Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/8CBAAAF8088E11EB9C1ACB5CF8AEA228.roa
File: 8CBAAAF8088E11EB9C1ACB5CF8AEA228.roa (raw, json)
Hash identifier: E1TSPGYf1r3uC35j/fW5/t60J5FIlLVM1t+JpwiOuvc=
Subject key identifier: 77:12:60:FF:FE:47:5E:6C:39:44:52:92:DD:B4:07:9D:6C:0A:A6:D4
Certificate issuer: /CN=F3646008AP/serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
Certificate serial: 02
Authority key identifier: EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
Authority info access: rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/8CBAAAF8088E11EB9C1ACB5CF8AEA228.roa
Signing time: Wed 07 Oct 2020 11:16:31 +0000
ROA not before: Wed 07 Oct 2020 11:16:26 +0000
ROA not after: Fri 07 Oct 2022 11:16:26 +0000
asID: 37007
IP address blocks: 163.202.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AP/serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
Validity
Not Before: Oct 7 11:16:26 2020 GMT
Not After : Oct 7 11:16:26 2022 GMT
Subject: CN=5f7da38e-48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:21:29:fa:49:41:b8:00:ef:e6:ec:9b:36:
88:e9:e3:b3:a8:75:0c:56:9d:ed:3b:1d:4e:a8:ac:
05:bb:f8:2f:45:8e:49:de:79:e8:db:be:72:1e:23:
7d:65:17:d4:12:28:1c:94:bb:46:1b:bd:d1:86:16:
15:f5:5c:2f:87:6a:e1:30:9a:d3:8f:55:74:25:95:
24:30:f5:a2:c4:f1:b1:4d:61:25:1d:84:e8:57:22:
79:12:7a:6f:5f:bf:e6:fc:9a:6f:78:f0:e7:14:d1:
35:63:af:be:c2:1d:89:22:10:c0:19:3f:2f:30:b1:
4c:2d:58:b3:3c:e4:56:66:07:e9:7f:44:6c:4b:8f:
32:aa:e5:f5:66:bf:f2:3b:b8:ef:29:10:e4:64:d9:
1f:1d:4e:71:14:af:81:8a:a8:34:b0:5d:c1:09:4f:
ff:e1:6b:e4:cf:3e:9e:bf:b2:c6:2e:43:b8:19:74:
9f:dc:b6:03:90:09:1c:34:49:88:0c:e9:b9:be:84:
d2:de:b2:fd:d1:7f:69:d2:67:a3:df:67:b2:ae:a6:
85:9c:d3:bf:0f:0b:42:e7:ca:94:e0:78:54:43:8e:
c1:f1:62:66:ea:60:7a:50:77:be:ac:7e:e5:ac:d4:
f0:28:df:77:f6:f4:77:c8:92:b5:1c:d9:49:58:51:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:60:FF:FE:47:5E:6C:39:44:52:92:DD:B4:07:9D:6C:0A:A6:D4
X509v3 Authority Key Identifier:
keyid:EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/8CBAAAF8088E11EB9C1ACB5CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.202.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:95:98:84:56:9c:2d:02:c4:55:73:75:8f:2d:3d:06:41:0f:
c1:59:e8:ca:fc:8d:48:14:d0:b9:23:70:f3:3b:01:44:ad:2e:
84:95:99:0a:64:f7:c0:07:44:c1:8c:f4:27:66:5c:d5:6b:7e:
d2:b2:1f:68:30:af:89:61:0b:0e:da:10:29:51:cb:a0:19:29:
85:0c:3b:5b:cc:cb:33:39:31:af:c6:19:65:a5:e4:d6:fc:44:
87:1c:0f:ef:7f:1c:a2:a3:ff:ff:f0:f1:56:5a:78:ef:a7:4f:
15:57:5f:5f:93:83:78:00:eb:4b:4c:c4:86:e3:5e:6d:25:e4:
8b:06:a6:e3:07:af:c2:47:91:d1:94:9d:4e:8a:b3:40:e0:9a:
31:a5:3c:9c:19:21:9a:f7:34:ba:66:9e:7d:11:9c:e0:7c:e9:
86:47:7e:ca:bf:3d:59:4f:a8:b3:10:64:4c:11:f4:eb:33:c9:
f6:63:dc:42:e4:25:90:b9:33:b8:36:63:5d:c6:4e:f8:dc:f3:
1f:6e:57:eb:52:8a:6f:0e:cc:ae:1f:2d:74:9b:97:bb:da:f9:
b4:70:cd:0e:f2:10:3e:d4:69:33:0e:ba:3c:88:8b:4e:02:00:
91:6e:4b:3c:e2:8d:5e:f4:2e:a8:fd:d5:2f:ce:6d:4f:25:d4:
98:99:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org