Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ECF489231C411EB9D102946F8AEA228.roa
File: 5ECF489231C411EB9D102946F8AEA228.roa (raw, json)
Hash identifier: jJ6RvnLr8V/MuaBLnzE0KPfkBlehLRS/Ydx5d9r1oAU=
Subject key identifier: 25:4D:D5:90:6F:8D:1F:F1:59:6F:DE:D5:C7:7A:D0:9B:6E:C5:FB:AC
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 3A
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ECF489231C411EB9D102946F8AEA228.roa
Signing time: Sat 28 Nov 2020 21:55:04 +0000
ROA not before: Sat 28 Nov 2020 21:54:59 +0000
ROA not after: Sun 30 Jul 2023 21:54:59 +0000
asID: 37119
IP address blocks: 41.78.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 21:54:59 2020 GMT
Not After : Jul 30 21:54:59 2023 GMT
Subject: CN=5fc2c738-53c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:25:40:cf:5a:fa:6e:34:88:cc:07:71:9f:
20:5e:8a:66:f9:0d:ef:d5:51:c0:82:d4:f7:76:80:
22:88:63:73:9d:f5:11:72:25:1d:0e:8c:7e:9e:30:
48:45:d5:b7:19:73:f6:c0:d5:23:26:cf:6f:e7:4e:
81:a9:1e:6b:3e:81:2c:37:00:34:c2:4f:1b:4e:d0:
06:50:eb:6c:7e:46:a7:a1:35:5e:01:2e:d0:cb:08:
a1:a1:f0:2b:aa:7d:1e:fb:55:e0:22:cd:40:9d:10:
b5:0f:cc:fe:d9:5b:89:4b:ce:10:6c:1d:63:62:f1:
31:ba:7f:65:dc:4b:44:b3:b5:95:c0:1a:64:c3:55:
77:6e:4c:9d:1f:5e:b3:18:58:ec:b1:86:cf:e0:34:
ac:cb:96:b2:1c:ce:54:d2:dc:32:22:3f:9c:20:6e:
ac:19:6e:34:c3:83:a7:bc:00:37:b0:03:e4:68:29:
70:65:c6:7d:73:b4:7f:eb:f5:e8:98:aa:60:43:04:
54:dd:a9:8e:02:d3:de:0f:fd:a4:be:46:55:d6:0e:
fe:81:52:17:5f:ef:ac:e8:65:be:42:63:6d:5f:d8:
00:63:95:8f:4e:ac:40:4c:a7:c4:51:44:1f:25:37:
78:33:37:f0:8f:96:f9:18:12:3a:8b:44:1d:a5:e1:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:D5:90:6F:8D:1F:F1:59:6F:DE:D5:C7:7A:D0:9B:6E:C5:FB:AC
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5ECF489231C411EB9D102946F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.17.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:15:c5:d8:d6:89:ea:60:7e:a9:98:77:b6:9d:45:9c:d1:
dd:6a:12:ae:00:f2:68:a6:de:ce:b6:f4:de:0c:aa:31:5b:15:
30:38:58:e2:a3:63:c7:c6:d0:14:c8:eb:8e:cc:c6:05:2c:1a:
60:cd:06:cc:1d:a4:2c:7b:17:e6:89:0e:26:b5:2a:d5:f5:51:
08:00:03:4b:1c:7a:67:c7:24:b3:3b:e8:38:57:55:91:a0:29:
7b:33:3b:e5:93:6f:aa:02:51:d7:24:6f:cb:54:68:e8:f4:53:
57:80:3a:6d:39:b6:e8:8f:71:a4:3f:e6:83:ae:7c:da:f2:1e:
d9:06:ec:b3:2e:be:60:b0:72:d0:71:d1:85:60:14:90:51:e8:
45:82:f6:ff:9b:0b:f3:d9:10:67:84:99:68:83:ef:0f:a4:8a:
80:48:1a:9c:18:b2:a9:fe:bc:53:84:11:56:bb:31:52:28:08:
e6:a8:01:ca:c9:20:dd:14:3f:0d:c8:0b:46:bf:b0:ab:7d:63:
d0:02:7e:7e:75:1f:34:f8:6e:99:39:18:2d:24:3d:16:25:f1:
dd:a8:28:98:31:57:aa:8c:fc:9b:c9:06:af:96:df:92:9b:96:
1e:a8:38:05:2d:cb:ce:5e:bc:b8:f8:a7:ba:70:dd:3d:22:e7:
1d:5b:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org