Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5BC2C8B221CA11EC8CD68C3FD8A014CE.roa
File: 5BC2C8B221CA11EC8CD68C3FD8A014CE.roa (raw, json)
Hash identifier: IfLIpJJ8DHGkjL6qpBhxSMcD16Jc1kB0WzVcPV/qzSA=
Subject key identifier: 6A:3B:FE:1D:94:9A:DB:FE:75:CE:3B:DC:ED:5C:07:A1:53:90:26:39
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5BC2C8B221CA11EC8CD68C3FD8A014CE.roa
Signing time: Thu 30 Sep 2021 08:42:35 +0000
ROA not before: Thu 30 Sep 2021 08:42:31 +0000
ROA not after: Sat 30 Sep 2023 08:42:31 +0000
asID: 328327
IP address blocks: 102.140.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 08:42:31 2021 GMT
Not After : Sep 30 08:42:31 2023 GMT
Subject: CN=6155787b-e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:da:b6:a0:5e:b2:2c:25:11:37:c3:40:75:
9c:ea:d3:02:f9:1f:39:99:a1:60:2b:1c:77:08:db:
fc:f3:0b:5d:ee:a5:b6:41:74:e6:28:c1:1d:a5:54:
16:5e:28:1b:27:20:64:fe:1e:71:fc:63:47:10:8f:
2b:65:af:70:1e:9b:3f:4f:61:3c:66:ce:14:bb:70:
b1:1a:d6:f6:50:0c:df:e2:35:e0:58:6a:f1:15:cc:
32:69:af:88:20:cd:cd:bc:4f:74:c2:0b:00:98:2b:
52:78:35:52:51:3b:73:64:4c:1c:3c:f1:30:38:2b:
9d:cd:05:a6:73:9f:1b:8a:99:6a:c8:79:28:40:a0:
ed:bb:dc:68:7e:89:58:89:fb:cd:f7:57:7b:69:a1:
80:87:90:91:e2:3e:19:ed:6f:aa:b5:25:d8:58:82:
9d:d9:15:d8:a1:5c:8d:89:e6:7e:c2:ae:8d:2b:28:
23:ab:94:26:92:57:91:1e:46:cd:15:c8:35:e5:7f:
77:13:1f:75:4f:5b:28:54:99:00:84:17:29:ab:bc:
6f:f4:d8:22:e7:9e:cb:52:30:2a:b5:1e:b8:ee:c4:
9a:b1:39:c7:5a:59:9d:f2:ce:5b:33:f4:82:28:eb:
b6:d9:6e:d0:e7:16:77:06:b6:3a:b5:37:a3:6e:fd:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3B:FE:1D:94:9A:DB:FE:75:CE:3B:DC:ED:5C:07:A1:53:90:26:39
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/5BC2C8B221CA11EC8CD68C3FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.65.0/24
Signature Algorithm: sha256WithRSAEncryption
45:41:4c:be:40:88:98:91:2a:d3:34:0d:a2:1e:ee:83:7b:b6:
df:fc:3b:39:95:9a:97:80:21:da:1e:76:bf:33:70:e9:db:bc:
85:46:8f:61:f3:21:7f:42:47:21:21:c9:9b:a6:7f:4c:e6:2b:
6d:35:64:ea:22:fa:dc:b0:42:f4:a7:81:8c:82:59:dc:89:1c:
9e:73:22:01:24:7d:2e:a2:d8:24:08:73:68:c2:d0:64:35:a8:
b2:2b:c2:2e:ef:1d:8b:ac:c2:6b:d0:56:c2:ab:49:26:82:90:
4a:ea:96:ac:84:0d:1b:67:73:4d:d8:e5:40:1a:3d:65:2b:1e:
fd:83:85:0a:02:d4:13:a5:c5:74:56:8d:2b:ea:ee:53:22:a0:
17:a3:f5:50:71:25:f0:a9:57:dd:e6:be:55:62:8b:f0:2f:a8:
04:a9:05:09:80:34:5c:28:2a:e5:e3:5f:e4:a5:bc:7a:cc:f2:
40:42:91:46:1e:b3:01:4e:ca:da:66:22:1f:ea:ce:71:49:05:
0a:e2:49:6e:03:42:7d:43:dc:c0:4e:70:59:05:c2:14:dd:e5:
c1:a6:8e:8b:35:8b:74:c4:d1:71:dd:1f:3b:43:bf:28:e1:39:
3b:02:65:37:66:40:64:bb:1e:84:8a:c4:3b:42:c8:47:41:72:
c4:cf:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org