Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/A789716E1DE711ED89AA31B5F1222468.roa
File: A789716E1DE711ED89AA31B5F1222468.roa (raw, json)
Hash identifier: 8VFFpCxQJ4f7p3lrulnIRK3u4/KjGBtKmAoXQhD5rUk=
Subject key identifier: 13:D2:79:E9:CF:D0:91:3B:CF:C6:62:B5:D5:52:46:58:DE:2A:BC:C5
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 0F
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/A789716E1DE711ED89AA31B5F1222468.roa
Signing time: Wed 17 Aug 2022 04:47:10 +0000
ROA not before: Wed 17 Aug 2022 04:47:07 +0000
ROA not after: Fri 31 Mar 2023 04:47:07 +0000
asID: 25818
IP address blocks: 41.202.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Aug 17 04:47:07 2022 GMT
Not After : Mar 31 04:47:07 2023 GMT
Subject: CN=62fc72ce-f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:e1:81:6f:86:5f:d0:9f:b5:c8:b6:47:2e:
5b:29:74:80:bf:5c:ad:89:cb:97:c3:a4:08:c0:c9:
90:ad:5d:f8:c5:dc:23:b4:73:6a:a0:f6:2d:97:30:
66:dd:fc:59:fa:ff:4a:a7:f3:8a:af:f7:bf:3d:95:
34:b3:3d:fe:a0:29:8a:a5:49:eb:3d:89:f5:66:f1:
be:d7:72:3c:e9:ae:2e:44:14:b9:dc:56:f3:f2:df:
e9:f5:1e:d8:9e:76:48:9d:8e:bb:b6:02:fc:4b:cd:
90:b3:1b:27:22:bb:78:3a:b4:c1:61:7e:9a:cf:c5:
99:0d:0f:d6:41:63:a7:b5:7c:da:8d:c4:35:25:05:
59:93:70:2f:f4:93:36:c3:00:79:d7:ee:06:89:70:
65:e0:20:9f:0a:73:14:7f:7e:b0:c6:ee:7a:36:89:
54:4b:21:d8:77:dd:f1:ff:a2:46:9c:54:2c:0c:15:
a4:fa:77:9a:ac:1b:e7:e4:54:f1:50:9e:0f:08:de:
20:7f:84:8e:77:0e:1c:5b:50:73:f5:6e:26:f7:07:
25:9b:bb:b5:12:09:c7:e2:e3:b1:4e:2a:96:39:1e:
7e:81:a9:0f:0e:b9:81:c8:9f:6e:38:57:7b:18:02:
d8:ac:dc:8e:8f:f9:80:70:46:fe:76:43:2f:bb:98:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:79:E9:CF:D0:91:3B:CF:C6:62:B5:D5:52:46:58:DE:2A:BC:C5
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/A789716E1DE711ED89AA31B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.202.32.0/19
Signature Algorithm: sha256WithRSAEncryption
40:e6:87:af:71:6a:be:be:67:f6:ad:fa:38:fb:8f:2b:64:8b:
0c:d1:b0:4c:19:0e:ce:56:98:6a:54:4c:79:cc:06:91:e8:ba:
6f:89:88:12:b5:bf:91:10:64:cc:68:3e:d4:3d:2d:94:82:41:
e5:fc:29:36:76:2c:fa:1d:08:c5:68:ef:12:ff:79:61:f6:f7:
50:c5:dd:4d:0b:f2:0a:5e:49:61:c6:11:64:2e:2a:77:6d:c9:
de:5a:f1:12:b1:ca:02:93:0d:1e:cf:06:35:5f:35:86:65:5b:
e9:51:85:7e:8b:08:a3:ca:34:01:e0:87:ad:c1:04:3f:80:9e:
ab:79:f5:20:e4:00:d5:5a:3a:01:f7:19:cb:38:12:8f:51:3e:
d0:b9:b8:4a:b9:0f:9f:4d:5a:1f:c4:00:2d:1b:ed:ce:e0:99:
49:71:eb:8a:bf:6f:f6:4c:a9:b6:7d:83:df:20:29:cd:b2:4f:
76:b1:ad:7b:2f:88:29:02:3b:22:7a:90:57:ee:f8:22:7b:eb:
ae:12:aa:08:b1:f2:0e:55:b1:db:4c:07:a4:3a:f6:b9:7e:bb:
b9:e5:7c:1e:96:ec:e9:b8:e4:bb:5c:b8:d5:a2:25:0e:bd:7d:
e7:d8:be:f3:d9:98:51:5b:dc:9f:fe:b6:3b:95:7e:79:26:73:
87:bb:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org