Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/2FB8E38606B811ED9B4794FAF1222468.roa
File: 2FB8E38606B811ED9B4794FAF1222468.roa (raw, json)
Hash identifier: 6qbJAoqzcE8Hgv7cFUMjJTUUmK96VyVMAIjMtXM5qgs=
Subject key identifier: 89:7F:C2:5A:9E:CD:E7:A2:DD:D6:83:C8:71:90:81:54:36:29:DB:D2
Certificate issuer: /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial: 06
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/2FB8E38606B811ED9B4794FAF1222468.roa
Signing time: Mon 18 Jul 2022 16:39:26 +0000
ROA not before: Mon 18 Jul 2022 16:39:22 +0000
ROA not after: Sun 31 Dec 2023 16:39:22 +0000
asID: 328857
IP address blocks: 102.220.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Validity
Not Before: Jul 18 16:39:22 2022 GMT
Not After : Dec 31 16:39:22 2023 GMT
Subject: CN=62d58cbe-7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:48:73:a1:70:d7:2b:60:3b:ba:d9:c5:36:
33:80:f4:7f:95:96:71:5c:c2:d6:10:ef:fb:73:93:
6c:7d:2e:9a:d1:b3:11:37:89:15:14:8f:f7:da:d4:
2b:7c:84:60:ce:1c:3d:61:b3:b6:98:77:86:92:36:
58:2b:c7:01:07:a1:58:5c:b9:b6:24:fe:c4:27:af:
f2:2f:fa:68:9e:6f:16:37:5d:84:c9:38:ab:f2:2e:
d3:8d:3d:5e:aa:cd:d6:78:65:05:8d:8d:85:c0:e4:
8d:82:12:9f:a8:82:cd:f6:60:ac:09:49:d8:c7:d1:
37:b2:fe:c6:8a:a6:df:04:6c:51:96:77:18:c3:51:
62:b6:60:02:ce:c6:6f:79:60:64:f4:2e:ff:07:d2:
14:c2:3a:2e:59:e1:c2:da:a2:23:bd:89:cc:b5:85:
e1:19:19:36:b6:98:6f:99:71:6a:9d:ef:92:d2:35:
3a:1b:69:69:f7:76:a5:60:c7:a8:28:2f:87:4f:7a:
16:6f:ec:d7:1f:53:51:db:1a:72:21:c7:2c:b7:46:
1e:86:f0:30:d1:5a:ed:67:c5:02:56:4c:78:d9:91:
08:98:59:49:7a:2b:cf:fd:ca:fa:24:3f:b1:3b:3f:
c9:d2:8a:16:53:02:9a:87:08:03:cd:c9:86:4f:43:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:C2:5A:9E:CD:E7:A2:DD:D6:83:C8:71:90:81:54:36:29:DB:D2
X509v3 Authority Key Identifier:
keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/2FB8E38606B811ED9B4794FAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.244.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:93:77:3f:df:42:98:4b:91:09:c8:4c:5f:01:88:ac:72:66:
38:a1:3b:13:80:fc:6a:ae:29:c1:ef:c3:18:ca:35:88:e8:e1:
df:53:10:4e:a4:af:85:24:bd:a5:70:db:3f:fd:c0:e8:46:20:
25:5e:6e:db:b6:5b:93:db:4d:ff:13:9e:27:a4:c3:98:5a:ce:
bd:4b:eb:0c:30:e4:9e:b6:ab:50:f9:fb:83:c7:e4:58:0f:28:
c9:87:43:5a:db:4c:59:23:e3:8b:a1:40:5c:24:11:b9:b2:6a:
54:c3:84:c7:3e:4d:65:f2:77:68:cb:c9:91:d8:d5:2e:44:19:
d5:7e:d9:74:ad:44:03:31:1b:45:cc:0c:26:19:c1:72:27:b7:
e2:6c:9a:b4:5a:57:89:03:01:41:a0:e4:99:6a:48:8e:01:9f:
6c:98:a6:93:0c:42:52:ff:80:34:ee:a9:5a:10:dc:02:d1:fe:
fe:22:d3:5a:7d:66:c5:c0:e9:0e:46:fa:74:86:34:b5:dd:25:
54:e7:62:c5:12:a1:fc:32:c5:fc:1c:01:79:4d:0c:e0:ba:40:
97:34:55:52:f2:73:4d:44:bc:c1:89:6a:be:8c:f9:8e:61:74:
06:8a:ef:8b:e3:40:a1:ad:a9:9f:37:40:4f:2e:c8:69:f0:92:
97:81:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:46 2024 by rpki-client on console-fra.rpki-client.org