Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27967D0A904D11EFA81FF08C762E951A.roa
File: 27967D0A904D11EFA81FF08C762E951A.roa (raw, json)
Hash identifier: TxovVrjTcCodj2wzR2WaAIiu096PfloRSJTyMYp9uE8=
Subject key identifier: F0:12:BF:FC:97:74:63:62:37:84:56:B0:08:BA:40:B0:DF:C3:1A:34
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 052A
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27967D0A904D11EFA81FF08C762E951A.roa
Signing time: Tue 22 Oct 2024 08:10:52 +0000
ROA not before: Tue 22 Oct 2024 08:10:48 +0000
ROA not after: Sat 26 Oct 2024 08:10:48 +0000
asID: 43260
IP address blocks: 102.220.212.0/24 maxlen: 24
102.220.213.0/24 maxlen: 24
102.220.214.0/24 maxlen: 24
102.220.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Oct 22 08:10:48 2024 GMT
Not After : Oct 26 08:10:48 2024 GMT
Subject: CN=67175e0c-46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:19:21:34:48:49:11:29:fc:14:13:60:53:
c2:41:75:d5:f4:b2:0a:a0:1f:5c:55:14:0a:9d:23:
19:9d:11:60:88:6b:b7:ad:f5:15:9a:ac:40:29:6d:
e7:24:eb:15:0c:8a:28:28:d7:81:ca:3e:60:08:a6:
61:6b:6f:00:6b:11:5a:ad:b5:c6:6d:ca:f1:94:67:
6c:1a:bf:b7:74:42:a1:d5:e0:1c:15:84:81:81:a3:
da:79:15:50:80:ce:ef:cf:9e:20:3a:19:fb:8e:41:
30:1b:db:a3:3e:00:1a:b6:7c:b3:ae:e6:19:63:2d:
15:a7:ed:35:33:02:8d:ed:d3:b9:a3:9b:74:ae:00:
ed:eb:20:93:b6:db:0e:66:7c:27:88:de:ab:92:bb:
76:b6:1b:24:f3:9c:d1:78:cf:c9:13:47:57:d0:a9:
f3:59:f0:54:58:cc:50:ef:6e:55:6a:45:b5:55:e5:
9d:13:23:dd:6c:79:71:6e:49:0c:05:9c:5a:55:e8:
30:7e:47:ec:ed:28:a8:45:d8:35:1e:2b:d9:47:58:
f0:6b:b3:05:69:cb:11:23:45:cc:70:d2:54:79:f3:
5c:b4:28:59:76:5e:36:20:07:70:bf:8c:2a:ad:54:
2f:b6:91:39:7c:2c:b1:d9:0c:0c:ba:49:73:b3:ae:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:BF:FC:97:74:63:62:37:84:56:B0:08:BA:40:B0:DF:C3:1A:34
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/27967D0A904D11EFA81FF08C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:af:63:80:ce:8f:4e:f2:b8:03:67:57:ff:70:b8:a7:e2:63:
68:c4:ef:ba:54:db:a8:d0:48:d1:08:5a:25:6b:8c:a6:d4:0d:
70:47:58:0b:b8:78:9e:28:c6:36:33:d7:cc:71:aa:96:ea:19:
11:5c:84:c3:c7:72:29:bf:21:fb:7d:15:34:dd:6d:98:db:f4:
a3:1a:29:2f:a3:41:09:47:05:63:2b:9e:42:f0:0e:00:f5:7a:
f6:b9:4c:9e:e3:03:eb:44:9f:e9:fb:81:93:6c:10:a3:67:7b:
6c:e5:19:3b:01:18:da:f5:f1:19:6d:b8:78:87:29:77:15:78:
cc:95:75:3b:8b:93:a7:23:70:6c:0c:3d:85:8c:b8:6f:21:b4:
95:2b:cb:5b:99:46:19:4b:b1:dc:90:8f:cb:f6:2c:e6:c9:05:
83:5a:3f:3a:54:e1:eb:68:e5:5a:ff:c4:a9:b7:9e:51:1d:50:
11:eb:2e:15:26:cd:23:b1:06:cb:7d:85:ab:ec:97:0d:52:d7:
8c:21:b7:34:c0:71:3c:f4:77:75:7d:a7:70:b1:fa:5e:83:8e:
b3:e2:ec:4e:2c:c7:df:07:54:82:56:56:5a:28:ed:6f:ba:9a:
1c:4c:99:2e:f0:09:9b:07:55:f3:19:8d:0d:95:44:fd:72:d6:
87:e3:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 03:00:41 2024 by rpki-client on console-fra.rpki-client.org