Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
File: AE0D86FE31C311EBA4F36745F8AEA228.roa (raw, json)
Hash identifier: ZinIVcdcBrjZmIbc9gwO17Ah4Hc5kq87dOBognB0QBA=
Subject key identifier: 7F:D0:AB:B5:56:89:0A:33:31:F7:B6:31:7E:00:2A:55:6D:8C:71:B4
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 36
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
Signing time: Sat 28 Nov 2020 21:50:08 +0000
ROA not before: Sat 28 Nov 2020 21:50:03 +0000
ROA not after: Sun 30 Jul 2023 21:50:03 +0000
asID: 37119
IP address blocks: 41.78.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 21:50:03 2020 GMT
Not After : Jul 30 21:50:03 2023 GMT
Subject: CN=5fc2c60f-34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:2f:46:fe:a6:21:86:d5:ca:0e:e2:89:49:
62:89:79:9c:28:d6:ec:71:eb:9a:53:98:62:4e:06:
2e:25:d6:31:2b:28:f4:8d:b7:2c:74:29:03:6e:7f:
a2:56:3a:21:98:70:71:ce:f7:88:51:f0:78:5f:77:
9c:58:8d:5a:11:42:ff:56:06:3c:ed:6a:0d:83:5f:
60:5b:9c:f7:6c:41:f6:30:c7:1b:41:d7:4e:e6:06:
2c:2b:00:bf:98:32:b5:27:4d:3b:f8:1a:77:70:78:
3c:a1:3e:fa:69:6a:bf:ab:de:8a:9f:01:e8:7f:c6:
78:a6:e0:ab:38:dd:a3:18:58:92:0e:54:89:26:ea:
ab:a5:5d:3e:21:fd:2d:9d:67:22:06:57:50:50:36:
e6:a3:59:14:b0:c8:ea:f3:5b:4f:a6:ac:f6:fe:77:
e5:f9:33:4a:70:60:ae:88:63:99:3d:31:ad:e0:57:
f2:e2:e7:06:01:e4:c0:8c:c6:50:ad:8a:8a:0f:15:
51:ad:44:5f:77:47:3f:1a:97:9d:42:4b:5e:e5:48:
84:41:d6:fc:91:c6:85:75:04:9a:23:f3:7d:b3:eb:
d5:1f:fe:0b:6d:99:31:36:59:2a:23:64:04:a6:4f:
58:b2:eb:1b:02:b3:63:2b:a3:7e:97:68:a6:e9:d0:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:AB:B5:56:89:0A:33:31:F7:B6:31:7E:00:2A:55:6D:8C:71:B4
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/AE0D86FE31C311EBA4F36745F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.16.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ba:7c:ac:5e:d4:fb:e5:19:73:d5:fb:48:80:26:97:c5:d3:
5c:51:58:5f:1a:e1:6b:61:16:19:75:f9:49:43:7a:7f:db:a5:
17:f5:9c:ae:20:e2:cd:79:42:bf:5a:2b:33:c3:d4:ca:96:4f:
94:d3:4c:03:65:24:e1:e6:8b:da:d3:b4:56:b6:1f:ed:d4:a3:
26:9a:64:fb:cd:c3:9a:be:39:08:75:1f:de:fa:df:18:3f:c3:
3f:c7:b6:bd:35:05:f1:0e:18:4f:84:47:04:59:e7:ef:85:32:
36:a1:c0:d5:87:a0:ab:c5:da:01:42:f0:7f:f8:78:9a:ee:13:
28:ec:62:64:52:6d:69:68:11:ca:29:b2:81:b9:1b:71:8b:0c:
92:22:ca:dd:70:f0:c4:c8:21:cc:a6:d4:26:89:73:16:d7:60:
0f:85:60:1b:ee:25:60:37:98:d5:ba:89:ad:2c:3c:fc:dd:5f:
4a:3e:40:27:15:63:79:30:1b:54:7b:2d:29:f1:2e:ff:ab:fe:
00:5b:0e:72:b9:88:f0:90:85:37:08:a8:be:8c:0d:ca:1c:5f:
d0:4a:bb:cb:51:8b:5d:02:01:88:5f:8a:43:f8:f4:f4:e1:dd:
d8:54:c1:e3:7e:87:7b:29:87:c0:59:dd:a1:fa:09:02:ba:5a:
ac:de:6d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org