Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/B5FC4AF09B4611EDBFD3BCB1F1222468.roa
File: B5FC4AF09B4611EDBFD3BCB1F1222468.roa (raw, json)
Hash identifier: di4OLPwaI1jNPtqQCQtzakrDocAouYkv1xB8B3Q8ypY=
Subject key identifier: 4E:56:5B:FD:E2:29:62:17:03:C5:2E:D9:44:57:BC:74:10:52:1D:BE
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 04
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/B5FC4AF09B4611EDBFD3BCB1F1222468.roa
Signing time: Mon 23 Jan 2023 17:52:32 +0000
ROA not before: Mon 23 Jan 2023 17:52:28 +0000
ROA not after: Tue 23 Jan 2024 17:52:28 +0000
asID: 37284
IP address blocks: 102.223.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Jan 23 17:52:28 2023 GMT
Not After : Jan 23 17:52:28 2024 GMT
Subject: CN=63cec960-7e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:d7:37:53:6c:85:60:67:5d:64:a5:a0:4b:
eb:6c:6a:49:02:65:22:54:6f:7f:d0:19:2a:b4:1c:
56:5f:31:5d:b6:1c:81:04:7d:9a:07:3a:73:0c:76:
f9:ad:e3:3f:6f:e5:37:2f:f0:60:aa:73:1d:32:d8:
bd:43:30:d2:46:cb:68:ca:c3:70:c7:77:28:10:3b:
d2:6e:ae:97:cb:86:b4:24:12:fa:b0:41:04:ca:2f:
93:b8:c8:8c:fe:be:4e:11:70:52:81:79:f0:e0:bc:
9a:0f:d2:1d:cc:af:59:2d:ec:b2:c0:ac:67:6b:33:
a0:48:b3:ac:bf:71:9c:aa:ea:fb:52:50:1b:c4:aa:
97:8b:6b:1d:0d:44:9a:05:8f:92:75:a3:25:0d:3e:
48:1d:3b:07:7f:48:00:57:e6:64:b9:ca:6f:f7:b6:
9c:58:9a:7a:62:ec:54:e4:48:64:25:9f:06:9f:22:
25:59:95:84:a7:ac:0b:81:58:58:c3:03:32:d9:7f:
9b:41:34:8b:bf:cf:a2:2a:5d:6c:3a:97:5c:ec:e4:
92:86:b2:4f:56:cc:b6:fb:83:dc:be:46:8a:ea:f0:
4b:d9:19:a5:52:78:48:14:15:a2:00:02:fc:6b:e5:
9d:d7:9a:a9:a0:14:fb:4c:6b:45:c4:4a:04:8f:2a:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:56:5B:FD:E2:29:62:17:03:C5:2E:D9:44:57:BC:74:10:52:1D:BE
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/B5FC4AF09B4611EDBFD3BCB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.223.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7e:8e:42:95:77:d4:40:41:27:f3:2c:19:13:56:40:8f:01:
cd:62:40:f9:94:62:51:ee:fa:1c:b8:a8:03:70:86:e2:75:fa:
15:93:89:3e:81:14:04:95:54:4a:3c:93:bf:34:7d:4b:28:2d:
72:55:f2:3c:51:66:c5:1f:0d:44:12:d0:20:e3:59:0a:7e:bb:
00:32:c0:7f:fe:0b:a2:c8:81:61:69:96:57:f1:ca:68:5a:83:
e2:4e:75:48:83:46:08:76:55:5a:a8:ba:db:97:22:32:34:43:
f8:ed:44:ae:b0:af:2d:c7:64:6b:9d:2b:68:8d:f7:db:d9:a3:
41:25:dd:a2:d2:77:e4:eb:d0:ee:f6:79:7f:b8:1f:0e:39:c7:
0d:12:3b:95:58:fe:51:d4:2d:95:93:e2:81:9f:e8:f8:1a:2b:
a9:e8:62:53:4b:65:57:50:23:10:7e:e6:8d:25:9d:d1:e9:93:
3c:cc:58:93:d9:b7:5a:2b:4c:29:31:24:c4:1f:11:c0:76:a2:
e8:11:7e:29:10:f9:ff:84:a0:04:c3:79:42:07:ca:24:00:68:
54:d4:f1:51:58:ad:f3:17:84:11:fd:17:53:46:ef:46:11:cb:
74:03:dc:52:e6:e4:9c:9f:9f:87:e6:e9:52:09:26:ac:7d:5a:
4d:e8:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org