Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/8037AFF6DF5F11EDA4E4B6AC2F6D8C1D.roa
File: 8037AFF6DF5F11EDA4E4B6AC2F6D8C1D.roa (raw, json)
Hash identifier: Tv4bIR8ErvEXd3st3R9UCT05kprqxgYfbJkHK/CbF48=
Subject key identifier: 5F:44:D2:EA:BD:7D:C3:0E:5D:56:64:40:9F:B5:FA:1E:05:93:8A:D7
Certificate issuer: /CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
Certificate serial: 02
Authority key identifier: BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/8037AFF6DF5F11EDA4E4B6AC2F6D8C1D.roa
Signing time: Thu 20 Apr 2023 09:41:19 +0000
ROA not before: Thu 20 Apr 2023 09:41:15 +0000
ROA not after: Sat 20 Apr 2024 09:41:15 +0000
asID: 329223
IP address blocks: 102.212.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
Validity
Not Before: Apr 20 09:41:15 2023 GMT
Not After : Apr 20 09:41:15 2024 GMT
Subject: CN=644108be-c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:fa:60:bd:8d:48:1a:80:d1:7e:cc:c6:1d:
cd:6b:7b:05:62:05:b5:92:36:04:1f:0a:e5:73:d2:
55:10:6f:89:6b:5b:59:78:f5:5e:7d:e3:50:8c:59:
d9:23:a5:d5:ef:e4:74:64:5a:22:fb:fa:4f:ed:f4:
6b:c3:91:e1:08:b0:a1:00:7e:26:f2:4a:d0:21:b7:
48:a8:8d:26:53:23:eb:b7:0f:5e:eb:60:cd:33:64:
96:42:f2:96:0c:ee:0d:ee:48:c1:04:1e:8f:f0:1d:
d9:63:81:77:f0:20:ad:95:ea:d1:b6:29:3a:e9:8d:
4f:b4:68:e7:6d:f5:ca:d2:d5:78:2d:89:22:ff:90:
65:d7:72:84:3b:a3:61:0a:9d:6c:1e:f6:54:b0:6d:
89:c4:43:3b:35:d2:f1:ef:66:d3:a5:df:55:09:3b:
41:45:31:90:49:d6:a5:7a:d2:6e:d1:8f:bf:43:2b:
81:68:29:5f:1f:d4:f8:44:93:19:03:6f:9a:ed:84:
3b:70:b4:b3:4a:cd:56:f8:11:8a:94:ee:2a:95:0b:
f2:76:0a:4f:af:d5:6b:5d:dc:41:c3:57:f3:f9:46:
68:ad:09:b1:a9:fc:75:65:90:4a:fa:9d:24:e5:1c:
09:44:d4:e9:91:45:0a:b9:c4:96:2f:d0:61:02:1b:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:D2:EA:BD:7D:C3:0E:5D:56:64:40:9F:B5:FA:1E:05:93:8A:D7
X509v3 Authority Key Identifier:
keyid:BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/8037AFF6DF5F11EDA4E4B6AC2F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.228.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b2:fb:80:68:d5:95:9f:8b:40:ea:3b:3d:65:83:e3:fe:f0:
02:c5:36:69:43:0b:a0:62:2d:22:f0:57:a6:55:25:de:9e:f7:
0a:08:94:8e:d1:3a:c6:11:c1:4b:97:8f:93:67:ad:f1:87:2a:
41:08:fa:f5:7f:07:dd:2a:ad:5d:0d:b6:07:65:1d:05:97:d5:
46:98:68:73:a0:73:aa:20:09:c5:6a:24:40:fb:50:c9:b6:3a:
0a:3b:57:b7:ca:5e:65:0c:02:82:50:61:99:6a:4d:80:ab:8d:
08:47:b2:cb:8f:eb:6a:16:d5:b6:f7:58:eb:26:81:a5:ee:35:
7a:7b:75:df:a3:37:4c:02:ba:a6:dc:4b:25:52:73:be:4a:5e:
07:c2:6c:87:1f:9e:d7:5f:1b:08:ff:82:0d:8d:6a:a8:b5:e6:
91:0b:b1:92:f4:5e:91:67:c9:0d:d2:fe:c8:3a:e0:c6:6e:e0:
53:74:b2:d8:73:63:5c:f2:6a:f3:34:0b:c0:1a:5f:be:39:8a:
42:13:2f:fd:c4:86:79:b2:a5:e0:c0:d3:09:03:1f:aa:88:9c:
14:ef:bd:41:4c:2b:bb:d9:9b:4f:b2:ea:4a:20:b0:97:41:e1:
9c:f2:5e:47:80:55:17:df:be:6c:7e:63:f4:4f:22:fc:7d:ed:
ea:b1:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org