Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/6A5CB6E8B84211EDA4485CCDF1222468.roa
File: 6A5CB6E8B84211EDA4485CCDF1222468.roa (raw, json)
Hash identifier: RkbZDcI3MZ8ol5flWjjFpb/rpHirIVaKbrJlQmRodIA=
Subject key identifier: E7:66:30:9E:9C:C8:4A:51:26:E1:F0:87:AC:89:07:EF:FB:0A:FC:F6
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: AB
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/6A5CB6E8B84211EDA4485CCDF1222468.roa
Signing time: Wed 01 Mar 2023 15:04:51 +0000
ROA not before: Wed 01 Mar 2023 15:04:47 +0000
ROA not after: Sun 31 Mar 2024 15:04:47 +0000
asID: 329159
IP address blocks: 102.214.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Mar 1 15:04:47 2023 GMT
Not After : Mar 31 15:04:47 2024 GMT
Subject: CN=63ff6993-dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:50:e1:e3:66:99:0b:06:e7:1d:56:9a:01:
0b:b2:89:a2:21:48:5f:c7:ce:b7:98:e0:6a:30:9f:
52:bf:98:28:cb:05:34:f4:4b:f6:43:a6:a8:ab:84:
50:ff:78:86:b6:fe:cc:51:83:1a:bd:98:d2:83:81:
87:4a:73:64:8f:53:b8:c2:8e:0f:d3:f1:fc:a6:d6:
e9:b1:76:c1:e4:66:96:19:d4:56:2d:8d:f0:4b:0c:
df:aa:72:c4:ae:26:99:0b:c1:fa:96:c3:5a:eb:81:
b2:c0:06:39:e0:0e:e1:f6:bb:f1:1c:b7:91:81:a9:
4c:a6:30:e7:10:c8:26:48:ed:8d:59:92:d1:9a:c7:
e7:df:6b:8e:fa:67:b1:a5:39:52:12:9d:02:6d:98:
62:47:78:58:77:ea:0b:d3:39:9d:fa:23:ea:7d:70:
e9:1d:60:21:80:1d:26:40:63:0f:8a:d7:78:fa:a7:
3a:79:d1:09:41:94:87:3c:e2:b9:96:d1:82:2c:54:
7a:a0:40:18:22:96:42:9c:0b:ab:d7:05:de:49:23:
45:69:a3:a1:d1:9b:2e:c3:28:60:13:fd:92:ea:63:
ea:1a:97:dd:fb:e5:d8:83:79:a5:ac:a7:03:9b:55:
51:92:73:8c:2d:2b:64:f6:d5:98:bb:0d:1b:b4:4a:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:66:30:9E:9C:C8:4A:51:26:E1:F0:87:AC:89:07:EF:FB:0A:FC:F6
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/6A5CB6E8B84211EDA4485CCDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:71:60:36:3a:69:87:22:45:26:c9:4f:dc:32:2e:9a:19:ad:
60:85:f0:0f:9a:eb:02:1c:ae:c2:e8:b4:b4:88:99:fe:4f:d9:
43:9f:cd:0e:1e:00:54:b4:1e:ec:dc:4f:98:17:53:30:6f:ba:
71:5c:df:bc:46:31:90:86:82:4b:61:83:49:f1:3d:66:19:53:
e5:5a:7b:36:27:5a:ac:40:76:06:ae:10:95:26:7f:43:ec:be:
62:45:94:3d:34:a0:45:e4:58:99:79:b4:88:29:14:9f:fd:45:
3b:78:2b:b4:a2:f1:e2:e5:d4:f4:c8:d5:72:cf:05:36:f9:f3:
d7:b4:f6:67:81:a7:98:b8:da:48:b4:b5:28:68:f9:8e:b8:67:
33:f0:fd:0b:be:2a:74:b5:e6:fe:74:4d:9f:0f:6f:bf:2a:7d:
fc:e1:78:0d:a1:35:50:57:67:92:5b:f6:13:5e:29:80:15:c3:
6f:0e:8d:b8:2b:61:a0:cd:ee:4f:ce:b2:1d:02:7e:25:9f:3b:
bc:9e:39:fe:cf:60:a4:1d:df:20:85:03:87:f7:90:bb:91:96:
4a:1f:54:52:31:32:e7:fc:c2:21:ba:07:46:7b:41:75:23:79:
7f:83:51:8c:bf:c9:e0:d4:9e:5f:92:1c:65:09:fa:bb:3d:4a:
67:e1:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 02:56:30 2024 by rpki-client on console-fra.rpki-client.org