Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
File: 84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa (raw, json)
Hash identifier: lV7hz27+4oGzV1vLaumyOEWVSBLHdgnR+iOyUAlRJdA=
Subject key identifier: AC:3F:30:60:75:41:EC:45:5A:36:18:39:00:A5:F3:5B:E2:58:F7:D9
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0D
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
Signing time: Thu 30 Sep 2021 08:43:43 +0000
ROA not before: Thu 30 Sep 2021 08:43:40 +0000
ROA not after: Sat 30 Sep 2023 08:43:40 +0000
asID: 328327
IP address blocks: 102.140.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 08:43:40 2021 GMT
Not After : Sep 30 08:43:40 2023 GMT
Subject: CN=615578bf-239e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:b5:4a:62:79:0e:af:27:fe:d6:43:c8:9d:
39:8e:cd:ee:86:96:d1:73:2a:d8:17:8c:28:3d:8e:
81:e4:af:69:6a:4c:95:94:53:97:9d:b7:17:c2:a1:
af:e2:b4:7c:ae:62:8c:26:92:c3:c3:62:24:1f:e4:
36:2a:d0:10:7a:f9:75:a9:d1:f7:0f:3b:25:ed:9c:
88:72:94:5a:81:87:d5:27:76:40:15:c4:3c:3a:45:
98:d2:19:46:a1:74:b0:a3:49:de:f6:ec:4f:13:0f:
06:8a:92:df:b8:ac:cd:e4:eb:80:88:d2:8d:15:b7:
82:c6:79:61:d2:d9:81:44:f5:86:77:7a:d1:9e:01:
03:39:81:b4:3b:24:4a:dd:db:53:03:03:8c:a0:d7:
e6:e9:5a:23:38:7b:e0:71:54:41:c6:f4:78:9b:3f:
ad:9a:4c:50:2b:d6:7d:ab:4e:28:63:b7:b6:5e:cd:
05:59:86:3a:fa:34:ec:f6:db:9c:6e:62:56:03:78:
79:44:63:a6:a7:bc:e4:72:97:62:8f:0e:2e:25:1e:
b3:53:3f:57:7f:aa:03:2a:1e:f6:1b:16:15:17:ce:
e7:74:26:99:33:10:1d:a4:d6:9f:8d:38:fd:02:41:
73:47:95:05:7e:84:b5:74:31:2c:f3:03:2b:48:a4:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:30:60:75:41:EC:45:5A:36:18:39:00:A5:F3:5B:E2:58:F7:D9
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/84AFB6FE21CA11EC9AF5CE3FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.66.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b7:3b:f7:46:88:97:7e:8d:8f:4f:2d:26:5e:34:bb:f0:4a:
1e:ee:6b:f0:3c:5d:4d:d2:65:63:56:c5:64:29:38:f0:7e:bb:
e1:6f:fe:40:02:c8:2f:dd:89:ea:b3:87:5e:25:af:48:a9:83:
89:94:bd:54:06:d7:7a:de:b3:96:ba:4d:bb:1d:c8:4c:74:23:
ff:71:d3:49:3c:25:33:32:51:6a:d7:d9:00:e3:9c:46:9f:6b:
c0:bb:3b:1f:34:9e:88:3c:61:a4:5d:8d:d9:78:b8:a7:75:ed:
22:63:36:60:9b:af:d4:61:5a:9b:03:e1:13:03:62:14:2c:04:
f0:44:31:a7:d9:54:12:3d:18:11:2d:88:38:fc:5a:3d:43:be:
25:86:b7:44:3e:3e:31:0b:05:65:22:88:a9:ba:87:d8:20:d1:
13:e7:e7:e7:85:86:c7:39:a9:a1:12:c9:d8:ad:ce:a8:9f:d6:
be:22:8a:1d:4c:f1:a9:f1:ab:41:ce:d2:f6:9b:51:48:de:35:
57:ce:c3:35:ef:59:bd:64:77:3a:5e:f2:2c:1a:da:69:85:cb:
57:8c:b9:5e:3f:a7:1f:5f:6c:50:81:6e:c3:fb:15:0f:33:d1:
66:5d:a6:df:50:b1:49:80:f0:ef:50:5d:bd:8f:f0:9c:40:1a:
fd:59:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org