Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
File: F683E4EE21CA11EC81749140D8A014CE.roa (raw, json)
Hash identifier: vn74HwZH1EcQ9d/1yapLzAFgvGGrYgnG+HN4QgzIoLc=
Subject key identifier: 1E:4D:82:9C:77:07:93:BF:61:A0:5A:F2:C9:CA:73:A5:2F:B6:80:C0
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 13
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
Signing time: Thu 30 Sep 2021 08:46:55 +0000
ROA not before: Thu 30 Sep 2021 08:46:51 +0000
ROA not after: Sat 30 Sep 2023 08:46:51 +0000
asID: 328327
IP address blocks: 102.140.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 08:46:51 2021 GMT
Not After : Sep 30 08:46:51 2023 GMT
Subject: CN=6155797e-d9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:76:e7:01:30:a2:b8:06:bc:7b:af:f1:be:
9f:35:54:d6:5d:51:6a:38:78:de:26:ca:24:f4:83:
ab:04:0f:c5:5c:4a:1b:c2:a2:2f:00:56:75:4c:dd:
a0:9e:38:04:35:0f:5f:12:0d:c6:1f:b6:da:7d:4c:
cc:8d:26:14:99:28:ce:1f:cf:5a:c9:bd:47:b7:76:
b5:7b:ac:d2:5d:8c:be:bd:a1:f3:28:eb:f7:5d:84:
b0:ac:91:14:43:a5:31:37:ec:3a:51:55:fb:67:29:
31:74:fb:26:e1:38:ac:b8:7d:0c:46:af:51:eb:f6:
f2:5a:5f:d3:ab:f0:0b:11:15:46:2a:58:5f:d6:a9:
2e:00:e2:40:3b:f1:b7:e6:4a:f2:73:5e:85:ac:43:
91:0e:8d:21:4b:0f:92:e7:8a:95:94:9c:87:0e:24:
ac:5f:50:5b:ab:52:47:4b:a5:a8:56:b0:e6:36:05:
93:f2:60:62:4d:47:0e:90:a5:2e:70:72:89:8f:b4:
9b:03:63:88:4e:db:26:bb:d9:f1:69:36:1d:e2:6e:
e7:82:ed:24:c5:1a:eb:54:f7:3f:40:d7:63:4e:89:
6d:f8:dd:71:41:21:d9:59:32:3c:da:b8:1b:4d:37:
b3:6d:34:97:f9:de:dc:81:67:89:23:2f:5b:6f:54:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4D:82:9C:77:07:93:BF:61:A0:5A:F2:C9:CA:73:A5:2F:B6:80:C0
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/F683E4EE21CA11EC81749140D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.68.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4b:21:36:cb:c6:b7:e3:db:da:9b:a4:3a:ae:4c:e3:dc:83:
fd:3d:ea:e6:a2:b6:66:5f:cb:cf:a6:c9:32:2c:58:c6:4d:e7:
06:87:90:17:95:6f:46:0f:b6:76:72:52:cb:69:60:a1:c4:28:
22:84:2f:7f:d2:06:34:e3:70:9b:65:11:a2:f3:99:73:4e:63:
9d:88:e2:5e:df:0a:93:87:db:cd:15:a5:6a:ca:6c:13:e9:a6:
94:75:51:92:15:3a:15:81:ea:7e:94:f4:4f:60:4e:82:ed:18:
5b:b8:24:2c:47:40:11:f5:d7:e5:bb:84:88:d5:47:8f:7d:ea:
c1:99:d4:b6:8b:f6:7d:2c:09:92:3a:45:1c:86:af:e5:c8:a9:
35:42:9f:e9:e9:0c:0e:03:fb:da:99:cf:1d:bd:fc:a9:d4:fb:
f4:18:6b:7d:52:fb:ee:14:7c:b2:8d:3c:29:f4:27:3c:85:68:
54:41:79:c6:da:b0:4b:24:5b:31:eb:46:4a:47:11:40:55:94:
35:bb:15:ac:8f:f2:93:cc:87:14:1f:20:6c:63:3f:d2:33:d4:
4c:a7:67:9d:eb:e9:7c:ef:2f:83:a6:7d:a5:cd:c3:66:29:8c:
ea:99:85:c5:2a:c1:cd:a2:83:be:a1:88:7b:54:b4:80:d8:b8:
2b:cc:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org