:19:e7:8c:93:2e:78:
bc:d6:89:fe:f4:d0:b3:8b:99:41:a9:be:ab:a5:a3:4c:a7:69:
14:23:01:6f:23:29:87:b5:11:fd:81:f1:02:2a:aa:41:8b:e1:
03:09:eb:c0:36:52:d9:59:0e:5c:74:b1:ad:9f:b8:15:d4:8b:
85:4b:64:c2:42:c1:94:65:e0:e8:ec:8b:e4:bf:dd:08:ab:a5:
61:c6:38:19:e1:e7:b6:42:b7:12:3f:70:55:c1:47:0c:fc:39:
2c:29:f4:7e:8f:f1:77:14:03:b9:e4:d7:2e:5a:9b:0a:a1:44:
63:72:81:39:03:6b:3c:a3:9b:5b:87:7d:ff:90:38:70:fd:22:
ad:83:e7:00:18:20:0a:19:bf:ae:80:9a:2a:fd:1f:70:a6:c5:
ae:59:a8:a1:a7:bb:30:59:7c:b3:b6:b9:00:2d:14:ca:b5:2d:
41:4b:89:b8:12:a9:d6:74:9e:ce:b6:f0:91:dd:53:88:d0:fb:
9b:1c:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org