Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/59FBBA36177F11EA9F22110FF8AEA228.roa
File: 59FBBA36177F11EA9F22110FF8AEA228.roa (raw, json)
Hash identifier: B9tYSqc8EkfBC+sNFJS1SPkrhz7FJMDFupXzRIbGuAc=
Subject key identifier: 76:9D:F6:C8:B7:53:EF:60:2E:D1:87:89:E2:2C:BD:4B:64:0D:59:BE
Certificate issuer: /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial: 02
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/59FBBA36177F11EA9F22110FF8AEA228.roa
Signing time: Thu 05 Dec 2019 16:50:33 +0000
ROA not before: Thu 05 Dec 2019 16:50:27 +0000
ROA not after: Fri 01 Dec 2023 16:50:27 +0000
asID: 327987
IP address blocks: 41.78.244.0/22 maxlen: 24
196.250.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F3412AF
Validity
Not Before: Dec 5 16:50:27 2019 GMT
Not After : Dec 1 16:50:27 2023 GMT
Subject: CN=5de93559-b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:30:2d:f9:b4:53:e6:48:85:f4:52:a1:07:
21:b3:26:ff:a8:d1:d3:5c:7f:be:27:90:9d:ce:e8:
3b:f6:c5:4e:2d:0d:df:1f:8b:60:34:ea:ed:3a:d1:
86:61:6a:14:2d:e7:2f:eb:dd:92:c7:ca:43:ec:cf:
23:0e:08:72:fe:d2:c7:c5:0f:6d:cd:52:7f:8c:be:
2d:79:56:0c:a4:0b:b5:df:31:aa:69:3d:7f:ef:bc:
cb:81:e4:c9:60:9c:00:61:7a:ad:1a:f3:65:0f:24:
1e:23:55:64:6c:3d:38:91:c1:a4:22:28:3b:9a:61:
83:01:16:8c:ba:6e:34:90:36:62:c0:ab:3c:72:8d:
5a:62:86:51:ad:e6:a2:c7:56:23:26:8f:91:d9:13:
48:a8:5e:72:87:50:14:e3:fe:25:cc:24:ce:34:dd:
61:d5:64:3c:ba:f9:6e:e3:d4:5f:a9:fd:c2:88:cc:
68:7d:83:1e:a3:06:6a:5d:e0:86:21:95:37:ab:b3:
2b:f8:04:95:d9:d6:f4:1c:a6:42:08:48:41:a3:bb:
96:d8:aa:36:c7:5a:e1:2e:af:b2:5b:23:98:b6:02:
f6:25:d0:55:be:c0:7a:02:b1:29:a3:5f:c6:bd:c6:
e2:a5:5a:d8:b3:b7:f6:7e:d5:55:29:a6:85:1e:88:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:F6:C8:B7:53:EF:60:2E:D1:87:89:E2:2C:BD:4B:64:0D:59:BE
X509v3 Authority Key Identifier:
keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/59FBBA36177F11EA9F22110FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.78.244.0/22
196.250.192.0/21
Signature Algorithm: sha256WithRSAEncryption
49:cf:6a:69:08:86:bf:99:ec:95:16:11:90:17:2e:58:83:a8:
59:92:71:9d:49:12:6b:61:6b:3d:3e:f6:61:45:bf:75:70:1e:
16:29:67:94:f4:f4:9c:8a:02:f0:6e:de:65:f1:39:62:58:50:
a8:fe:b7:9b:37:9a:06:bc:db:9c:9b:57:c7:32:d6:03:f8:f8:
b5:07:95:46:a0:ec:00:31:9c:78:ae:ab:f1:bd:04:0b:a0:43:
9c:c2:ec:ad:28:d0:d9:ad:7e:50:50:f3:b2:d4:bd:46:a4:08:
1c:46:af:e8:2a:ad:8d:0d:27:a1:5f:73:41:af:a8:a8:25:16:
f5:3d:4d:4f:4e:7f:3e:be:db:e8:73:07:84:68:00:ae:21:eb:
7b:d4:40:99:b5:fe:a4:c5:75:8c:17:1a:50:21:63:87:16:82:
e9:34:b9:94:e3:2b:73:d2:67:ec:24:68:9e:19:10:f7:31:2d:
97:85:14:47:4e:fb:3a:eb:0b:f5:ff:15:23:3f:5e:c7:e0:59:
4e:d0:ed:5e:7b:50:3c:e6:2a:75:a2:70:98:42:a3:29:5f:65:
4f:09:0f:92:99:b9:78:d6:95:21:ed:99:13:9b:39:3c:88:b6:
22:6f:81:b5:9d:7f:8d:41:c1:20:44:79:79:0e:10:c7:b6:99:
f1:fc:04:0b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
MzQxMkFGMTEwLwYDVQQFEyg5MzhCRTg5MzUxQTgxQTQyREY4NDdCRjM5MzEzNzJE
MDk4MzA0NDQ2MB4XDTE5MTIwNTE2NTAyN1oXDTIzMTIwMTE2NTAyN1owGDEWMBQG
A1UEAxMNNWRlOTM1NTktYjkyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8OMC35tFPmSIX0UqEHIbMm/6jR01x/vieQnc7oO/bFTi0N3x+LYDTq7TrR
hmFqFC3nL+vdksfKQ+zPIw4Icv7Sx8UPbc1Sf4y+LXlWDKQLtd8xqmk9f++8y4Hk
yWCcAGF6rRrzZQ8kHiNVZGw9OJHBpCIoO5phgwEWjLpuNJA2YsCrPHKNWmKGUa3m
osdWIyaPkdkTSKhecodQFOP+JcwkzjTdYdVkPLr5buPUX6n9wojMaH2DHqMGal3g
hiGVN6uzK/gEldnW9BymQghIQaO7ltiqNsda4S6vslsjmLYC9iXQVb7AegKxKaNf
xr3G4qVa2LO39n7VVSmmhR6I2EcCAwEAAaOCAnQwggJwMB0GA1UdDgQWBBR2nfbI
t1PvYC7Rh4niLL1LZA1ZvjAfBgNVHSMEGDAWgBSTi+iTUagaQt+Ee/OTE3LQmDBE
RjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjM0MTIvRTgyQzc3NkExNzdFMTFFQTlDQTdCQzBFRjhBRUEyMjgvazR2b2sx
R29Ha0xmaEh2emt4TnkwSmd3UkVZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvazR2b2sxR29Ha0xmaEh2emt4TnkwSmd3UkVZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjM0MTIvRTgyQzc3NkExNzdFMTFFQTlDQTdCQzBFRjhB
RUEyMjgvNTlGQkJBMzYxNzdGMTFFQTlGMjIxMTBGRjhBRUEyMjgucm9hMCUGCCsG
AQUFBwEHAQH/BBYwFDASBAIAATAMAwQCKU70AwQDxPrAMA0GCSqGSIb3DQEBCwUA
A4IBAQBJz2ppCIa/meyVFhGQFy5Yg6hZknGdSRJrYWs9PvZhRb91cB4WKWeU9PSc
igLwbt5l8TliWFCo/rebN5oGvNucm1fHMtYD+Pi1B5VGoOwAMZx4rqvxvQQLoEOc
wuytKNDZrX5QUPOy1L1GpAgcRq/oKq2NDSehX3NBr6ioJRb1PU1PTn8+vtvocweE
aACuIet71ECZtf6kxXWMFxpQIWOHFoLpNLmU4ytz0mfsJGieGRD3MS2XhRRHTvs6
6wv1/xUjP17H4FlO0O1ee1A85ip1onCYQqMpX2VPCQ+Smbl41pUh7ZkTmzk8iLYi
b4G1nX+NQcEgRHl5DhDHtpnx/AQL
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:43 2025 by rpki-client