Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
File: 18A7F1D0964E11EC8B6BA0C95A40D577.roa (raw, json)
Hash identifier: 2Mptep+Qer/V+ORMBN6xChMmaTz962QI5/FQ6qKQozY=
Subject key identifier: 36:5D:51:D5:0E:6C:74:96:CD:EB:2F:F6:7A:E7:08:FC:4F:D0:42:32
Certificate issuer: /CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Certificate serial: 05
Authority key identifier: 79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
Signing time: Fri 25 Feb 2022 15:17:51 +0000
ROA not before: Fri 25 Feb 2022 15:17:47 +0000
ROA not after: Thu 30 Mar 2023 15:17:47 +0000
asID: 37187
IP address blocks: 41.75.112.0/20 maxlen: 24
41.190.92.0/22 maxlen: 24
41.217.216.0/22 maxlen: 24
197.211.96.0/19 maxlen: 24
2c0f:fd50::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBC36AF/serialNumber=792CBC37D744D884B60EC447EA2AC7E4CDB22D7D
Validity
Not Before: Feb 25 15:17:47 2022 GMT
Not After : Mar 30 15:17:47 2023 GMT
Subject: CN=6218f31f-7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:6a:05:b6:53:9f:5c:d7:ef:f1:52:76:31:
2b:61:9c:bd:ca:94:f7:ea:91:cf:03:8b:6d:7e:f0:
40:a3:ad:19:39:04:1b:98:cb:78:f1:e7:fb:5d:99:
69:18:40:ad:9a:30:7c:d8:9d:9f:0d:95:b8:33:c6:
2d:69:3a:66:99:9b:3e:7b:f0:77:5e:2b:59:ca:b6:
90:4c:be:9e:21:4d:b4:fa:7e:3e:ea:68:27:76:22:
7b:66:9b:e8:1e:f3:03:60:70:82:0d:17:76:fc:2c:
4d:81:25:cd:2e:1d:db:55:61:c0:da:ec:50:8c:da:
63:de:36:fc:2f:b7:24:6a:58:86:df:ad:ae:47:13:
ba:f7:d9:f9:ef:36:cf:69:20:25:e8:4e:ed:6f:d1:
5e:24:21:d5:03:1b:5a:4f:18:9c:b0:d7:83:1a:66:
ba:ad:9e:55:ed:31:1f:d7:d4:93:0d:4d:87:13:8c:
88:2d:f9:aa:79:a3:2d:eb:3d:1e:18:67:d6:d5:de:
8c:b1:df:aa:94:25:7e:d2:7c:df:29:d6:ae:32:94:
f0:34:28:dd:80:04:d0:9b:44:bb:59:d7:67:e5:2b:
86:e3:9c:48:df:de:f0:34:7f:30:cd:6f:f7:21:29:
62:f0:00:10:5d:1d:72:53:c3:03:0c:44:85:e9:91:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:51:D5:0E:6C:74:96:CD:EB:2F:F6:7A:E7:08:FC:4F:D0:42:32
X509v3 Authority Key Identifier:
keyid:79:2C:BC:37:D7:44:D8:84:B6:0E:C4:47:EA:2A:C7:E4:CD:B2:2D:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/eSy8N9dE2IS2DsRH6irH5M2yLX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eSy8N9dE2IS2DsRH6irH5M2yLX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBC36/58F6DAB4964211ECB86985A85A40D577/18A7F1D0964E11EC8B6BA0C95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.75.112.0/20
41.190.92.0/22
41.217.216.0/22
197.211.96.0/19
IPv6:
2c0f:fd50::/32
Signature Algorithm: sha256WithRSAEncryption
37:11:d7:4a:58:70:cc:c3:2d:3a:42:ce:36:b4:bd:78:b5:2e:
4f:cf:09:3a:70:e5:bb:4c:3c:a9:dc:f5:9f:78:7f:dd:c2:2c:
2c:97:f2:08:54:1d:02:ff:ce:73:45:23:4c:af:fe:46:3a:62:
3a:13:d3:f1:9d:94:b2:93:dc:99:c3:54:b6:c4:74:3b:7d:c6:
32:13:1d:50:f7:10:97:3e:84:11:7e:b9:4a:88:c0:a2:cb:13:
38:ea:6d:ce:9f:87:a3:1c:d5:19:ef:5c:d2:0c:1b:62:70:71:
ca:35:af:1b:11:2e:56:2d:48:b9:df:24:a1:73:32:2b:f5:dc:
fc:21:6e:25:75:d9:a7:df:e0:64:a2:94:5d:83:74:d8:92:62:
58:85:b3:02:4a:6b:94:1a:f0:0b:d3:d7:fc:81:2a:38:b5:cb:
cb:f1:4a:ea:e5:63:d1:cd:61:c2:e2:36:2e:4a:fd:7b:09:13:
81:56:0e:f6:41:06:45:1e:8f:13:ef:ff:65:76:50:94:4f:c6:
b9:8e:5d:3c:ad:fa:9b:77:a3:9a:ae:65:5c:be:fa:b0:33:f8:
96:49:30:ba:ad:59:b8:12:a8:07:c8:ff:15:63:cb:2d:4e:d9:
5d:1c:6c:6a:15:f6:34:c0:9d:59:7d:77:a7:31:a3:3b:76:9d:
61:c0:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org