Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/3C670E30B90211EDBA178593F1222468.roa
File: 3C670E30B90211EDBA178593F1222468.roa (raw, json)
Hash identifier: QSDfqmo+K83cakd4Jdq1L1ZXPx20tBnipu1GKv8Jedg=
Subject key identifier: 83:C9:61:D2:01:2D:C3:1A:B9:88:B5:F9:3D:0D:A8:77:F1:77:88:35
Certificate issuer: /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial: 06
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/3C670E30B90211EDBA178593F1222468.roa
Signing time: Thu 02 Mar 2023 13:57:57 +0000
ROA not before: Thu 02 Mar 2023 13:57:54 +0000
ROA not after: Tue 04 Mar 2025 13:57:54 +0000
asID: 33763
IP address blocks: 41.218.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Validity
Not Before: Mar 2 13:57:54 2023 GMT
Not After : Mar 4 13:57:54 2025 GMT
Subject: CN=6400ab65-470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:9c:77:93:bc:57:02:6c:5d:cc:28:81:95:
8d:42:5a:3d:41:9c:27:f4:29:4b:09:b3:2e:c8:48:
09:e7:d0:15:10:27:fc:3f:95:76:0d:25:c8:cf:61:
9f:69:09:c7:d5:a3:3f:7c:01:3d:07:1a:d5:bd:5c:
84:02:c2:56:33:73:27:8b:80:d8:d2:0e:bb:5e:4b:
54:bf:a8:97:80:1b:e9:80:ce:aa:70:ce:04:b3:16:
e1:fa:be:17:b5:64:4a:7b:d9:52:ae:a7:89:4c:84:
04:11:1b:18:40:2c:54:88:9e:e1:7e:41:e4:37:70:
70:1b:47:1e:64:e2:a6:c1:f2:db:04:bf:9c:1d:5d:
d4:d6:1e:eb:69:8b:a8:b5:01:7d:d1:41:20:fc:75:
9e:11:a4:92:0f:bd:d9:77:96:d1:17:9f:e5:98:e2:
8f:f6:58:52:20:e4:68:eb:11:2e:f3:e5:eb:cb:b8:
52:6c:df:7a:df:d2:b0:bf:a8:de:6a:4f:2b:78:44:
b2:3c:c2:87:ca:dc:1e:81:41:3e:4f:32:ef:27:02:
1b:b5:eb:98:ee:92:77:30:dc:07:ec:73:03:a8:a3:
93:09:3e:46:6e:11:23:3b:b1:58:7d:1f:c8:5f:fb:
91:f9:3c:8d:eb:f7:00:03:be:0c:3a:ac:ba:3e:9b:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:61:D2:01:2D:C3:1A:B9:88:B5:F9:3D:0D:A8:77:F1:77:88:35
X509v3 Authority Key Identifier:
keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/3C670E30B90211EDBA178593F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.218.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:3e:ff:14:8f:14:6a:26:0e:5a:d2:bb:4b:9d:39:79:f8:5f:
97:63:e8:7a:8f:94:24:8f:3e:84:17:b6:62:8c:45:26:37:65:
f5:c9:f5:b9:34:1e:48:c7:ec:d2:ef:a5:b6:8d:2a:3f:43:32:
c8:94:1f:53:70:bc:f9:14:03:fd:3e:3c:71:78:77:ff:5e:9e:
ca:73:22:cc:5b:e9:9a:61:c2:62:4b:66:d4:d9:06:26:2e:c5:
87:f1:93:1f:e2:ed:c8:74:f8:25:b8:1f:3b:c8:39:96:22:f6:
c9:95:3d:77:8c:60:8c:76:bb:7d:3f:ec:69:25:7b:61:5d:93:
38:5f:e4:b6:3d:ae:b5:c7:85:ad:ad:6a:5b:c0:66:c5:ce:81:
c3:f8:94:6b:04:6d:ba:0a:00:4b:90:20:a3:43:3e:06:3b:ff:
9d:a4:b9:d3:b8:1b:54:0c:07:55:45:d5:61:61:9b:2d:d3:b4:
6f:31:44:50:bf:b2:b4:be:54:61:9f:90:33:c8:ea:85:06:95:
75:a0:ab:37:5c:10:8d:98:34:15:1e:78:67:2b:da:68:9d:20:
4f:bf:2c:6a:0b:ff:aa:3c:7e:57:0b:69:a3:ed:f8:ea:66:ff:
22:79:7b:2f:63:c8:f0:6d:32:f5:9f:83:05:9b:31:2c:a8:4d:
be:75:ee:46
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
ODZCM0FGMTEwLwYDVQQFEygzRDZFRDkwNTAzN0M4M0M1NzM3ODBCMENDREM3MEQ1
RDhDRUYwMzhCMB4XDTIzMDMwMjEzNTc1NFoXDTI1MDMwNDEzNTc1NFowGDEWMBQG
A1UEAwwNNjQwMGFiNjUtNDcwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANfynHeTvFcCbF3MKIGVjUJaPUGcJ/QpSwmzLshICefQFRAn/D+Vdg0lyM9h
n2kJx9WjP3wBPQca1b1chALCVjNzJ4uA2NIOu15LVL+ol4Ab6YDOqnDOBLMW4fq+
F7VkSnvZUq6niUyEBBEbGEAsVIie4X5B5DdwcBtHHmTipsHy2wS/nB1d1NYe62mL
qLUBfdFBIPx1nhGkkg+92XeW0Ref5Zjij/ZYUiDkaOsRLvPl68u4Umzfet/SsL+o
3mpPK3hEsjzCh8rcHoFBPk8y7ycCG7XrmO6SdzDcB+xzA6ijkwk+Rm4RIzuxWH0f
yF/7kfk8jev3AAO+DDqsuj6bnqkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSDyWHS
AS3DGrmItfk9Dah38XeINTAfBgNVHSMEGDAWgBQ9btkFA3yDxXN4CwzNxw1djO8D
izAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEyMjI0NjgvUFc3WkJR
TjhnOFZ6ZUFzTXpjY05YWXp2QTRzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUFc3WkJRTjhnOFZ6ZUFzTXpjY05YWXp2QTRzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEy
MjI0NjgvM0M2NzBFMzBCOTAyMTFFREJBMTc4NTkzRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnaQDANBgkqhkiG9w0BAQsF
AAOCAQEATj7/FI8UaiYOWtK7S505efhfl2Poeo+UJI8+hBe2YoxFJjdl9cn1uTQe
SMfs0u+lto0qP0MyyJQfU3C8+RQD/T48cXh3/16eynMizFvpmmHCYktm1NkGJi7F
h/GTH+LtyHT4JbgfO8g5liL2yZU9d4xgjHa7fT/saSV7YV2TOF/ktj2utceFra1q
W8Bmxc6Bw/iUawRtugoAS5Ago0M+Bjv/naS507gbVAwHVUXVYWGbLdO0bzFEUL+y
tL5UYZ+QM8jqhQaVdaCrN1wQjZg0FR54ZyvaaJ0gT78sagv/qjx+Vwtpo+346mb/
Inl7L2PI8G0y9Z+DBZsxLKhNvnXuRg==
-----END CERTIFICATE-----
Generated at Wed May 14 14:55:17 2025 by rpki-client