Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/43529E1621CE11ECB2D88945D8A014CE.roa
File: 43529E1621CE11ECB2D88945D8A014CE.roa (raw, json)
Hash identifier: ZHu8pFmrSXpkazldCEyRl7VwmaXEWuUcKRcSCU+jyZQ=
Subject key identifier: 1F:56:26:8D:E6:5C:A1:C3:E4:8A:90:08:3F:61:E3:62:3C:DB:B0:3A
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 17
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/43529E1621CE11ECB2D88945D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:10:32 +0000
ROA not before: Thu 30 Sep 2021 09:10:28 +0000
ROA not after: Sat 30 Sep 2023 09:10:28 +0000
asID: 328327
IP address blocks: 102.140.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:10:28 2021 GMT
Not After : Sep 30 09:10:28 2023 GMT
Subject: CN=61557f08-5393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:3b:cb:04:ff:1b:fe:68:26:40:95:42:ca:
5f:8d:de:6f:5f:56:62:a5:b1:5f:d6:2c:0d:05:0e:
2d:ab:cf:67:78:cf:af:f2:9d:c9:95:a5:50:7a:09:
22:61:79:f8:12:ad:0c:4d:66:b9:d1:67:00:84:bc:
98:c9:42:5b:b0:5b:67:00:cb:f8:db:41:02:51:8c:
22:6f:76:fb:04:f1:07:b5:58:cf:46:3f:6f:29:de:
ae:e5:92:c6:7a:47:51:1e:f3:7e:ad:64:f1:55:75:
19:1c:ed:f8:8a:01:4a:ac:0f:35:28:b8:b5:1e:a7:
3a:58:ce:91:44:5c:02:8b:f9:70:a0:8f:ea:33:3b:
72:5e:f6:8e:8f:f3:00:ec:06:f7:d2:69:9b:a0:d2:
a6:6c:16:5c:82:e9:f6:87:db:2b:7f:c1:29:53:57:
99:8a:c4:26:17:90:60:dc:08:e6:b3:1e:8e:28:e0:
72:04:fe:3a:41:f8:76:a3:bb:2c:fc:77:aa:1e:b4:
d5:ab:14:ab:7f:3f:9b:81:7e:df:16:59:7d:00:74:
36:de:ce:5b:83:f0:8c:3a:f2:42:0d:66:88:38:b3:
9c:c3:fd:77:06:96:9b:fe:f4:97:24:a7:ba:4c:30:
92:5a:a7:52:ce:b2:68:25:0a:6e:27:ed:16:b3:68:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:26:8D:E6:5C:A1:C3:E4:8A:90:08:3F:61:E3:62:3C:DB:B0:3A
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/43529E1621CE11ECB2D88945D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.71.0/24
Signature Algorithm: sha256WithRSAEncryption
53:24:c3:1a:09:c6:94:53:e8:79:67:38:61:eb:b1:46:bd:9a:
85:f5:dd:cf:19:6e:6a:3e:64:99:d5:10:e5:d5:e8:54:3e:5c:
87:de:f2:93:f4:ea:64:42:d7:17:a5:fb:56:d2:2d:db:63:47:
ad:d3:2d:c2:4f:c9:2e:80:db:77:8b:09:24:3d:80:01:c6:09:
b7:74:e0:1a:7c:40:04:d3:ce:e2:cd:a5:28:71:86:db:1b:25:
6f:47:75:ca:00:3a:fa:d5:81:31:75:9e:06:dd:0f:5f:39:5b:
17:90:15:b5:6b:ca:f7:de:eb:ad:d0:61:bb:21:99:f9:b7:f0:
65:fc:0d:79:4b:8b:42:af:18:de:ec:91:50:37:d6:5b:5b:da:
80:ff:4c:53:36:70:ce:4f:8d:be:49:b2:90:79:e2:56:86:7d:
ca:e6:9e:f8:c1:7c:7b:68:bd:d2:67:62:08:e8:cf:ac:83:13:
40:1b:30:76:87:b0:7c:ba:60:f1:38:2b:7c:ab:f4:17:9e:83:
33:0e:15:a9:09:75:80:61:75:27:ee:24:d9:f1:d2:21:f8:0b:
5c:81:69:1e:85:4f:4f:0d:0d:c4:38:19:82:81:67:1f:43:0a:
37:1a:ec:1a:6e:cc:9b:08:1a:80:46:6b:3b:6c:49:a5:cd:59:
ff:eb:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org