Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/243EDAF0136E11EFB13E3C40017001B1.roa
File: 243EDAF0136E11EFB13E3C40017001B1.roa (raw, json)
Hash identifier: cNf5HSMFl+MPrttEo65dmYKSWyolTJ5yBhJUBWOrF2w=
Subject key identifier: EB:62:D4:D4:9A:61:F8:4C:82:96:20:F3:F2:E5:71:27:3F:E1:CD:F0
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0506
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/243EDAF0136E11EFB13E3C40017001B1.roa
Signing time: Thu 16 May 2024 10:22:05 +0000
ROA not before: Thu 16 May 2024 10:22:01 +0000
ROA not after: Mon 27 May 2024 10:22:01 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 16 10:22:01 2024 GMT
Not After : May 27 10:22:01 2024 GMT
Subject: CN=6645de4d-d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:04:91:32:93:3d:33:42:a2:76:5b:8d:12:
35:40:d9:49:ff:e7:1f:d1:bd:ae:0a:2f:ca:c7:ea:
44:74:07:bc:f2:88:7b:b1:1a:4f:ae:3f:31:29:83:
cc:f7:c7:19:b6:df:49:3d:1f:94:da:01:29:51:6d:
95:7c:b0:ad:ed:62:d1:eb:8e:f3:b5:5d:29:33:81:
ee:f5:03:71:4a:28:59:a3:7b:4b:3a:2c:f0:b7:b4:
45:12:c7:cd:ae:dd:d4:bd:4a:21:f8:91:db:1a:1a:
4d:86:ef:8a:88:53:f3:2b:e9:05:ea:32:eb:16:8f:
8b:22:c1:aa:99:71:80:02:91:32:e9:be:ed:bc:07:
5f:96:44:6f:db:0c:b7:a8:b6:15:ad:05:1a:59:df:
fd:d9:91:b9:d3:c2:b0:71:1a:33:e4:15:dc:9f:58:
1a:7d:39:b7:ef:27:2e:fd:3f:80:38:32:53:75:2f:
b4:49:c4:ec:48:43:93:df:64:52:a6:75:b5:15:33:
cd:b6:b9:ad:ab:e0:34:ee:c4:11:b8:f8:ef:fc:bc:
3f:bd:45:6d:6d:25:d8:cd:32:22:34:9a:9a:c5:ef:
41:57:1a:b4:3b:65:f9:dc:3b:9b:61:ff:b2:58:1c:
e8:25:c1:b2:7f:3b:69:c2:12:b9:66:c3:6f:99:9d:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:D4:D4:9A:61:F8:4C:82:96:20:F3:F2:E5:71:27:3F:E1:CD:F0
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/243EDAF0136E11EFB13E3C40017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:97:93:ee:f6:ea:f3:f1:71:c3:4a:df:28:46:47:81:f6:2c:
b5:c5:5a:f9:ac:6c:d8:f2:29:8d:61:30:4d:8e:a9:eb:1a:7b:
8e:19:0c:7c:ce:a6:fc:a0:d7:65:08:79:9a:c0:5b:26:38:d7:
78:4b:69:d7:23:e1:d3:f4:6c:99:86:ad:12:be:2a:7a:09:00:
e1:c1:a5:51:d6:fc:92:dd:b2:90:85:97:e7:95:b7:7f:2a:62:
91:83:fe:12:21:be:3e:ad:f8:ab:d3:d8:3c:2a:8b:fe:f9:0e:
a0:e9:44:0c:50:f6:dc:63:75:0a:8a:0e:ff:18:68:d1:e4:9d:
53:9d:10:e8:18:87:55:8d:a8:d6:1d:09:61:84:82:e5:12:f4:
3f:a4:85:61:45:3a:dc:2f:4a:ed:48:8c:d6:b3:a0:2b:00:c1:
bc:57:7c:16:5b:cc:ad:f3:c2:4d:64:7c:7c:60:eb:ef:56:4b:
5f:90:de:e3:75:af:68:c6:f6:4a:5a:a2:18:c2:62:20:d2:16:
4f:7f:ae:8b:fc:03:c9:b9:c9:6c:b1:67:e9:91:17:d3:1b:22:
3e:25:8e:83:f7:2c:05:94:7d:9f:bf:79:72:c1:61:49:20:69:
61:e7:0a:4c:ea:60:94:ab:33:d9:dd:33:22:a4:9a:7a:4a:ea:
e5:bf:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:15:39 2024 by rpki-client on console-ams.rpki-client.org