Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
File: F1F1896421CE11EC8D8BA946D8A014CE.roa (raw, json)
Hash identifier: K+AngGzMYkRLeGHBeUO34cv/dAmRP1F3Qv+CB5aWQ/k=
Subject key identifier: 6F:3A:3F:6D:B2:76:27:9F:C6:E3:C4:F7:31:DB:F9:62:CD:24:02:3B
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 1F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:15:25 +0000
ROA not before: Thu 30 Sep 2021 09:15:21 +0000
ROA not after: Sat 30 Sep 2023 09:15:21 +0000
asID: 328327
IP address blocks: 102.140.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:15:21 2021 GMT
Not After : Sep 30 09:15:21 2023 GMT
Subject: CN=6155802d-40f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:3a:f7:1d:36:f2:55:0b:ee:f5:d1:c9:91:
de:4e:89:1f:fd:7f:57:b3:e7:73:d5:44:bb:2f:cd:
b7:8b:d8:88:05:11:96:0c:79:4b:5a:fc:09:ac:51:
bf:b3:c5:f3:16:0d:8d:68:f8:40:0f:99:75:5a:e0:
67:5d:29:56:f9:5f:1a:5c:1f:34:22:c5:67:83:54:
4e:d5:c2:1b:d8:ed:ed:4e:1d:9b:b0:64:89:ae:0c:
6a:9c:3a:86:58:47:e7:58:49:37:2c:f0:01:2f:16:
97:2b:b4:b8:3b:19:24:cc:4a:61:81:a8:ff:54:c1:
f6:b8:fe:27:a9:2b:d1:6e:d7:fd:ba:e1:ad:83:f3:
f8:fd:1b:00:66:66:65:35:b5:5d:4b:a0:d3:7c:9b:
31:f3:4a:15:30:5a:58:f8:88:b8:57:23:dc:8a:33:
8e:84:55:36:2b:bf:7a:14:4a:fc:c2:97:bf:17:94:
88:ae:f4:96:6a:a0:4f:c7:92:96:f7:05:98:ca:39:
e6:e2:51:fa:e5:65:b0:5c:8d:8b:21:09:74:5f:53:
b0:95:f7:33:29:56:39:3e:79:04:e2:57:a5:f2:e5:
c3:aa:7f:66:d9:88:47:b5:17:85:b5:37:8c:ea:1a:
2d:6a:a7:31:ef:4d:e2:b7:2c:6c:7a:a5:8a:7a:89:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:3F:6D:B2:76:27:9F:C6:E3:C4:F7:31:DB:F9:62:CD:24:02:3B
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F1F1896421CE11EC8D8BA946D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e8:e7:03:28:96:e2:1c:09:e8:92:e5:d9:ff:f8:8a:05:af:
ab:e1:3e:88:49:32:f4:cb:f4:7a:99:bc:ad:b8:db:b7:46:3e:
6f:b0:d4:0b:01:91:eb:69:dd:99:34:3d:da:fe:b9:51:2e:30:
33:36:6f:b4:7d:2d:b1:3a:5c:4b:c5:4c:d4:ca:47:d8:70:be:
25:bb:c2:f4:c3:2a:ad:67:da:cc:3e:4c:8a:c7:db:09:48:01:
c5:db:ca:de:9b:ac:51:c7:e1:78:8c:65:4a:c9:08:67:69:10:
90:06:3a:41:f4:a7:6b:60:96:61:d7:b0:53:30:52:aa:80:dd:
80:e0:a7:ad:68:c5:5c:3c:e2:a9:b4:62:03:01:8f:17:31:8c:
23:8f:e5:dc:1a:9f:1d:77:6d:f7:e3:3b:9e:b4:30:07:80:e1:
4a:40:34:11:48:fe:f3:f4:f4:ba:45:f5:fd:51:25:cc:ab:82:
35:4e:14:66:73:41:97:09:61:a4:c2:4f:49:d4:bf:5f:b6:b0:
dd:91:93:a1:48:bb:3d:61:68:e5:46:52:e5:8d:26:a3:ed:98:
a2:44:4d:93:60:5a:0d:26:45:c0:e2:96:a9:e3:40:f8:e5:ad:
8d:f3:0a:85:7a:8d:e7:f7:66:1e:7c:dd:e7:89:d3:09:98:c5:
63:4a:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org