Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9E36F3EEE5E011E9A6CCB047F8AEA228.roa
File: 9E36F3EEE5E011E9A6CCB047F8AEA228.roa (raw, json)
Hash identifier: pVs6kyYqRGz/HsZ17IrbEshw7RvoXzpb0l75CB6j+tI=
Subject key identifier: 2D:57:2E:17:48:AB:B2:30:4B:67:A1:D2:23:40:30:45:AE:18:B5:BE
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 0A
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9E36F3EEE5E011E9A6CCB047F8AEA228.roa
Signing time: Thu 03 Oct 2019 13:20:51 +0000
ROA not before: Thu 03 Oct 2019 13:20:45 +0000
ROA not after: Tue 03 Oct 2023 13:20:45 +0000
asID: 327687
IP address blocks: 102.34.0.0/16 maxlen: 16
2c0f:f6d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Oct 3 13:20:45 2019 GMT
Not After : Oct 3 13:20:45 2023 GMT
Subject: CN=5d95f5b2-3467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:e8:db:57:67:f6:a3:ae:f4:bf:61:c5:f7:
c6:f2:f5:91:8a:f2:36:ee:d0:48:b6:49:b6:50:4e:
b1:82:47:68:c3:e6:ac:f5:9f:39:1f:d7:bc:64:32:
b1:f1:a8:40:30:b7:bc:5f:23:3e:df:bc:33:16:8a:
2c:57:6f:ea:c8:84:aa:28:34:5e:7b:fc:d5:a2:e1:
c4:39:9f:72:d2:65:31:20:f9:01:09:13:d0:52:85:
0b:6d:06:36:e3:b8:79:b3:7a:93:04:81:db:c4:ca:
36:ea:90:3a:d3:51:ac:5b:81:1e:83:c6:3e:48:e3:
e4:83:e9:6b:be:bb:6e:1b:c4:5b:60:1a:6d:99:ca:
f4:34:4b:39:ea:28:76:78:dc:52:d3:f5:86:18:52:
af:f0:63:1c:58:f4:b5:01:ff:6e:42:a4:a4:77:32:
25:2c:27:bc:51:2a:79:7b:9f:1b:ba:02:3b:a6:17:
ba:e1:be:57:ea:7c:95:47:12:42:28:08:5b:d3:c2:
de:bf:c7:c0:83:86:ac:4d:d8:af:85:87:e6:40:37:
41:26:2d:85:78:9d:be:cb:ed:75:fd:f5:6f:2a:de:
93:ef:30:0a:53:09:f8:5e:f0:6f:bb:ba:95:fd:d5:
1c:f0:36:51:c9:dd:37:70:a0:e6:d9:09:2a:c3:c5:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:57:2E:17:48:AB:B2:30:4B:67:A1:D2:23:40:30:45:AE:18:B5:BE
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9E36F3EEE5E011E9A6CCB047F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.34.0.0/16
IPv6:
2c0f:f6d0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:d2:98:c8:be:cf:a9:16:a1:d0:4c:32:35:db:a0:d2:18:e5:
32:bd:ad:0e:c4:79:d1:77:73:70:7f:e7:a0:33:50:ea:ab:37:
19:01:36:43:5f:2d:d8:ad:39:6e:e9:ba:56:2e:4f:1b:6e:70:
63:92:83:39:21:33:b6:29:b0:a7:3e:66:e2:4e:a6:25:4e:db:
b7:24:fc:ee:d9:25:49:66:7e:26:ce:c7:63:52:9b:98:55:2b:
8b:3e:31:0e:f8:6a:fa:e4:66:ba:b1:5e:a7:9a:c8:a9:24:50:
20:34:65:86:04:2f:99:31:01:8a:fe:b2:9e:a8:a1:89:e4:03:
b6:f6:78:ea:22:3c:54:ba:f2:25:23:78:8d:8b:1c:96:8d:96:
84:90:cd:0a:2b:70:27:c2:bb:48:b7:9e:6d:5a:59:eb:fd:ff:
87:5b:ff:30:a4:87:2f:6b:1a:5a:8f:5e:c8:06:1d:9b:79:8c:
12:e9:4d:73:a8:b1:07:96:5b:3a:71:6a:d5:6e:8b:bc:d6:4f:
14:68:d8:3d:0f:e4:94:49:ed:18:60:62:04:f7:0f:40:fd:ac:
ab:f4:ad:3a:37:2e:16:cc:b9:91:12:7e:bf:0c:f3:4c:bf:72:
b8:7b:aa:a5:a5:44:ed:29:79:9d:89:d9:ca:96:35:79:ea:b0:
ae:79:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 01:29:02 2023 by rpki-client on console-fra.rpki-client.org