Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
File: 24AD6E0E4F9611ED8FB7D88BF1222468.roa (raw, json)
Hash identifier: CD19+UarUE+vU+ijGNrsKvPTjDMIbDj6YCZrATtuH2g=
Subject key identifier: 98:72:DF:6B:C2:3C:FF:B0:5B:76:AC:B9:F4:EF:CA:EC:A0:4C:FB:5A
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 10
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
Signing time: Wed 19 Oct 2022 10:09:40 +0000
ROA not before: Wed 19 Oct 2022 10:09:36 +0000
ROA not after: Fri 31 Mar 2023 10:09:36 +0000
asID: 329159
IP address blocks: 102.214.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 19 10:09:36 2022 GMT
Not After : Mar 31 10:09:36 2023 GMT
Subject: CN=634fcce4-cbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:8b:e7:5a:cb:cb:d8:c2:ca:05:9a:35:88:
6a:28:4c:a5:61:08:83:7c:e7:6e:2b:b0:02:ea:bf:
21:f7:4d:24:b2:c2:e7:42:4e:7a:c1:24:05:4f:66:
21:95:47:8a:6f:55:57:a5:10:47:cd:c9:8b:fc:06:
08:8f:f4:56:be:0d:bf:ac:88:ec:a3:19:ea:ab:90:
d1:d6:b6:7b:78:76:00:16:54:d9:c9:98:2f:d3:9b:
d5:47:5e:83:03:98:fd:2b:6d:f6:e6:10:2a:1a:c6:
4b:ee:a0:a1:ef:2e:ca:40:f0:40:cb:bb:e9:7d:95:
1f:23:8c:39:5f:2c:90:91:8c:52:ab:8e:75:3b:75:
67:a4:af:43:2b:d7:00:93:03:b3:f5:b6:cf:d7:04:
d4:03:0d:70:de:33:2c:88:a5:c8:cf:c5:9f:f8:3c:
77:05:e9:2b:c9:cf:19:0e:e8:67:9e:1f:84:a4:b7:
b6:0c:57:49:8a:05:aa:93:4c:2e:65:76:be:b4:e6:
a0:51:7e:69:11:30:f6:9f:3a:31:14:88:a5:79:d2:
de:62:6f:8f:47:2c:43:85:b7:21:1f:58:5f:73:2f:
9f:91:20:6b:aa:9d:56:5c:3b:fc:1b:44:5a:ab:e8:
63:46:ee:ba:71:d1:a5:fc:cc:9d:66:7f:77:1b:03:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:DF:6B:C2:3C:FF:B0:5B:76:AC:B9:F4:EF:CA:EC:A0:4C:FB:5A
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/24AD6E0E4F9611ED8FB7D88BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:20:25:84:31:dc:bc:38:29:24:77:10:9f:30:04:81:74:a9:
3d:ed:16:5e:79:c0:58:79:38:a8:e8:d5:75:e2:4c:70:c5:aa:
f9:3c:9b:5f:c3:7f:85:d2:c3:d5:f4:a7:19:85:ff:86:ef:57:
75:93:95:e8:b9:96:88:55:4c:2b:a0:14:02:e5:77:b1:0d:0d:
74:37:7e:b6:1c:bc:96:56:a7:04:1d:7e:3c:19:f2:78:52:47:
3f:70:4d:dc:3e:f9:14:b5:b1:69:cf:d0:8a:5c:09:c4:c8:c6:
65:53:02:b5:d9:05:fe:3e:6b:48:4a:95:4d:4d:79:42:4a:47:
1d:b0:95:94:58:12:d7:8e:cd:23:54:07:3b:8e:7a:44:a1:1e:
75:50:ce:9a:78:1e:ab:b1:ba:ac:4b:c2:7b:8a:fa:9d:9e:fb:
3f:e9:05:39:bc:5c:3f:22:22:bb:96:a8:de:c3:3e:51:06:49:
e5:a2:84:8f:b4:70:bf:7d:df:cb:a8:b3:98:10:eb:a4:68:90:
b9:65:47:c6:0a:ab:8d:bc:1e:6e:60:dd:a7:1f:28:46:fe:16:
39:e4:29:0d:5d:2c:d7:9e:22:07:9b:2d:dd:2c:b5:80:ab:cd:
5f:b3:88:64:40:ff:fe:0f:fc:f2:38:55:31:78:1e:41:54:6d:
d0:8a:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org