Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0F07A4AA51DC11ED8DE46582F1222468.roa
File: 0F07A4AA51DC11ED8DE46582F1222468.roa (raw, json)
Hash identifier: GDeJA8+hXUQz3hKtpUY4fuw9wYwKEmls3xrHbndJfd0=
Subject key identifier: FD:B3:14:06:63:03:6F:59:5C:A9:19:02:C7:36:47:AF:95:BC:01:8B
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 1B
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0F07A4AA51DC11ED8DE46582F1222468.roa
Signing time: Sat 22 Oct 2022 07:35:11 +0000
ROA not before: Sat 22 Oct 2022 07:35:07 +0000
ROA not after: Fri 31 Mar 2023 07:35:07 +0000
asID: 329159
IP address blocks: 102.214.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 22 07:35:07 2022 GMT
Not After : Mar 31 07:35:07 2023 GMT
Subject: CN=63539d2e-d71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:d3:b5:4c:81:2e:dc:4d:88:90:2f:1f:be:
68:0c:54:6c:2b:ac:49:af:b9:ab:36:29:16:e8:21:
6e:ac:11:ba:13:1b:4c:c4:0a:75:96:cb:7f:cd:a1:
93:4f:24:f3:56:4d:c9:05:7c:d2:ce:55:96:0e:d0:
1b:a5:36:a2:97:c2:70:82:a6:39:07:37:ee:53:e0:
a1:4b:bd:54:a5:36:99:ba:54:4d:00:bf:12:1f:15:
e2:03:fd:88:0b:4e:46:77:b9:6a:ed:d7:30:d5:9c:
2e:fa:ad:99:46:8c:df:08:e8:30:17:f7:39:3a:47:
17:12:1c:f0:7f:12:95:0d:39:5f:b4:d1:22:c6:3e:
92:e9:f3:9d:a1:db:91:30:2f:d9:b9:ad:7c:aa:34:
70:e0:5b:f7:fc:54:86:fa:96:55:f6:29:c7:2e:ff:
ce:cb:56:8d:82:c6:87:ec:8a:3c:25:5c:51:32:ef:
20:f0:09:6e:e3:af:5a:0d:57:01:f1:03:ca:94:01:
94:d4:dd:dc:cd:0a:a3:ce:87:a3:a3:ce:e0:79:8b:
b4:33:b4:14:cf:ff:0e:f1:48:c2:ea:aa:94:3c:b3:
9d:d2:23:04:4a:e8:c1:71:80:0a:e8:7c:a6:53:c8:
10:fe:b3:7a:d6:1c:8e:71:03:b4:be:7e:49:f6:2f:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:14:06:63:03:6F:59:5C:A9:19:02:C7:36:47:AF:95:BC:01:8B
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0F07A4AA51DC11ED8DE46582F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.200.0/22
Signature Algorithm: sha256WithRSAEncryption
13:b2:4d:e5:d6:a7:69:ff:70:2a:89:e0:11:b1:e1:4d:1a:f7:
f4:cb:ec:e0:b2:0d:08:a4:ed:03:71:ad:49:d5:57:88:5c:11:
2f:e0:24:b8:d6:4b:ce:f0:e0:c9:36:15:a4:ba:0c:cf:bb:5d:
57:a5:e5:16:ad:b0:eb:bc:c5:49:e6:f3:9c:62:d8:e0:12:0c:
cf:bf:22:8a:5d:2b:20:0c:15:f8:a1:48:70:46:b0:88:f5:8f:
ca:59:9c:76:3f:62:b6:10:76:16:56:76:c7:5e:0e:a1:55:6b:
f1:ff:40:73:03:a1:45:d8:49:d3:c8:fa:3f:89:c0:26:d4:af:
37:03:77:b3:6a:26:4c:4b:2c:9a:e9:9d:70:57:9c:9d:9f:e6:
9b:0e:36:48:59:f9:1b:f5:3e:a3:b6:fe:0a:57:6d:6e:06:7f:
e6:c0:54:83:2f:df:6d:bb:af:13:05:be:e8:b3:11:e2:7d:a7:
58:fb:0e:7f:d6:11:82:3c:21:5c:d5:d4:a1:ea:bf:59:5a:f8:
37:9a:c4:fa:ab:98:7b:52:07:39:f6:ce:0b:d1:e4:8d:fb:71:
f1:cb:82:55:03:f4:58:d6:5e:f8:d4:cc:b9:4a:f6:1e:14:e6:
46:a2:80:0c:a3:dd:c8:ac:97:d6:30:82:3a:85:b8:9d:84:16:
01:80:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org