Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/64437C16A3DC11EEB87A3523D25BE465.roa
File: 64437C16A3DC11EEB87A3523D25BE465.roa (raw, json)
Hash identifier: 7yZkcCIYzaFWAC+J8VGJDFTNl0v7MzWD6R8M6XHGcQg=
Subject key identifier: 90:E2:D8:85:F0:22:99:00:24:6E:90:D2:AD:9E:4F:A6:99:81:7F:48
Certificate issuer: /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial: 056D
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/64437C16A3DC11EEB87A3523D25BE465.roa
Signing time: Tue 26 Dec 2023 10:49:07 +0000
ROA not before: Wed 27 Dec 2023 10:49:03 +0000
ROA not after: Thu 28 Dec 2023 10:49:03 +0000
asID: 328608
IP address blocks: 102.219.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Validity
Not Before: Dec 27 10:49:03 2023 GMT
Not After : Dec 28 10:49:03 2023 GMT
Subject: CN=658aafa2-b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:20:fc:71:ba:c0:54:e3:31:74:86:84:fe:
5a:24:2a:8c:3b:f2:cf:75:4c:92:fb:4c:55:fc:9e:
ad:d7:0e:19:13:3c:ee:79:30:89:2c:d1:17:11:09:
14:6e:cb:a8:da:91:3e:5e:cc:51:cc:46:b4:66:93:
47:81:04:f0:89:fe:82:90:4a:4a:1d:78:f5:4e:37:
5f:d6:ca:9d:03:d3:0f:51:b0:d2:47:ee:a2:90:b9:
a2:cc:53:74:d2:1d:78:5e:a5:87:55:af:2a:ae:61:
65:80:94:41:8b:b2:81:15:e8:32:64:ba:c5:97:f1:
73:4d:1a:df:fb:4b:cc:b6:a2:34:da:38:be:6e:7a:
30:52:61:e8:9a:f6:07:72:1c:4c:4f:20:ed:98:94:
58:19:2f:b8:48:98:38:ac:72:01:e7:db:ea:b8:b0:
31:c9:9d:c9:60:d3:1b:84:d9:cc:ad:f0:f9:37:61:
2f:f9:1e:74:19:55:f4:a6:ce:4c:a4:4a:98:42:2b:
b0:f1:a3:a6:07:f0:40:da:73:a2:9b:45:91:9d:68:
1a:58:08:d2:c1:3c:db:88:68:5d:b8:93:35:01:36:
13:9f:3b:e5:ea:58:6a:de:77:30:b0:f9:36:38:4d:
df:86:da:36:2b:cf:fe:d0:e9:24:08:82:6b:71:ec:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:D8:85:F0:22:99:00:24:6E:90:D2:AD:9E:4F:A6:99:81:7F:48
X509v3 Authority Key Identifier:
keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/64437C16A3DC11EEB87A3523D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.219.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:76:2f:06:ff:38:82:87:32:e0:99:82:b3:23:f1:c9:b0:6f:
4f:25:c6:05:e1:d8:5e:a4:af:e1:97:a5:3c:d6:4e:5b:31:b3:
c1:01:00:83:3a:dd:cd:3a:9a:1b:df:e7:c5:7e:66:e6:91:c9:
59:7f:25:bb:11:8f:7b:46:49:30:ab:12:d7:77:3d:d4:10:50:
fd:d3:94:ca:16:6b:c7:f3:6b:c3:21:c2:ac:bf:3f:73:bb:1b:
2f:df:32:f2:90:68:78:0d:7c:13:83:fa:d7:f3:5a:77:18:3a:
b3:01:48:bd:80:3b:3f:51:13:b1:da:ea:99:1f:80:4f:ad:72:
ff:f1:9a:c5:c6:85:68:83:d0:89:fb:04:b8:ce:69:0c:4f:cc:
18:0d:34:25:f7:c8:20:5f:1a:1f:ed:46:72:e9:c4:81:68:2c:
07:e5:0f:34:b2:6a:d7:51:e4:71:8d:b3:ee:7f:a6:8b:92:51:
9a:cd:f1:9b:d7:67:2c:2d:cb:9a:11:3c:4f:c8:f2:00:23:f4:
4b:99:86:30:e7:b5:46:82:1f:f9:e2:aa:f7:8b:dc:75:cd:e2:
e4:53:6b:e6:a4:bc:6b:37:56:fe:9a:01:fa:7a:52:e2:79:9d:
3d:b1:44:f5:83:bd:4e:43:eb:c1:12:8e:2a:e0:63:de:92:4e:
61:95:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org