Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C77642631C411EB9E63BB45F8AEA228.roa
File: 0C77642631C411EB9E63BB45F8AEA228.roa (raw, json)
Hash identifier: 2kVTevMuG+wLiXYSc1693N3JtFx+S/TcPR12XDMtImQ=
Subject key identifier: 32:1F:4D:10:68:58:F8:CF:60:2B:0D:B3:E8:B4:9A:1C:8C:0D:2D:61
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 38
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C77642631C411EB9E63BB45F8AEA228.roa
Signing time: Sat 28 Nov 2020 21:52:46 +0000
ROA not before: Sat 28 Nov 2020 21:52:41 +0000
ROA not after: Sun 30 Jul 2023 21:52:41 +0000
asID: 37119
IP address blocks: 41.78.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 21:52:41 2020 GMT
Not After : Jul 30 21:52:41 2023 GMT
Subject: CN=5fc2c6ae-8065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:c7:82:1b:ae:5f:d2:89:8a:f7:a2:10:f2:
29:49:73:06:ec:1b:07:a0:fa:0a:90:89:f4:fb:17:
eb:5e:2d:c0:7d:52:cb:c8:47:23:c7:0a:e3:71:69:
06:80:39:99:3b:e0:a7:d1:c3:54:02:e9:4b:56:7f:
1c:9e:c0:e0:6a:bd:ad:5e:81:dd:16:13:8a:19:69:
2e:13:b9:7b:ef:af:be:34:80:0e:d3:d0:16:df:7f:
4d:c1:28:e8:22:cb:77:e3:5f:49:a0:67:c9:25:39:
58:11:d3:26:7c:9d:2d:9e:d3:3d:ac:96:51:d2:ac:
45:a4:bc:bd:54:cb:0d:1f:d2:ac:52:09:e9:e9:09:
52:6f:32:72:03:9c:53:07:2a:ee:a2:31:67:53:b2:
79:85:ec:73:35:cc:d1:3a:5d:d3:c5:33:df:a7:82:
05:71:62:0d:6d:06:d7:dd:a4:45:9f:db:cd:1f:a8:
d4:d6:da:40:39:d6:e3:e5:a0:a8:1c:f8:3b:cf:50:
74:fc:0a:cd:c9:33:e2:c1:d1:0b:67:1c:ca:f5:8c:
cc:54:06:af:05:51:5a:06:54:48:f6:30:84:df:a5:
4d:d4:28:09:9d:49:81:08:bb:31:53:6a:cb:35:f0:
2b:68:0c:01:07:49:54:17:25:bd:f4:1b:40:22:3d:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:4D:10:68:58:F8:CF:60:2B:0D:B3:E8:B4:9A:1C:8C:0D:2D:61
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0C77642631C411EB9E63BB45F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.16.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d9:1d:25:cf:b0:76:fc:e7:ef:f5:9f:0c:e5:22:e4:ce:aa:
81:96:b9:b6:56:2e:c2:c9:07:79:85:81:a9:d1:d9:26:17:fd:
88:c8:4b:48:83:1a:3e:05:d2:6e:ad:e1:93:46:53:f4:21:1f:
31:d0:90:a5:12:5a:93:91:86:c1:f2:78:85:bc:98:19:1b:4b:
b0:d5:78:2d:12:d8:9a:62:f2:1d:87:54:f7:bf:d7:91:06:6c:
fd:81:0f:a4:1c:8f:45:71:df:2b:72:5e:b1:8f:c0:fe:1b:eb:
80:ef:2d:cd:24:ba:bb:30:0f:57:00:58:02:07:cc:57:9e:af:
6d:89:a6:3c:20:48:0e:7a:06:b1:73:da:1e:25:04:18:65:df:
ea:21:40:5d:a1:6b:b7:95:fa:26:1e:d5:b1:3e:63:fb:25:c8:
93:60:e2:a8:71:be:2f:81:c9:47:4c:4e:7f:5d:f3:75:c5:54:
22:15:dd:27:32:9b:df:9b:db:83:3e:5d:7e:93:38:60:0e:91:
d0:cb:21:db:92:bb:71:d2:fd:ac:01:df:2c:d1:6b:59:47:e2:
59:54:5b:ce:ce:c5:f9:94:63:d9:90:82:ef:03:46:3a:c7:1b:
6b:79:21:31:89:b6:a6:95:0f:a6:83:ef:af:f7:0c:5f:0b:93:
b0:8e:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:41:57 2023 by rpki-client on console-ams.rpki-client.org