Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/0313F22C17D411EC9C48D918D8A014CE.roa
File: 0313F22C17D411EC9C48D918D8A014CE.roa (raw, json)
Hash identifier: A+wwEBqRaeUgoCWN/iAAkynuOKX/fRvUxe1CKoiRB8Y=
Subject key identifier: A0:A3:6E:01:91:15:9C:C5:F1:B4:C0:33:F9:7D:49:4C:49:D7:03:55
Certificate issuer: /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial: 05
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/0313F22C17D411EC9C48D918D8A014CE.roa
Signing time: Fri 17 Sep 2021 16:26:29 +0000
ROA not before: Fri 17 Sep 2021 16:26:25 +0000
ROA not after: Thu 31 Mar 2022 16:26:25 +0000
asID: 24691
IP address blocks: 41.207.160.0/19 maxlen: 24
196.168.0.0/14 maxlen: 24
197.148.96.0/19 maxlen: 24
2c0f:f578::/32 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Validity
Not Before: Sep 17 16:26:25 2021 GMT
Not After : Mar 31 16:26:25 2022 GMT
Subject: CN=6144c1b5-3dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:ef:7c:d6:cf:36:f7:eb:e2:6e:f2:89:c4:
97:de:a7:eb:b2:1e:31:00:77:7c:46:4b:9b:53:a9:
a7:74:46:8f:53:04:19:b0:cd:b2:89:23:ea:96:70:
8d:51:88:dd:42:b7:8e:32:37:62:12:3f:f8:f3:01:
13:26:ab:f9:35:25:57:cc:6d:b1:fb:9a:98:93:ad:
32:9e:26:e3:e4:77:7f:03:68:a0:68:79:db:83:0b:
63:c9:98:92:1c:f0:0e:10:a2:77:51:f5:63:23:fb:
da:7d:23:08:36:16:69:cd:d6:ac:0d:b9:f5:94:02:
af:a5:b0:14:1c:7a:76:2d:fe:b6:4e:ed:83:cb:5c:
83:4a:f0:5b:9b:8b:58:57:9b:59:8f:93:b3:63:3d:
16:c9:8b:50:69:04:28:c0:85:74:19:c9:00:f3:fd:
4c:10:84:c4:13:a5:55:9f:ad:73:56:04:17:53:9a:
58:bb:af:9e:84:18:eb:12:f7:b5:5e:e5:e9:46:9e:
f8:71:75:be:ac:c0:d2:d8:79:c1:ef:4c:6b:44:45:
2c:26:5c:07:71:37:cd:4b:cc:54:ad:00:20:05:6b:
19:12:ee:1a:b8:08:4c:14:b1:2a:63:5a:d6:9b:0a:
e0:03:09:6e:7c:35:a2:d6:ce:4b:70:02:6a:c1:04:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:6E:01:91:15:9C:C5:F1:B4:C0:33:F9:7D:49:4C:49:D7:03:55
X509v3 Authority Key Identifier:
keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/0313F22C17D411EC9C48D918D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.207.160.0/19
196.168.0.0/14
197.148.96.0/19
IPv6:
2c0f:f578::/32
Signature Algorithm: sha256WithRSAEncryption
4b:39:b4:f3:bc:09:2e:8a:a5:ce:55:ee:a5:1f:1e:7f:4e:d3:
38:af:2d:80:93:db:89:38:9f:23:54:f7:fb:bf:b2:0b:37:26:
2e:44:41:62:b0:dc:0e:69:68:87:68:c2:88:0b:25:ff:d6:4f:
43:c8:21:fa:26:4c:43:9b:70:94:3e:e4:82:a4:fd:ec:bd:ef:
f2:20:a3:dc:ae:72:8f:94:c2:c3:2f:c5:ba:2f:3e:86:9c:ae:
4d:40:dd:8d:19:b9:b7:8f:b4:34:a9:54:20:d1:16:53:22:06:
7b:78:c9:7e:61:a6:f0:cf:45:60:c5:47:a7:e9:9d:4b:5f:18:
e8:7c:07:10:8c:49:76:78:85:6f:1c:2a:72:ee:9c:94:21:a9:
9d:1d:3b:6b:50:5e:a4:87:cf:10:ba:22:6a:eb:5a:a8:d5:f3:
73:60:2e:88:92:60:6c:6d:18:29:78:58:87:65:85:03:4d:56:
aa:38:4f:ef:b2:27:ba:6a:b5:e7:a3:7b:1c:29:c8:55:f3:3c:
19:ea:2c:20:f8:3f:35:15:61:45:53:30:ec:3c:30:c9:1f:ba:
04:15:ab:f1:f2:93:16:e8:52:1b:df:c1:3f:c1:02:35:dc:bb:
cd:ef:03:b6:bd:18:94:02:11:f0:7a:62:08:1e:05:e2:82:e8:
be:9b:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org