Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B5E2A2831C511EBB06EF046F8AEA228.roa
File: 1B5E2A2831C511EBB06EF046F8AEA228.roa (raw, json)
Hash identifier: KlKg4z8Xb6Gmr7Gkmxt7o5BqMQIvp/m2HQQeirQFh2c=
Subject key identifier: 67:ED:6E:F2:C5:0E:21:EA:AF:F6:AD:7A:4E:89:85:43:70:26:03:CE
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 3E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B5E2A2831C511EBB06EF046F8AEA228.roa
Signing time: Sat 28 Nov 2020 22:00:21 +0000
ROA not before: Sat 28 Nov 2020 22:00:16 +0000
ROA not after: Sun 30 Jul 2023 22:00:16 +0000
asID: 37119
IP address blocks: 41.78.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 22:00:16 2020 GMT
Not After : Jul 30 22:00:16 2023 GMT
Subject: CN=5fc2c874-859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:c3:d3:9a:ca:0d:b8:5d:63:4f:f5:9c:eb:
69:ab:5d:7b:64:2d:67:d0:e2:39:58:6c:24:8d:05:
2b:57:2e:0c:b1:50:8d:c6:f4:0a:06:4e:70:01:30:
d9:f4:9b:bf:f0:02:4b:9a:a4:46:a9:4b:30:f8:c8:
be:3d:4b:f6:f9:b9:46:21:7e:5a:33:dd:81:47:7d:
20:32:3f:61:f3:a2:0a:dc:32:4e:45:95:85:c0:b6:
a3:b2:fd:63:06:b1:83:45:f3:a2:91:1f:09:01:4e:
9d:cd:27:84:c6:61:45:29:c1:45:bf:73:45:d5:11:
1e:54:70:c9:2d:c2:4e:a9:4a:20:5b:ea:c0:6b:b1:
91:bc:62:96:a7:b8:f9:a4:a3:8e:2a:d8:dc:e1:9c:
43:48:c6:9c:f6:37:f9:38:30:58:94:21:e3:24:00:
2d:11:72:fd:fc:07:00:a8:74:77:53:d0:1f:9d:1d:
a1:80:17:2a:ba:86:fa:f0:f7:a1:a8:50:3b:f4:37:
59:99:9c:c0:78:14:fd:03:e0:6b:f5:5f:98:f8:21:
d7:43:d2:82:6a:ae:a5:75:b4:6e:58:57:8f:08:95:
55:0e:af:cd:cd:c8:29:ae:9b:92:fb:48:c2:3b:a8:
14:d1:3d:49:e2:4e:ee:43:63:9d:c6:e7:d0:25:01:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:ED:6E:F2:C5:0E:21:EA:AF:F6:AD:7A:4E:89:85:43:70:26:03:CE
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1B5E2A2831C511EBB06EF046F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.19.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:de:52:03:ed:6f:28:99:18:a9:44:47:0a:c7:e9:0c:10:75:
40:29:63:8c:8e:9c:80:e4:7a:66:7d:cd:16:f3:42:cc:e3:ca:
78:f4:f6:34:47:30:c3:44:a1:0b:af:0c:6d:00:5e:49:38:70:
73:37:17:b8:ac:ba:20:d0:6c:3b:e9:13:c3:63:1c:52:16:0a:
f9:2c:f8:f5:c3:c0:1b:93:a4:59:e4:b1:4a:86:c4:38:d3:1b:
4f:76:72:63:f6:37:3b:a7:10:ac:4b:77:54:03:12:7b:85:eb:
ff:0b:d0:7d:ef:87:9d:ac:39:cf:ea:2f:da:f2:22:00:3b:6f:
42:b0:9d:53:0d:74:ce:ac:5d:7a:6e:40:8a:7e:4c:1e:f5:33:
71:d6:7f:c7:25:23:1c:d9:c8:f3:5c:48:81:16:2c:27:a9:a4:
fa:5d:fb:ea:71:e8:1d:84:cd:59:de:1a:7f:1f:59:ef:89:2a:
e4:63:a6:38:20:f9:0a:cb:d2:33:7c:d1:c3:1b:f5:1f:21:28:
c7:21:c4:91:bb:44:66:d3:a9:db:41:6d:c2:77:1a:ba:75:da:
b6:3a:b9:b9:aa:82:75:a6:62:24:85:63:ba:e7:62:15:25:eb:
ce:b6:80:97:39:41:52:ea:06:f8:f4:d5:d6:b3:9b:19:56:2b:
7f:88:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:39:50 2023 by rpki-client on console-fra.rpki-client.org