Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
File: 55A4651E2ECA11EC826BB027D8A014CE.roa (raw, json)
Hash identifier: Ro6bbhCF5uB5fYZkpeKOpbMeDDWp6TOAbrRoiD/qol8=
Subject key identifier: 9C:3F:A4:C9:2B:1B:0D:78:B6:30:D0:22:B3:3E:F0:E0:80:EA:B3:72
Certificate issuer: /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial: 09
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
Signing time: Sat 16 Oct 2021 21:45:10 +0000
ROA not before: Sat 16 Oct 2021 21:45:06 +0000
ROA not after: Sun 16 Oct 2022 21:45:06 +0000
asID: 21003
IP address blocks: 41.208.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Validity
Not Before: Oct 16 21:45:06 2021 GMT
Not After : Oct 16 21:45:06 2022 GMT
Subject: CN=616b47e6-d251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:0e:ae:86:92:16:73:8f:1c:85:37:ef:a5:
1e:6a:47:50:65:ba:97:7a:3e:2d:6e:6f:56:4e:11:
36:13:e6:10:47:d8:72:27:0c:51:72:59:72:eb:11:
01:d5:39:9b:28:94:8c:5c:2b:4f:1b:0d:72:7d:60:
bf:cc:1a:73:fd:b5:3b:ff:e5:c2:97:c2:bf:c6:54:
fd:b8:45:d2:6b:71:dc:14:06:0c:8e:12:76:33:03:
0a:c6:d8:f8:cf:65:0e:52:4c:81:85:91:e6:e6:65:
e5:5c:33:d8:20:64:ba:55:69:d2:bb:31:f4:19:7f:
91:f8:b6:0f:5d:c7:90:b5:27:24:85:31:34:e0:10:
a3:e2:3e:31:b1:8a:41:04:59:8b:36:e4:7d:6a:13:
f7:52:c8:7d:42:8e:98:2d:3a:0c:5b:10:70:db:aa:
c9:07:fc:7d:18:4d:f9:2e:ee:55:49:fd:90:bf:17:
49:8b:f9:88:ee:90:da:35:97:45:5e:13:a0:3e:a7:
7e:28:e4:24:ff:71:1b:d8:2a:55:3b:cc:34:cc:73:
50:5d:40:6a:42:82:f5:bf:f8:28:77:14:f0:81:bf:
e4:a8:2f:1f:bf:9a:f9:7e:ca:d9:f2:dc:a1:99:f3:
03:d3:9e:03:85:51:7d:56:2f:45:9e:70:57:05:43:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:A4:C9:2B:1B:0D:78:B6:30:D0:22:B3:3E:F0:E0:80:EA:B3:72
X509v3 Authority Key Identifier:
keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/55A4651E2ECA11EC826BB027D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:ae:0e:26:0e:cb:f7:52:bc:c3:88:ea:3b:f2:bc:39:69:29:
6b:15:18:e7:2c:da:8e:70:c3:2a:23:13:2b:be:29:29:d9:e4:
59:31:97:46:bf:47:c2:1e:33:dd:66:a8:6b:dd:4b:4c:8c:d0:
42:d9:b1:06:d5:af:12:61:4d:40:ed:d6:2e:22:cd:14:39:0a:
a6:d2:0d:02:7c:2f:dd:31:a2:16:aa:24:b6:18:98:e1:57:5e:
dd:15:d8:f6:ff:f9:54:36:95:a9:23:6b:8f:fe:ee:ba:c6:ff:
02:6b:0f:5b:94:df:64:ba:06:e2:91:58:87:79:51:a0:a5:af:
16:32:2f:a6:70:d6:02:ac:e9:ec:eb:2a:8a:cb:cc:1e:c7:46:
e9:f0:2b:56:2a:a6:63:97:1d:53:5d:12:f0:d3:83:9f:a8:50:
e2:69:09:1d:ec:15:b7:e3:dd:ca:9a:34:24:2c:32:1d:9c:f0:
30:00:54:09:57:42:d7:0c:85:67:21:3f:1b:c6:c2:f2:2e:ee:
7e:ab:4f:85:71:b6:bd:a4:69:93:9a:b4:8d:55:1e:3f:17:16:
f2:18:dc:90:c0:73:73:c1:db:1c:ce:d0:ce:7f:e3:77:80:4d:
ef:e3:73:96:e4:d3:df:c7:f7:35:e4:a1:9b:90:cc:15:19:ca:
ac:41:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org