Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/9583BC6C91EB11E9A22B927BF8AEA228.roa
File: 9583BC6C91EB11E9A22B927BF8AEA228.roa (raw, json)
Hash identifier: 7JSmm6jVH0dvuIt3PVBcgajUYIUkU92S8oDLr5W4cds=
Subject key identifier: B3:BC:4B:0C:01:A3:EC:0D:5F:B7:60:29:2B:57:0D:1D:F0:1F:A6:3B
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 02
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/9583BC6C91EB11E9A22B927BF8AEA228.roa
Signing time: Tue 18 Jun 2019 17:07:43 +0000
ROA not before: Tue 18 Jun 2019 17:07:38 +0000
ROA not after: Tue 18 Jun 2024 17:07:38 +0000
asID: 37049
IP address blocks: 41.222.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 18 17:07:38 2019 GMT
Not After : Jun 18 17:07:38 2024 GMT
Subject: CN=5d091a5e-7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:fe:ba:f7:0e:a5:6a:62:ff:d2:e9:26:17:
4f:98:8b:6d:1e:3b:95:73:70:79:75:79:52:3e:a0:
91:3c:21:7c:55:6b:86:34:21:ae:38:30:72:8e:7c:
f8:63:96:32:03:b0:16:27:54:0f:3f:d4:aa:1a:d3:
7d:a2:87:6f:6d:b9:91:57:6d:b1:65:b8:00:d3:4d:
57:00:a0:02:63:46:63:7a:b6:2a:91:96:90:7e:0e:
92:24:ed:81:d0:2c:2d:84:e9:c3:48:27:6b:2d:5f:
f3:ed:d5:a3:9d:97:a1:41:8a:72:c9:7b:53:13:42:
c1:fc:01:3f:ac:cb:a2:e1:79:73:8b:2f:5e:b3:c9:
2b:4d:a8:1e:ea:7b:80:ab:f5:4c:c7:00:c3:60:f9:
07:fa:b0:9a:7f:61:2e:64:8e:c7:ef:ac:35:f1:1f:
ed:3c:92:57:cf:7d:75:70:09:32:5b:d0:cf:7c:5a:
da:04:ee:50:e1:fe:1d:cc:68:c0:37:8c:52:bc:53:
bd:d7:0c:f2:4f:63:c0:0d:d6:1e:b8:5d:47:89:5f:
e4:c6:fd:55:2c:93:a1:2f:43:9c:cb:9d:c5:db:b6:
b4:97:cd:64:47:16:df:38:3b:89:c9:aa:cb:cb:8e:
26:6a:0d:41:4c:cb:5a:b9:ee:0b:70:a3:cd:06:83:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:4B:0C:01:A3:EC:0D:5F:B7:60:29:2B:57:0D:1D:F0:1F:A6:3B
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/9583BC6C91EB11E9A22B927BF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.222.137.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cd:43:9b:1e:c3:d0:32:a6:43:1e:13:22:5c:11:0b:f3:3d:
6a:ca:93:e9:19:a1:3d:bf:a6:81:6c:99:66:66:22:ca:1e:21:
f9:82:92:0b:ab:bf:6a:1d:25:b7:5b:3b:6b:79:e5:9e:05:ed:
1d:c0:dc:33:c1:43:0e:a8:14:0f:8c:8b:a7:26:36:fb:22:92:
a4:43:5a:61:84:6f:b3:2e:44:27:1e:c4:46:04:ad:96:7d:e9:
99:1a:2e:91:a5:fa:d6:3c:36:42:54:60:c0:30:05:1a:22:8b:
8c:ab:09:7d:7d:58:66:05:d8:c5:f3:d7:a3:08:d4:2c:32:46:
fc:5f:ac:ed:0d:75:3d:04:c5:78:d5:79:46:71:db:57:e9:e3:
42:ae:12:63:52:c6:e4:a4:b6:ce:7d:67:09:c8:1f:87:81:d3:
bc:2d:61:c2:f4:6f:6e:0a:29:90:81:af:63:8d:52:aa:15:09:
54:a0:17:b3:45:97:18:72:2b:f0:81:99:06:c2:45:1a:c7:bf:
f3:ba:72:48:f9:9d:49:8a:b6:45:22:84:f1:a4:7a:61:58:dc:
45:45:06:8d:20:2f:4d:52:07:30:5d:a7:32:0f:96:ea:bc:96:
ff:d6:53:15:fd:42:9c:d8:1d:cc:7f:4d:f9:f1:8d:a3:d0:ae:
18:90:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 00:30:26 2024 by rpki-client on console-ams.rpki-client.org