Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
File: 2C9312F421CF11EC9E0B1247D8A014CE.roa (raw, json)
Hash identifier: rwCS8uWj0DvppYtq5zC8XlWINTCR6aj5mTX3UCz9Ig4=
Subject key identifier: 05:C0:18:9F:EA:38:7E:0F:8B:39:4E:8C:A4:EC:CF:44:63:D6:94:FE
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 23
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:17:03 +0000
ROA not before: Thu 30 Sep 2021 09:17:00 +0000
ROA not after: Sat 30 Sep 2023 09:17:00 +0000
asID: 328327
IP address blocks: 102.140.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:17:00 2021 GMT
Not After : Sep 30 09:17:00 2023 GMT
Subject: CN=6155808f-2a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:21:82:a2:99:35:9e:99:af:5c:67:05:71:
2d:34:a7:6a:99:91:ea:3c:02:f9:08:f7:3e:1f:75:
70:30:31:b6:4f:fb:af:21:2a:8d:9e:9c:a2:5a:de:
43:fc:88:05:f8:02:dc:71:fa:36:9c:1c:ef:05:6f:
14:e6:65:a2:ea:f4:3e:30:71:a6:81:0f:74:16:80:
6c:90:1c:e0:f3:94:35:8f:4b:1a:bb:42:3b:e0:42:
d4:f2:8a:51:bb:b4:01:22:64:61:aa:54:0b:d2:b8:
8f:e2:5b:c5:7b:f3:83:c8:e0:da:fd:df:29:e4:b7:
4f:47:20:ee:b3:83:b9:67:f3:a8:18:ea:ed:d7:5c:
16:22:8a:ba:2f:a6:67:1e:5e:af:3c:f5:3e:74:71:
6f:56:03:42:67:59:60:a3:0b:75:12:ad:68:42:b2:
98:4a:f1:cc:2c:07:bf:41:9a:f2:9d:55:82:1e:be:
87:d2:2a:79:96:75:28:ad:33:08:a3:ed:69:22:24:
e5:b4:b7:6a:54:68:73:fe:72:61:29:45:c2:0d:22:
80:f7:41:39:11:63:ef:96:3a:5c:04:e8:ed:37:80:
88:3d:71:0b:ad:23:65:b4:13:64:2a:25:a1:c9:2e:
ce:8c:04:fd:8c:61:26:5d:98:8b:48:20:47:a6:7f:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:18:9F:EA:38:7E:0F:8B:39:4E:8C:A4:EC:CF:44:63:D6:94:FE
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/2C9312F421CF11EC9E0B1247D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.76.0/24
Signature Algorithm: sha256WithRSAEncryption
68:01:e4:af:ee:6c:6b:41:62:49:e1:d0:82:b3:fe:62:00:60:
a8:63:34:91:9a:9e:93:b8:d7:7c:f8:14:a9:86:83:24:c1:e2:
cd:5c:34:3e:a0:f6:cc:dd:df:81:81:69:76:1f:a2:10:ff:b2:
a6:22:cb:22:bd:f5:ae:cd:13:b8:af:1e:85:7c:df:13:f4:8c:
ce:c2:a9:d0:26:54:6b:0b:26:5c:b4:23:d3:e6:4f:b6:7b:0a:
17:97:da:ca:92:52:09:9b:0c:e9:38:20:61:82:d3:dc:7f:bc:
3f:78:fd:73:e5:cd:2e:e2:75:e7:5f:9c:af:b1:12:dc:f9:da:
f0:0e:5e:4f:4a:15:77:5d:b3:a5:e6:5d:90:c6:ae:00:b9:c0:
a1:e6:90:1d:a9:c6:19:2b:4c:55:3b:19:2b:e3:d9:a2:f1:82:
43:5d:65:71:e4:df:b6:fc:02:d9:95:97:3c:77:04:7d:58:76:
62:ba:55:ca:e3:c2:0c:58:c4:c7:ef:1d:0e:79:aa:1a:20:fb:
67:dd:16:fb:76:c3:4d:03:85:f9:7f:66:70:1d:8d:e4:03:cc:
15:76:b4:4b:ad:80:c3:f6:1d:7c:ce:91:46:14:68:56:a1:fd:
74:d1:f4:2b:be:4f:6b:f3:83:a4:4f:b1:12:5c:1c:ca:00:91:
f4:ac:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org