Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/65FBDD90918E11EBA73F9377F8AEA228.roa
File: 65FBDD90918E11EBA73F9377F8AEA228.roa (raw, json)
Hash identifier: qBEl+rHYJypNK3o9NKI+weYbS8Q2zToa047UiJTPDGE=
Subject key identifier: 1A:FF:9E:F7:CD:4D:C0:CB:1E:2E:F3:64:02:6C:3F:46:9F:F1:36:65
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 06
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/65FBDD90918E11EBA73F9377F8AEA228.roa
Signing time: Tue 30 Mar 2021 19:30:35 +0000
ROA not before: Tue 30 Mar 2021 19:30:30 +0000
ROA not after: Thu 30 Mar 2023 19:30:30 +0000
asID: 328813
IP address blocks: 102.220.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Mar 30 19:30:30 2021 GMT
Not After : Mar 30 19:30:30 2023 GMT
Subject: CN=60637c5b-3075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:cb:8a:d2:cc:82:e4:b8:59:53:79:a4:af:
a1:b3:80:0e:8d:31:ab:46:80:67:6a:d7:9d:a6:48:
a4:4c:b6:40:c2:e2:1f:8b:c9:94:cf:8c:81:c0:b9:
c7:80:a0:06:b0:8e:80:1b:b6:2c:7c:b0:37:0c:96:
8c:4f:f8:d8:00:8f:ab:8c:81:e1:31:67:73:47:70:
d6:a0:fb:48:88:c6:c5:2e:29:03:e4:c9:f2:7d:86:
76:78:4e:c5:9a:c1:6c:b1:f2:a8:07:5a:3e:61:c4:
8a:7a:44:9d:5d:70:bf:f7:d7:25:f8:8c:3a:dc:e5:
20:22:f4:86:45:73:71:18:f1:4e:d0:d7:5c:9a:b4:
08:66:97:ef:0a:ee:af:67:1d:6c:0a:a5:c1:c6:50:
28:c5:7c:57:fc:99:f6:0e:c8:ec:46:ab:45:20:1d:
5f:85:8c:66:4b:6a:bc:87:e7:df:f5:87:b8:cf:6c:
ae:0a:ab:86:39:d1:52:0b:02:19:1e:4d:e3:f0:94:
4b:39:5e:8a:e3:d4:6c:54:ea:1f:35:5f:3d:76:0d:
a3:9e:27:ba:b5:e2:40:24:1d:01:ac:b4:6c:03:c7:
3d:08:45:bf:d6:ab:67:aa:05:cd:78:8e:67:a6:e0:
dc:da:b5:41:60:d1:03:7a:6c:3a:73:0e:27:a3:d2:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:9E:F7:CD:4D:C0:CB:1E:2E:F3:64:02:6C:3F:46:9F:F1:36:65
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/65FBDD90918E11EBA73F9377F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:25:e8:21:c4:23:54:a2:35:97:e1:fc:f8:d2:1c:f0:d1:ac:
95:b6:ec:c4:06:c1:c1:f5:ae:e7:db:b4:75:9a:bc:c6:20:09:
a6:4c:74:92:34:ef:f0:14:61:bb:00:7f:42:65:53:84:82:e2:
33:62:80:14:3f:4c:b7:d6:21:62:cb:f3:9a:67:39:a5:7f:25:
43:89:47:df:fa:b3:d2:a0:fc:89:59:0c:82:21:68:f6:b1:4c:
75:4a:c4:84:50:a1:31:e4:92:71:42:6b:94:b2:c3:50:ef:78:
ae:9b:6f:b5:bf:64:4e:8c:ab:46:e0:b6:ca:41:75:44:29:8f:
0a:0f:08:2f:dc:20:6f:03:30:6b:6c:07:27:a4:1e:c5:a4:1b:
25:2c:4d:88:7d:60:2f:ae:ab:24:cb:55:20:ae:e5:7b:f0:da:
f5:83:c5:36:fb:8e:bd:61:b4:51:a5:5e:ff:e7:f0:b6:c3:10:
3e:40:ef:b6:1d:33:21:80:13:db:8b:01:06:d6:82:f4:25:bf:
0d:48:7c:51:22:f6:ee:5e:6c:6d:8c:b7:b9:20:e2:92:96:83:
76:a7:a9:a2:22:14:e5:12:16:bc:ba:99:4c:80:fb:4f:cc:31:
bc:cf:4f:88:b3:87:17:cd:8c:ff:64:19:ea:9f:46:d8:e7:d3:
4e:c1:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org