Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/F6573086919011EBA105327AF8AEA228.roa
File: F6573086919011EBA105327AF8AEA228.roa (raw, json)
Hash identifier: y1nn93wFN2ADU/ofqVfrkcNWbUZFa0wPrSQ87JBbjP8=
Subject key identifier: 92:D9:2C:0C:27:F5:81:3E:ED:83:1E:CC:9B:AB:A8:0F:AF:78:FC:C9
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 0B
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/F6573086919011EBA105327AF8AEA228.roa
Signing time: Tue 30 Mar 2021 19:48:56 +0000
ROA not before: Tue 30 Mar 2021 19:48:51 +0000
ROA not after: Thu 30 Mar 2023 19:48:51 +0000
asID: 328813
IP address blocks: 102.220.200.0/22 maxlen: 24
2001:43ff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Mar 30 19:48:51 2021 GMT
Not After : Mar 30 19:48:51 2023 GMT
Subject: CN=606380a8-a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:d5:e3:d4:9f:e9:88:5f:35:b6:e1:5c:04:
75:d7:fd:1c:97:8c:58:f3:07:b3:1d:d8:f1:e6:d7:
0c:f5:53:3e:d6:32:17:66:0a:36:6c:89:cd:d7:2e:
9a:01:34:69:91:ea:79:a0:15:e8:8d:d4:11:e0:60:
a7:91:39:50:48:db:e2:d3:00:6d:2b:c4:d4:2d:28:
e8:0a:2a:f7:25:e2:55:23:8b:66:fb:5d:b8:f1:a5:
82:7a:19:67:2e:9e:d7:2f:df:b2:ba:f8:39:7c:90:
31:f4:53:83:d4:62:ab:75:06:56:b3:a1:62:a5:c4:
a0:dd:55:ee:8f:24:bd:d6:18:dc:c3:0c:25:8b:0e:
df:37:bd:80:bd:6f:68:18:5f:0d:c1:fc:a0:b0:db:
5b:5b:95:31:a8:08:8f:24:65:b7:5d:f7:9c:d9:ad:
89:5a:f4:0b:c9:3e:90:55:a6:d5:eb:1e:47:a5:1d:
51:21:a8:ee:d1:4c:10:9f:ae:a8:7e:ee:56:88:b0:
c9:be:6c:c2:78:2d:86:3a:29:51:74:c8:a7:55:6f:
8f:eb:4b:c6:66:b1:ed:3c:4d:0a:94:fa:8a:41:05:
df:5b:4e:d9:d7:2d:35:01:a8:a7:92:8c:e9:89:0b:
96:c3:60:39:eb:2a:e0:b5:60:7a:e5:39:05:ca:24:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:2C:0C:27:F5:81:3E:ED:83:1E:CC:9B:AB:A8:0F:AF:78:FC:C9
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/F6573086919011EBA105327AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.200.0/22
IPv6:
2001:43ff::/48
Signature Algorithm: sha256WithRSAEncryption
6b:73:07:e3:1f:d5:b1:d2:2d:07:08:ad:36:d3:a0:6f:7d:e1:
b1:f8:a0:f9:eb:40:fe:7f:40:c5:41:5b:5d:0c:08:40:46:da:
19:a4:ab:46:68:0c:04:7c:5a:8f:10:8d:2b:4b:12:bf:d7:77:
83:a0:0e:dd:47:d0:6a:c4:3a:fc:b5:94:49:8b:1f:56:c7:75:
3d:b7:25:08:a5:db:d8:9f:a2:93:32:63:cf:45:22:3b:1d:21:
41:e2:6b:de:26:02:9e:52:c2:57:49:d8:a5:ca:0a:a1:34:1a:
4a:d0:6c:cb:fc:e8:5a:13:d9:e0:ce:d2:74:82:ee:70:d5:5c:
dd:29:d9:9f:2f:4c:89:76:ec:0d:08:d7:ac:6b:f0:94:f9:59:
ef:e3:05:02:cc:73:e2:a3:b4:fd:c7:b6:06:44:4b:69:2b:3d:
19:9c:a1:8d:bd:26:7a:9f:dc:cd:1b:33:56:4e:9c:08:3f:e0:
16:8a:2f:9e:db:03:79:08:14:33:fe:c4:0d:36:13:71:ef:a2:
27:cb:e6:e4:21:68:05:46:61:55:3d:93:d4:b4:3d:d5:88:92:
b1:0c:26:d9:23:ee:78:55:a5:f0:98:21:4f:e6:05:41:04:7b:
34:80:68:85:7e:36:88:48:17:71:2d:47:36:88:da:c9:d9:0f:
cf:a6:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org