Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/CDE249EED2F011EDBE8D9FBBF1222468.roa
File: CDE249EED2F011EDBE8D9FBBF1222468.roa (raw, json)
Hash identifier: PrNhIs818fvIL/PyXchg6bAtIXxQhklOsDIUCPiHXrI=
Subject key identifier: 4F:6C:CA:14:B4:52:35:C1:EE:08:C7:DF:6B:80:2C:98:31:11:0B:88
Certificate issuer: /CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Certificate serial: 02
Authority key identifier: 10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/CDE249EED2F011EDBE8D9FBBF1222468.roa
Signing time: Tue 04 Apr 2023 13:58:41 +0000
ROA not before: Tue 04 Apr 2023 13:58:37 +0000
ROA not after: Thu 04 Apr 2024 13:58:37 +0000
asID: 328539
IP address blocks: 102.38.0.0/19 maxlen: 24
102.213.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36232DEAF/serialNumber=1080ACBECDCA1604B666C08B90BDDBEE585D2CF9
Validity
Not Before: Apr 4 13:58:37 2023 GMT
Not After : Apr 4 13:58:37 2024 GMT
Subject: CN=642c2d11-142c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:1c:a4:7b:2b:d8:5b:34:69:5f:28:e0:4a:
fe:9c:86:3c:e7:02:19:1e:f5:7d:88:bb:b1:b5:de:
9e:b8:ef:05:d4:af:e5:62:3d:53:db:63:3b:74:56:
d9:44:55:d2:c4:0f:1a:b7:c3:6f:39:19:ec:26:ff:
34:7f:f3:47:9f:54:bf:67:83:e2:dc:30:08:b3:62:
0f:39:aa:69:d3:50:ba:d4:a2:72:35:4c:d7:9c:b8:
5f:64:df:4b:ef:2f:df:bc:57:ed:37:00:0e:35:dd:
4c:7e:88:89:4a:13:b4:fb:2a:22:67:2f:a6:0c:44:
d1:da:3c:0a:a7:76:18:f7:8f:21:ee:ae:49:d3:42:
17:ea:9f:9a:79:e7:66:af:9f:1b:04:86:fd:85:43:
78:40:c2:d6:b0:1f:a4:78:9f:c5:ae:a4:75:cc:83:
29:27:b1:a8:47:b4:b5:96:f0:10:8e:87:be:35:42:
19:6c:54:e2:d9:36:01:de:bd:a4:fc:7f:8d:b5:b2:
1f:1f:e1:cd:68:4d:ba:2a:d3:2d:e0:b9:e5:2f:2a:
0a:15:6f:43:b0:a1:70:98:d4:7f:29:42:dd:b4:52:
37:ca:51:70:dd:b4:93:0f:89:69:19:87:13:1f:37:
75:bb:47:ca:be:af:d0:73:b2:10:2c:6f:3a:02:fd:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:CA:14:B4:52:35:C1:EE:08:C7:DF:6B:80:2C:98:31:11:0B:88
X509v3 Authority Key Identifier:
keyid:10:80:AC:BE:CD:CA:16:04:B6:66:C0:8B:90:BD:DB:EE:58:5D:2C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/EICsvs3KFgS2ZsCLkL3b7lhdLPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EICsvs3KFgS2ZsCLkL3b7lhdLPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36232DE/EDEE9450D2EF11EDA5921BB9F1222468/CDE249EED2F011EDBE8D9FBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.38.0.0/19
102.213.228.0/22
Signature Algorithm: sha256WithRSAEncryption
05:0c:93:31:56:73:58:56:d1:e0:26:8e:f6:83:2c:44:b2:f4:
c4:3d:81:4a:e7:54:13:55:51:b3:81:76:3d:8a:7e:09:01:13:
57:d1:8d:af:b1:01:8f:55:c0:93:3f:8c:df:db:09:13:29:bf:
19:ec:a8:97:35:04:a0:f3:98:26:22:36:99:c5:e6:e4:7d:38:
36:da:e4:d4:31:c5:fb:96:bd:11:32:df:ab:56:19:3c:8b:63:
62:c3:da:a6:04:2e:a2:36:ed:0e:31:d7:8f:67:09:90:81:33:
03:69:cf:cb:d2:50:a0:3a:52:82:de:76:ba:2b:60:14:3c:99:
af:73:28:fa:6a:39:cd:47:40:c9:be:e5:c6:c7:37:02:59:88:
ce:c1:f5:11:48:31:f5:3c:c7:e8:5e:61:6d:be:5d:cc:9b:82:
f5:9b:e2:4b:31:6c:48:1f:ea:e3:4f:98:2e:e9:1b:d4:ad:7d:
e0:82:72:3f:5b:3b:2c:73:b8:86:48:85:8d:b2:61:d8:7e:70:
cd:72:aa:9b:2f:75:e8:8a:c1:d9:46:15:3d:c3:e6:73:9c:c2:
85:00:b0:1b:db:fd:ef:62:fc:0c:43:a8:5d:3d:69:82:59:be:
06:35:51:2d:af:45:58:52:48:17:da:21:4e:86:82:02:4f:6f:
76:b7:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org