Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/0946E48C900B11ED9D791E8DF1222468.roa
File: 0946E48C900B11ED9D791E8DF1222468.roa (raw, json)
Hash identifier: KQ4hpALnqurAcCdzIJ7L5zOMt9xvjyfZNThreH7VL70=
Subject key identifier: 67:FC:17:53:F8:9F:D5:C0:33:28:12:94:76:11:54:CD:FF:6C:81:CB
Certificate issuer: /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial: 02
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/0946E48C900B11ED9D791E8DF1222468.roa
Signing time: Mon 09 Jan 2023 10:47:39 +0000
ROA not before: Mon 09 Jan 2023 10:47:33 +0000
ROA not after: Tue 09 Jan 2024 10:47:33 +0000
asID: 328341
IP address blocks: 102.164.0.0/19 maxlen: 24
2c0f:ec70::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Validity
Not Before: Jan 9 10:47:33 2023 GMT
Not After : Jan 9 10:47:33 2024 GMT
Subject: CN=63bbf0cb-eff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:74:34:76:3f:72:2c:8f:e3:f8:0d:05:a3:
f0:3e:cb:f3:9b:25:9b:7a:99:73:5d:6c:35:b9:30:
52:96:c0:47:8b:a5:a9:d8:a5:f6:c1:08:79:bc:dd:
c2:77:de:26:5c:88:27:18:46:d1:79:79:95:dd:8f:
92:72:da:0a:39:3a:e4:9f:c2:f0:2b:22:9e:ce:e9:
9e:41:ad:21:b1:6a:a1:2c:73:bb:8c:d8:50:43:6c:
73:f2:bc:b9:31:8b:37:fe:46:2f:8a:e2:b8:f4:15:
95:98:31:98:2f:6c:55:3e:1f:41:b8:18:22:b7:33:
15:6e:da:4c:e5:6f:71:3d:e2:67:a3:39:b0:35:98:
49:71:59:3d:71:cb:d2:ce:4d:91:6e:e7:25:f5:53:
14:63:13:2b:e4:23:c0:c7:d6:51:dc:ce:04:50:c4:
5e:ec:28:c0:ee:74:54:98:77:c8:a6:aa:4d:86:25:
d0:05:f6:4f:2d:92:f6:26:b0:22:42:2d:b6:92:1d:
1a:dd:00:c8:81:8b:3d:33:a4:57:f1:9c:84:ab:5f:
4a:bf:7b:f6:bb:9a:2a:8a:f7:ec:45:c6:67:cb:36:
b4:9c:91:24:c6:9d:7e:3c:8e:31:86:b2:2d:02:01:
58:ee:b2:ed:bf:55:af:a7:05:74:62:41:20:7e:38:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:17:53:F8:9F:D5:C0:33:28:12:94:76:11:54:CD:FF:6C:81:CB
X509v3 Authority Key Identifier:
keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/0946E48C900B11ED9D791E8DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.0.0/19
IPv6:
2c0f:ec70::/32
Signature Algorithm: sha256WithRSAEncryption
00:24:e5:b0:b9:e8:38:74:42:5e:7d:29:b7:6e:97:19:a4:0e:
fa:f3:cc:48:e9:df:cc:39:51:e7:3c:f3:a4:61:c5:d6:69:7f:
07:f6:1f:08:a4:8e:c7:8b:f0:de:61:df:cd:88:97:74:f1:21:
3c:6c:59:83:e4:0e:61:d9:5f:f9:bd:7c:c3:15:da:fc:bc:cd:
75:04:ee:ae:ee:f5:73:97:0b:3b:40:71:b9:92:68:41:ae:20:
9a:c6:42:ab:2b:38:62:43:4c:cf:1b:e8:3d:41:5a:a0:89:32:
f6:e1:9c:20:67:11:6d:38:fe:09:b7:c1:97:3c:46:81:da:23:
17:44:84:80:a4:1a:09:3a:02:fc:e3:1c:5c:d6:5c:46:e0:4c:
7c:9b:6f:c8:15:96:ee:99:eb:52:ea:5c:e9:8f:a4:27:9e:c2:
a7:be:6d:c6:7d:5d:d8:45:d9:d8:59:34:70:87:09:8c:0c:e1:
f7:33:96:4c:6a:8b:03:41:f4:2a:39:b8:7b:c4:4c:10:fc:be:
38:29:7a:91:44:10:5b:dd:c8:98:b2:67:14:bc:92:cf:9e:98:
aa:09:da:c0:77:83:83:44:9c:54:4c:b4:a4:53:fe:5d:a7:f8:
12:21:9e:e8:df:f2:73:34:77:56:7f:c3:57:68:2c:54:6f:83:
c7:e3:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 03:41:31 2024 by rpki-client on console-fra.rpki-client.org