Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/536E3D429F5B11EAA770E90DF8AEA228.roa
File: 536E3D429F5B11EAA770E90DF8AEA228.roa (raw, json)
Hash identifier: xAq815u5/qAMKGaHPf4/oVCsiVZ50mckXs4ESisDZwo=
Subject key identifier: 14:8B:BE:4D:C6:2F:CA:C9:71:59:84:98:35:77:8B:A4:12:5E:5E:2B
Certificate issuer: /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial: BA
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/536E3D429F5B11EAA770E90DF8AEA228.roa
Signing time: Tue 26 May 2020 14:15:18 +0000
ROA not before: Tue 26 May 2020 14:15:13 +0000
ROA not after: Wed 31 May 2023 14:15:13 +0000
asID: 327987
IP address blocks: 41.78.244.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F3412AF
Validity
Not Before: May 26 14:15:13 2020 GMT
Not After : May 31 14:15:13 2023 GMT
Subject: CN=5ecd2476-8b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:ca:25:ea:79:64:b5:79:ef:e7:9f:63:63:
64:ab:0d:71:2f:a6:c4:a5:42:64:0f:be:92:c6:e8:
52:b8:c8:8c:45:4e:a7:72:f1:c0:ae:c7:4d:90:ef:
c6:43:63:5a:9d:f5:23:b3:77:79:0a:59:8e:b7:a9:
2c:26:d0:8f:cc:00:30:29:93:21:77:54:5b:99:fe:
00:95:1d:f0:f0:05:25:6b:b8:f5:59:a4:20:e1:13:
af:13:89:a6:20:d8:8b:1e:fc:91:ec:14:97:86:46:
d7:b3:99:a8:0e:57:c6:62:66:7f:cb:c3:86:34:ee:
86:31:8a:b9:9d:bb:c4:9b:07:13:58:5b:d6:82:9d:
03:28:79:14:d9:54:ab:b7:e9:9d:69:53:22:e6:af:
ec:ee:60:a7:76:f9:3b:d1:0b:6d:22:1f:9e:97:5c:
97:41:d8:58:fc:74:fd:4d:4b:ee:9f:0b:c4:58:ad:
83:d7:d4:41:1a:19:e3:59:b1:64:fa:45:63:2e:31:
84:2a:31:e9:3d:b5:17:56:ba:77:cd:f8:2f:c8:fe:
d4:f3:d0:ff:b9:d9:48:8d:98:29:10:8a:f8:40:2f:
1c:a9:38:d9:57:c8:ae:ee:cd:f0:1f:b7:3a:84:c1:
09:cb:ac:90:e7:b1:84:a8:19:f7:a1:66:ab:19:3a:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:BE:4D:C6:2F:CA:C9:71:59:84:98:35:77:8B:A4:12:5E:5E:2B
X509v3 Authority Key Identifier:
keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/536E3D429F5B11EAA770E90DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.244.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:3c:c0:df:e2:5e:cf:2e:cc:92:9b:75:95:d5:72:f4:22:a3:
de:79:08:f8:8f:69:45:5b:b3:45:7b:58:fa:3a:20:7c:5b:84:
64:1e:fc:ef:74:bf:2c:a5:57:26:b9:c2:18:e3:3b:e0:54:c0:
86:a9:6c:fe:69:db:94:a2:78:b4:7b:f8:b3:cc:47:f1:45:76:
40:24:4c:4e:f1:1d:dc:44:f2:ab:a4:0f:21:6e:64:cc:ae:a1:
c0:e7:0a:20:ef:b8:08:e3:19:df:cb:b4:85:c5:be:35:08:f6:
fb:87:2c:6b:13:96:b6:1e:2c:f6:40:8b:24:b1:b0:9f:84:29:
36:dc:4a:a2:16:db:09:40:d2:df:cd:10:25:7c:04:da:75:c5:
c6:5f:03:4b:a0:c1:ed:16:70:a4:53:bd:6e:1d:4e:1a:85:e6:
5b:2a:6a:19:ce:81:6d:02:16:bf:8d:d2:fe:09:74:68:b5:07:
ad:83:db:64:67:75:76:29:3a:92:a0:08:c9:70:60:7d:97:f2:
fc:fd:8a:17:1c:2f:64:a5:f0:19:d7:22:fb:3d:64:e7:43:25:
fd:cf:5b:68:0b:a9:f6:59:45:08:f1:63:9f:ea:a7:7a:90:1b:
51:65:83:26:c3:40:f1:af:32:ff:62:1c:d9:36:c9:5f:1a:a1:
a1:a4:91:e3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICALowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjM0MTJBRjExMC8GA1UEBRMoOTM4QkU4OTM1MUE4MUE0MkRGODQ3QkYzOTMxMzcy
RDA5ODMwNDQ0NjAeFw0yMDA1MjYxNDE1MTNaFw0yMzA1MzExNDE1MTNaMBgxFjAU
BgNVBAMTDTVlY2QyNDc2LThiMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuWcol6nlktXnv559jY2SrDXEvpsSlQmQPvpLG6FK4yIxFTqdy8cCux02Q
78ZDY1qd9SOzd3kKWY63qSwm0I/MADApkyF3VFuZ/gCVHfDwBSVruPVZpCDhE68T
iaYg2Ise/JHsFJeGRtezmagOV8ZiZn/Lw4Y07oYxirmdu8SbBxNYW9aCnQMoeRTZ
VKu36Z1pUyLmr+zuYKd2+TvRC20iH56XXJdB2Fj8dP1NS+6fC8RYrYPX1EEaGeNZ
sWT6RWMuMYQqMek9tRdWunfN+C/I/tTz0P+52UiNmCkQivhALxypONlXyK7uzfAf
tzqEwQnLrJDnsYSoGfehZqsZOm7RAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFIu+
TcYvyslxWYSYNXeLpBJeXiswHwYDVR0jBBgwFoAUk4vok1GoGkLfhHvzkxNy0Jgw
REYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYzNDEyL0U4MkM3NzZBMTc3RTExRUE5Q0E3QkMwRUY4QUVBMjI4L2s0dm9r
MUdvR2tMZmhIdnpreE55MEpnd1JFWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s0dm9rMUdvR2tMZmhIdnpreE55MEpnd1JFWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYzNDEyL0U4MkM3NzZBMTc3RTExRUE5Q0E3QkMwRUY4
QUVBMjI4LzUzNkUzRDQyOUY1QjExRUFBNzcwRTkwREY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIpTvQwDQYJKoZIhvcNAQEL
BQADggEBAJw8wN/iXs8uzJKbdZXVcvQio955CPiPaUVbs0V7WPo6IHxbhGQe/O90
vyylVya5whjjO+BUwIapbP5p25SieLR7+LPMR/FFdkAkTE7xHdxE8qukDyFuZMyu
ocDnCiDvuAjjGd/LtIXFvjUI9vuHLGsTlrYeLPZAiySxsJ+EKTbcSqIW2wlA0t/N
ECV8BNp1xcZfA0ugwe0WcKRTvW4dThqF5lsqahnOgW0CFr+N0v4JdGi1B62D22Rn
dXYpOpKgCMlwYH2X8vz9ihccL2Sl8BnXIvs9ZOdDJf3PW2gLqfZZRQjxY5/qp3qQ
G1FlgybDQPGvMv9iHNk2yV8aoaGkkeM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:58 2025 by rpki-client