Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/490CEFEECDB111EB8152714DF8AEA228.roa
File: 490CEFEECDB111EB8152714DF8AEA228.roa (raw, json)
Hash identifier: BSbpb46DmAaTomU5bG2Bc8Hchw3JXEPxinXMzwAcMW8=
Subject key identifier: E6:12:44:CE:97:50:14:C7:F7:46:7E:59:85:39:8A:A8:69:C2:EB:AB
Certificate issuer: /CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Certificate serial: 02
Authority key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/490CEFEECDB111EB8152714DF8AEA228.roa
Signing time: Tue 15 Jun 2021 08:11:28 +0000
ROA not before: Tue 15 Jun 2021 08:11:23 +0000
ROA not after: Thu 15 Jun 2023 08:11:23 +0000
asID: 37333
IP address blocks: 41.76.32.0/21 maxlen: 24
41.77.200.0/21 maxlen: 24
41.138.64.0/21 maxlen: 24
102.67.48.0/21 maxlen: 24
154.73.240.0/21 maxlen: 24
2c0f:fba0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Validity
Not Before: Jun 15 08:11:23 2021 GMT
Not After : Jun 15 08:11:23 2023 GMT
Subject: CN=60c860b0-81ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:42:15:9d:63:90:0b:9c:59:b8:d0:74:4b:
86:d3:57:e4:8d:f1:fe:c8:c5:1a:fb:f4:ad:0a:e6:
f3:0e:ae:b4:69:39:d3:61:33:bb:75:4a:01:e8:06:
f4:f3:97:5a:31:8d:75:d7:c4:56:1e:55:cd:7a:04:
d8:61:7a:63:d8:e0:0a:41:77:5a:44:67:fd:6d:82:
40:35:6d:63:5c:51:1b:a9:9c:04:46:cb:4f:62:de:
99:b3:f5:d7:ca:7c:a1:c1:4d:7b:81:44:d5:c9:2e:
50:18:c9:6f:8a:f9:2b:b1:e8:e7:b6:6f:5f:ec:05:
be:fd:df:20:bf:d7:57:4a:bd:a1:22:6c:fe:38:39:
a4:3a:ed:e9:7f:45:7e:e9:28:70:e3:ec:a5:07:3a:
4c:4a:95:be:4f:d1:ed:ae:2a:7e:c4:17:9b:72:83:
23:bf:22:f2:a0:e1:f2:aa:2b:ed:e9:70:51:e1:37:
7b:6b:6a:90:ad:13:85:9b:b4:93:19:f6:f1:c1:f8:
89:03:f6:f6:16:08:04:3d:dd:f1:a0:81:f5:27:2b:
88:b3:3a:5e:c3:53:df:4b:fc:47:a9:8a:f3:94:f4:
df:d6:2b:b3:26:87:87:cc:18:35:a8:33:66:cb:55:
af:a3:fc:b3:a0:fd:10:9c:bd:a8:76:a5:b9:f6:3d:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:44:CE:97:50:14:C7:F7:46:7E:59:85:39:8A:A8:69:C2:EB:AB
X509v3 Authority Key Identifier:
keyid:B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/490CEFEECDB111EB8152714DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.32.0/21
41.77.200.0/21
41.138.64.0/21
102.67.48.0/21
154.73.240.0/21
IPv6:
2c0f:fba0::/32
Signature Algorithm: sha256WithRSAEncryption
28:4a:53:de:48:5c:b3:96:bb:e3:1d:3b:49:b6:19:92:d3:c9:
20:ab:71:07:00:02:76:76:67:07:1a:03:c5:02:64:9d:c9:ca:
8b:7a:6f:c9:fe:bd:4c:ac:fd:14:af:cc:ad:9a:c9:2a:19:58:
a6:67:2b:0a:88:be:1d:1f:5e:45:01:21:29:7b:8b:57:00:2f:
32:b5:2a:64:4d:00:49:b0:4a:ce:10:42:4f:54:d4:dd:ba:99:
40:cf:21:3d:f6:a2:a5:a4:8c:7c:6d:a9:10:c2:6c:7b:c0:65:
72:ae:b8:2d:3a:58:32:a7:2a:04:8c:0f:2b:2f:ae:49:4e:4c:
89:5d:93:cf:c5:ad:b3:30:13:42:97:f0:bb:03:07:70:6b:38:
ff:2c:8c:f9:50:d8:2c:3e:98:9f:b0:07:fe:bc:88:aa:a6:5c:
d9:f7:89:18:f1:c6:fc:99:92:68:15:dd:d7:fc:96:63:8e:2b:
47:e9:5e:0b:c5:ca:4f:87:9c:66:c6:ba:f9:f1:00:57:a8:37:
f7:35:f0:c4:bd:c0:ea:d2:4f:bf:06:2a:dd:15:2a:5f:ec:15:
df:76:7b:85:3c:96:d5:28:c0:97:19:39:d8:fa:60:cf:96:f7:
e7:c1:c1:b4:20:17:c9:bf:09:7f:cc:e9:60:ae:7f:79:93:79:
57:5e:8d:a8
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
NDY4NEFGMTEwLwYDVQQFEyhCOUQ3MzkxNDc3MEY1RjM4RTJGMTc4QjU3NEY2OTU2
MjE5NEU4QjA0MB4XDTIxMDYxNTA4MTEyM1oXDTIzMDYxNTA4MTEyM1owGDEWMBQG
A1UEAxMNNjBjODYwYjAtODFhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyKQhWdY5ALnFm40HRLhtNX5I3x/sjFGvv0rQrm8w6utGk502Ezu3VKAegG
9POXWjGNddfEVh5VzXoE2GF6Y9jgCkF3WkRn/W2CQDVtY1xRG6mcBEbLT2LembP1
18p8ocFNe4FE1ckuUBjJb4r5K7Ho57ZvX+wFvv3fIL/XV0q9oSJs/jg5pDrt6X9F
fukocOPspQc6TEqVvk/R7a4qfsQXm3KDI78i8qDh8qor7elwUeE3e2tqkK0ThZu0
kxn28cH4iQP29hYIBD3d8aCB9ScriLM6XsNT30v8R6mK85T039YrsyaHh8wYNagz
ZstVr6P8s6D9EJy9qHalufY9llECAwEAAaOCAswwggLIMB0GA1UdDgQWBBTmEkTO
l1AUx/dGflmFOYqoacLrqzAfBgNVHSMEGDAWgBS51zkUdw9fOOLxeLV09pViGU6L
BDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDQ2ODQvOEU4OTAyOEFDREE1MTFFQjkyREJDRjNDRjhBRUEyMjgvdWRjNUZI
Y1BYemppOFhpMWRQYVZZaGxPaXdRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdWRjNUZIY1BYemppOFhpMWRQYVZZaGxPaXdRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDQ2ODQvOEU4OTAyOEFDREE1MTFFQjkyREJDRjNDRjhB
RUEyMjgvNDkwQ0VGRUVDREIxMTFFQjgxNTI3MTRERjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDBGBggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAylMIAMEAylNyAMEAymKQAME
A2ZDMAMEA5pJ8DANBAIAAjAHAwUALA/7oDANBgkqhkiG9w0BAQsFAAOCAQEAKEpT
3khcs5a74x07SbYZktPJIKtxBwACdnZnBxoDxQJkncnKi3pvyf69TKz9FK/MrZrJ
KhlYpmcrCoi+HR9eRQEhKXuLVwAvMrUqZE0ASbBKzhBCT1TU3bqZQM8hPfaipaSM
fG2pEMJse8Blcq64LTpYMqcqBIwPKy+uSU5MiV2Tz8WtszATQpfwuwMHcGs4/yyM
+VDYLD6Yn7AH/ryIqqZc2feJGPHG/JmSaBXd1/yWY44rR+leC8XKT4ecZsa6+fEA
V6g39zXwxL3A6tJPvwYq3RUqX+wV33Z7hTyW1SjAlxk52Ppgz5b358HBtCAXyb8J
f8zpYK5/eZN5V16NqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org