Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/F9C8A396905911EF83EF5A5D762E951A.roa
File: F9C8A396905911EF83EF5A5D762E951A.roa (raw, json)
Hash identifier: s+KPv5M1fWj8JPaZDunxoR8/97mdhSVbx+KUG2OQBQk=
Subject key identifier: 1B:66:98:EE:FD:EA:BB:22:B2:73:70:A0:76:DD:B6:A4:86:97:4D:99
Certificate issuer: /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial: 052C
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/F9C8A396905911EF83EF5A5D762E951A.roa
Signing time: Tue 22 Oct 2024 09:42:39 +0000
ROA not before: Tue 22 Oct 2024 09:42:35 +0000
ROA not after: Sat 26 Oct 2024 09:42:35 +0000
asID: 43260
IP address blocks: 102.36.161.0/24 maxlen: 24
102.36.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Validity
Not Before: Oct 22 09:42:35 2024 GMT
Not After : Oct 26 09:42:35 2024 GMT
Subject: CN=6717738f-062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:a8:24:b7:0b:dc:c3:ba:1f:20:bb:be:40:
2f:74:d8:90:3d:dc:d6:c2:01:72:55:08:3a:7d:10:
5f:2e:2d:74:49:e7:13:37:56:9b:59:52:7e:1a:60:
b3:cc:19:1d:11:d0:94:10:1c:bf:5f:6d:48:86:0e:
7c:84:40:7f:8c:4f:bd:27:f4:9a:88:d4:81:3d:a5:
5e:68:b9:10:25:2f:a1:4e:40:a6:27:b6:43:a7:16:
35:34:f8:42:b3:b8:f5:52:7a:6a:f1:e5:4a:80:d0:
36:a8:a2:a2:3f:e8:58:22:1c:27:43:be:00:18:fc:
45:a2:34:e8:7b:62:33:e1:51:f7:b9:7b:51:eb:2b:
a7:fa:19:dc:15:33:1a:03:cd:6c:03:d8:81:9d:7e:
ed:b8:55:69:a2:44:a0:7d:f6:02:1a:64:c7:93:9c:
90:83:92:00:9c:e3:33:f1:20:ff:52:7d:7b:04:3d:
3c:68:2a:f4:d2:de:ee:c2:9e:fa:93:3c:49:b6:88:
43:4f:8c:34:7b:c7:a8:87:5b:37:d4:c8:21:a8:12:
7c:0e:16:78:24:54:e4:8c:44:a1:3d:5c:00:4c:a2:
3a:6c:25:2e:d8:5e:a1:39:09:e1:99:71:a0:03:ef:
c8:e9:c9:0b:88:bd:70:e7:2d:4b:2e:c9:63:4f:53:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:98:EE:FD:EA:BB:22:B2:73:70:A0:76:DD:B6:A4:86:97:4D:99
X509v3 Authority Key Identifier:
keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/F9C8A396905911EF83EF5A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.161.0-102.36.162.255
Signature Algorithm: sha256WithRSAEncryption
35:de:55:68:1a:80:57:0f:e4:38:58:0a:31:a3:98:6d:42:d6:
0a:38:61:40:b2:a6:94:95:cc:ba:a1:32:09:45:f2:b9:c8:a4:
10:f3:eb:f8:2c:80:e0:a1:18:9f:52:1a:ec:04:85:50:18:01:
5c:40:8d:a5:ee:a2:cb:77:55:72:86:8e:04:f5:af:36:f2:04:
d8:c5:9a:82:2f:b3:15:89:bf:6e:ac:ed:45:b1:7d:37:10:75:
d0:71:44:35:60:e7:37:63:a5:26:04:e8:a8:b3:1d:5d:d1:36:
b6:08:e2:ec:67:14:a5:06:a1:40:d9:18:07:d4:36:d0:0e:d7:
30:bd:6f:29:86:e0:51:3e:c7:9d:76:17:9f:90:9c:c1:93:18:
e5:31:81:b8:b5:a0:e4:90:db:63:9e:48:07:91:4e:ca:3a:45:
b0:69:3c:91:38:ab:84:d5:d7:1d:79:f5:50:67:2f:ed:ad:f2:
0b:1a:00:2c:39:8f:59:e9:d8:14:fb:2f:b0:31:ff:2c:cd:b1:
08:cb:bc:8d:50:66:37:ae:3d:d4:5a:07:ca:1e:94:99:ce:8d:
21:d7:0d:4f:b7:b6:31:e1:ea:a3:b9:63:04:29:95:1b:f5:ad:
12:7f:61:61:53:4b:0d:78:0f:67:c0:66:79:5e:f2:d5:a9:af:
c7:35:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 04:25:27 2024 by rpki-client on console-ams.rpki-client.org