Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/F14F386EFB4311EBAEE7653DD8A014CE.roa
File: F14F386EFB4311EBAEE7653DD8A014CE.roa (raw, json)
Hash identifier: dGI/cxnH3aXqsImUomuk9BLo6k2uX5jb+RyEvOqGk6c=
Subject key identifier: F6:6E:17:1E:3D:01:5D:42:8E:8E:1F:B5:53:CA:E1:E4:98:F8:F7:A5
Certificate issuer: /CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Certificate serial: 02
Authority key identifier: DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/F14F386EFB4311EBAEE7653DD8A014CE.roa
Signing time: Thu 12 Aug 2021 08:05:22 +0000
ROA not before: Thu 12 Aug 2021 08:05:17 +0000
ROA not after: Thu 31 Aug 2023 08:05:17 +0000
asID: 328403
IP address blocks: 102.130.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36162E8AF/serialNumber=DD83C8C005CD7104B826E6DAA24BC95179089AA3
Validity
Not Before: Aug 12 08:05:17 2021 GMT
Not After : Aug 31 08:05:17 2023 GMT
Subject: CN=6114d641-923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:b9:3b:26:ac:05:6a:5a:87:d6:65:49:ba:
55:bb:1f:9e:24:64:08:af:30:7d:b4:28:c2:25:22:
a7:91:a5:61:4a:5e:35:a7:ed:bd:73:a7:b6:34:be:
16:ea:dd:45:f1:28:d2:18:ff:1e:97:32:ac:09:de:
1b:dd:bc:df:3f:12:c3:aa:c5:78:8e:56:ab:4d:b9:
d6:27:1d:7e:c6:db:0b:8b:9b:91:b5:ad:6a:bc:17:
ad:fb:75:4c:e9:24:57:18:a6:c1:fe:56:fd:6c:83:
a7:7f:14:11:c1:51:cb:be:fb:43:d8:77:0e:ed:93:
b1:b9:c0:f8:92:38:45:69:ac:25:e2:e8:1b:fa:74:
87:b3:45:0a:69:ce:38:a9:0a:44:29:cc:cd:29:2f:
ad:b6:e9:a3:c7:5c:68:e6:b6:7b:02:8f:a2:0c:41:
bd:91:a5:e0:74:ce:aa:1a:45:e0:a8:cc:dc:aa:c4:
89:a7:51:e8:91:81:20:b1:dd:c6:29:6d:b4:a1:e2:
08:e1:40:37:ee:43:c5:a1:de:27:cf:9a:3e:72:70:
a5:21:cc:a5:e4:db:ea:e5:62:f7:e1:47:7d:f7:08:
10:a7:2c:6a:cd:ab:99:38:8b:86:12:6f:68:c0:f2:
66:13:e2:86:6c:8b:f7:fd:19:e8:2b:da:5f:06:05:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:17:1E:3D:01:5D:42:8E:8E:1F:B5:53:CA:E1:E4:98:F8:F7:A5
X509v3 Authority Key Identifier:
keyid:DD:83:C8:C0:05:CD:71:04:B8:26:E6:DA:A2:4B:C9:51:79:08:9A:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/3YPIwAXNcQS4JubaokvJUXkImqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YPIwAXNcQS4JubaokvJUXkImqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36162E8/785C504AFB4311EB8A8ABF3CD8A014CE/F14F386EFB4311EBAEE7653DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.130.101.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d8:24:46:3c:d9:d4:26:b4:dd:56:c1:61:42:75:cf:31:67:
42:4f:eb:34:9d:76:3e:c1:80:10:03:a8:c2:4f:42:2c:b6:69:
d8:15:95:b6:e0:60:0b:20:76:a0:e6:42:9a:82:c9:31:4e:47:
80:81:56:8b:1b:50:9b:f5:cb:2f:9a:64:22:a6:8c:aa:4f:15:
a2:ae:15:81:aa:83:a9:af:72:b8:4c:78:a5:4d:a7:3b:57:75:
2c:1e:5c:a5:b2:61:fc:e3:eb:59:67:ea:42:3e:7e:37:8b:85:
0d:4a:fd:58:23:94:b2:f8:30:3f:73:1d:74:02:21:b5:37:4c:
62:bc:98:99:9c:06:7c:ef:22:9c:5c:82:62:5a:d5:ec:bf:1e:
da:99:ef:76:36:86:e3:b1:b2:5c:22:63:20:51:7c:e9:32:4c:
e0:58:a7:eb:12:28:10:7a:5b:77:9e:35:54:30:16:3b:1f:54:
51:96:ae:ea:09:26:22:53:11:8a:bf:de:55:a1:77:15:f6:d7:
a5:08:5c:2a:5d:c4:a2:dd:b0:e0:97:54:2d:4b:a8:3d:2d:c8:
d5:40:19:4e:b1:0d:8c:97:0b:48:a6:ad:51:b5:eb:e4:8a:b2:
cb:db:c5:5d:32:ea:92:a7:79:13:f4:98:32:cd:37:95:ee:c4:
c4:91:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 01:50:12 2023 by rpki-client on console-ams.rpki-client.org