Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
File: 542A84F04F9611ED835C7D8CF1222468.roa (raw, json)
Hash identifier: tgYtofSUvr+47hIaF0LhQICKNcZUDF7JDAHFnGc0lZ4=
Subject key identifier: E7:51:64:4B:E8:35:A8:95:63:D6:CE:C1:97:CB:7D:E8:AF:2A:BB:B8
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 12
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
Signing time: Wed 19 Oct 2022 10:11:00 +0000
ROA not before: Wed 19 Oct 2022 10:10:56 +0000
ROA not after: Fri 31 Mar 2023 10:10:56 +0000
asID: 329159
IP address blocks: 102.214.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 19 10:10:56 2022 GMT
Not After : Mar 31 10:10:56 2023 GMT
Subject: CN=634fcd33-4a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:0c:0a:e2:f6:80:32:97:d9:b9:9e:01:49:
a6:0b:7a:7d:c2:89:44:af:cb:17:b7:90:95:96:f6:
bc:6c:a0:03:ec:da:39:65:49:25:5f:96:39:83:65:
3a:0a:aa:02:48:39:87:41:d9:fd:cc:9c:51:0c:ce:
41:01:cb:2e:91:72:f0:d3:e1:b6:7f:34:50:ae:ac:
1f:2d:7c:79:0b:c4:dc:bf:e0:c9:15:5b:d3:40:77:
fa:f0:45:28:4b:89:65:6c:52:1d:0a:31:ce:e1:b0:
89:a5:b7:fe:49:5c:83:e9:66:70:61:a5:61:67:ee:
d1:1e:5c:01:1f:e6:12:b6:f1:31:52:85:63:16:49:
cf:01:47:64:6e:08:ad:6a:76:a2:0f:4d:dd:2d:07:
a5:bd:00:2e:2b:04:b5:80:67:6f:aa:2d:59:d2:3d:
c1:5a:ea:89:7d:71:64:69:61:88:37:c7:7e:b7:74:
8d:de:81:36:1e:9d:1f:5e:7b:7c:25:1e:25:29:a7:
c4:fa:03:c8:99:98:43:03:15:3e:cf:72:2d:7b:ac:
11:11:b0:85:ba:00:ba:93:f9:a0:98:23:ea:2e:18:
e1:69:eb:03:99:2b:3e:f1:f3:ad:f8:b4:8e:8a:d0:
1f:ce:ce:8d:1d:a1:19:54:7b:b0:3d:b8:9f:dd:a6:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:64:4B:E8:35:A8:95:63:D6:CE:C1:97:CB:7D:E8:AF:2A:BB:B8
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/542A84F04F9611ED835C7D8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.203.0/24
Signature Algorithm: sha256WithRSAEncryption
51:34:81:36:5c:b5:42:66:17:e3:1d:fa:0b:7f:cd:d3:cf:fd:
a9:8a:5b:11:9d:b4:f7:93:45:54:3c:94:2f:07:ae:83:9d:d1:
80:75:b0:71:a8:5b:bd:a4:95:09:94:90:37:51:b6:92:57:8c:
b6:c3:46:38:50:ff:8b:0d:24:97:b3:1b:d6:12:bb:9c:f1:cc:
23:ed:45:20:4b:36:b9:a3:67:26:98:c9:f6:8d:23:89:c5:84:
09:fd:13:7e:3e:dd:77:d1:58:36:dc:2e:ce:94:77:7d:e8:ef:
57:07:91:6d:fa:9f:d9:2b:7b:0d:3f:f5:68:df:f2:55:05:dd:
3f:e1:70:ef:ca:6d:98:cc:9a:2f:8e:3c:55:11:f1:e5:70:b4:
d7:c1:da:8f:d3:a2:b5:20:40:ea:97:0f:10:d1:43:36:c9:60:
53:bf:4a:9f:51:82:7c:b2:ed:c2:e4:3e:1f:73:5c:ef:1f:e5:
d1:cb:10:ed:64:76:d1:2e:c1:a8:87:da:16:79:56:fa:4c:7b:
08:38:c8:07:af:b4:6a:66:ec:44:9c:fa:b3:6c:90:d7:c5:a4:
89:99:82:43:ce:2a:79:ff:36:7e:04:79:59:f9:78:d1:ba:f4:
dc:cc:38:60:7a:15:19:eb:2d:59:3e:74:f5:46:fb:f7:43:8a:
51:52:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org