Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
File: 4847ABD2CA2911ED80934498F1222468.roa (raw, json)
Hash identifier: nNL86OT9b+HJ48R4J42OBGnX4oceTZrCL0ZorHMUv1M=
Subject key identifier: C8:2F:0F:B0:BB:3C:AC:18:98:F6:40:D0:B1:30:E2:67:66:D3:D2:5D
Certificate issuer: /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial: 02
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
Signing time: Fri 24 Mar 2023 09:50:17 +0000
ROA not before: Fri 24 Mar 2023 09:50:13 +0000
ROA not after: Sun 24 Mar 2024 09:50:13 +0000
asID: 327906
IP address blocks: 102.217.144.0/22 maxlen: 24
2c0f:f008::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Validity
Not Before: Mar 24 09:50:13 2023 GMT
Not After : Mar 24 09:50:13 2024 GMT
Subject: CN=641d7259-d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:96:59:71:54:f7:a8:d7:9b:b6:e8:2b:65:c8:
1c:05:f6:03:85:e6:f0:8a:c1:22:2f:60:25:21:68:
1f:3a:48:48:60:70:aa:0d:6c:06:6f:35:6f:cc:4f:
87:81:06:7f:8e:76:48:18:e8:42:e1:da:49:e4:72:
92:ad:0f:78:33:e5:44:76:2e:4d:9a:e6:9c:77:df:
69:ac:a3:c4:d5:8e:3a:32:5e:8f:e4:59:dc:6a:8a:
42:a2:d6:ff:11:6c:f2:f9:8c:23:a7:39:1b:89:45:
2a:14:33:33:18:9e:8c:7d:a2:bf:46:d7:a3:66:58:
db:3a:99:98:88:68:66:9f:04:08:52:e0:98:33:64:
d5:76:65:54:3b:93:b2:fb:c4:35:2a:4d:17:b9:1d:
cd:ed:4d:a0:30:ba:2c:86:c8:24:c6:6a:b5:73:19:
be:99:00:56:ee:b3:36:d1:15:25:a6:b3:b3:b7:21:
ed:d4:8b:9a:86:50:5a:5c:b6:a1:51:29:c2:2b:23:
5f:aa:a7:42:0b:45:af:71:3a:a3:2e:8b:d3:88:12:
bd:e7:93:9a:49:86:86:90:16:ea:82:fa:00:c7:a6:
51:77:55:26:40:85:3c:cb:1f:aa:43:97:07:48:8c:
c9:bd:de:6b:47:18:a8:02:1d:78:90:1a:f4:62:79:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:0F:B0:BB:3C:AC:18:98:F6:40:D0:B1:30:E2:67:66:D3:D2:5D
X509v3 Authority Key Identifier:
keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/4847ABD2CA2911ED80934498F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.144.0/22
IPv6:
2c0f:f008::/32
Signature Algorithm: sha256WithRSAEncryption
8d:05:ed:02:ac:75:07:a8:fb:a6:96:c1:ce:9e:b1:36:61:48:
09:47:3c:b1:d9:46:1c:79:bf:67:9c:f8:ee:a4:07:7d:ef:da:
ff:d0:d3:a7:3d:cf:97:04:71:63:f8:65:0b:66:24:bd:a8:42:
c9:eb:d7:f9:ea:41:39:d3:1b:95:33:d4:2a:aa:16:7e:b3:5f:
9d:4a:a2:45:1e:06:2a:50:8a:9f:fc:18:c8:74:d7:ef:b5:2d:
3d:ae:4c:59:11:52:6f:18:ca:d9:54:1b:35:af:b2:89:bd:60:
56:b3:7b:81:f8:0b:fd:f3:b5:fc:79:52:0e:21:0c:08:4c:30:
10:e4:4f:a9:0f:c1:a3:d6:32:0f:b4:10:07:9d:17:d9:0b:ff:
69:cb:70:ae:c5:fc:5e:f3:af:1d:67:aa:35:c7:62:57:80:d0:
1a:37:04:d7:ab:69:d2:62:ce:e9:e7:1e:1e:e8:53:05:fe:4f:
15:65:7a:18:c8:5f:3e:34:6a:4e:77:bf:f6:32:04:60:5b:fb:
0e:ac:84:6c:42:b4:b3:0e:6d:f0:2e:9d:9c:bc:23:dc:c4:12:
38:c5:72:80:c2:0b:40:99:be:05:9a:9a:39:8a:84:64:09:0f:
d4:d6:da:2f:4a:d5:b3:80:bd:b4:bf:cf:35:3d:a3:e6:cc:18:
f4:be:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org