Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B7C6BF10918D11EB98E7DC76F8AEA228.roa
File: B7C6BF10918D11EB98E7DC76F8AEA228.roa (raw, json)
Hash identifier: EQAvXjZroIV6MNvSLkKZBR6hly7FL0oARC5qhOJWiTU=
Subject key identifier: 6A:20:3F:D7:B8:EB:63:94:67:EA:EB:EE:DC:B1:A9:37:3C:6A:99:E3
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 04
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B7C6BF10918D11EB98E7DC76F8AEA228.roa
Signing time: Tue 30 Mar 2021 19:25:43 +0000
ROA not before: Tue 30 Mar 2021 19:25:36 +0000
ROA not after: Thu 30 Mar 2023 19:25:36 +0000
asID: 328813
IP address blocks: 102.220.200.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Mar 30 19:25:36 2021 GMT
Not After : Mar 30 19:25:36 2023 GMT
Subject: CN=60637b37-30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:ec:7f:88:d2:08:29:3f:dd:ca:30:45:2a:
f0:f3:fa:04:21:b9:49:63:44:83:53:6a:6c:20:90:
3e:04:95:a0:cd:6e:b8:df:75:aa:77:af:11:00:f5:
61:9a:e5:49:ce:58:5c:3f:ca:ca:89:92:17:9a:da:
5d:6f:f2:42:76:c6:60:64:e0:58:07:41:9b:69:6f:
d1:aa:b3:9b:25:cb:4e:ee:bb:f3:f7:b1:ec:49:d7:
e6:5f:55:0f:40:d4:74:ce:d6:9a:b9:d6:e2:af:3e:
29:8e:63:ec:ba:5a:a7:80:1b:d8:30:ce:86:32:27:
fb:bc:41:35:0a:3f:fd:2b:65:76:c1:c9:fd:a0:75:
9e:e8:03:3d:e5:3c:11:e6:c9:39:ec:e6:e1:1d:5b:
32:5a:ed:14:d1:55:8e:6d:68:2c:f1:a0:c6:f0:d7:
0e:32:b4:43:a4:f8:f2:d1:96:77:5b:02:17:fa:fa:
7d:8c:69:4a:ec:b1:e6:19:a0:25:af:62:65:36:37:
68:42:31:40:04:aa:96:34:2b:6c:61:6e:0a:9d:52:
2f:1e:8f:ce:ad:46:eb:ef:52:e4:6e:d7:11:24:23:
a4:c2:a7:d8:40:89:28:21:08:a7:55:64:3d:e0:46:
6c:e0:3e:66:92:aa:37:97:b1:10:1d:04:2e:64:92:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:3F:D7:B8:EB:63:94:67:EA:EB:EE:DC:B1:A9:37:3C:6A:99:E3
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/B7C6BF10918D11EB98E7DC76F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.200.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a7:bc:22:67:e3:cd:5f:91:3e:0f:8f:81:56:24:68:62:d7:
f2:d5:33:1e:d0:8a:82:e7:6a:33:58:5a:62:e9:7c:d7:e0:af:
a4:51:9c:1b:e4:bb:64:1b:ed:80:c4:12:cf:67:6d:66:1a:f0:
4a:72:b7:a7:cc:78:aa:25:40:08:0c:77:18:d9:54:47:24:dd:
e0:91:a4:99:da:51:71:3b:8d:11:a6:1d:28:dd:66:c0:3d:93:
e2:82:51:f6:86:61:b2:15:bf:1d:0a:98:54:16:6e:0a:5b:e3:
84:80:1b:c8:5e:6d:28:7c:1a:6a:65:d6:b6:29:89:ea:93:42:
f0:e4:81:24:1b:b5:64:4f:96:5a:b9:b5:6d:4e:2e:58:a3:f7:
ae:cb:ba:d7:9e:e7:73:8e:2a:1f:8f:b0:ac:01:ca:5c:31:1f:
01:0a:0a:43:2d:93:19:b1:c7:2c:31:5c:9b:51:1d:b1:7e:88:
9a:1b:6e:7e:d2:fe:2b:af:fd:e4:e5:51:cc:14:26:f4:7b:3d:
23:46:eb:82:72:eb:c6:5c:9c:4c:86:79:86:3e:df:b4:6a:97:
ba:d2:4a:c3:13:c7:63:b1:69:5f:1a:1c:ce:78:29:8f:40:9e:
73:81:d6:63:af:c2:63:56:b0:9c:e6:4a:47:c8:0a:7a:90:77:
c8:5a:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org