Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/7F0E94544F9611EDB4CE138DF1222468.roa
File: 7F0E94544F9611EDB4CE138DF1222468.roa (raw, json)
Hash identifier: I9yerS5LryvOUv8BL6xDnrL17G+KbBQaQpp04qLNaDQ=
Subject key identifier: 98:00:22:80:75:69:56:5B:06:F5:2A:C4:8C:FB:A8:44:77:0F:DD:4B
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 14
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/7F0E94544F9611EDB4CE138DF1222468.roa
Signing time: Wed 19 Oct 2022 10:12:11 +0000
ROA not before: Wed 19 Oct 2022 10:12:08 +0000
ROA not after: Fri 31 Mar 2023 10:12:08 +0000
asID: 329159
IP address blocks: 102.214.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 19 10:12:08 2022 GMT
Not After : Mar 31 10:12:08 2023 GMT
Subject: CN=634fcd7b-d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:45:2e:25:72:94:ac:4b:c8:f3:2c:55:ef:
b8:47:a6:d2:d0:64:1a:f0:4f:99:9d:45:56:da:68:
4b:53:26:63:3f:37:3c:e6:b4:e6:20:68:90:b3:d6:
b5:2d:79:5c:b0:3f:e9:6b:8e:08:8f:48:27:02:ff:
25:5e:50:39:fb:55:c1:7f:d2:54:39:c0:1a:81:9c:
e6:b6:a5:9f:56:bf:6e:20:4f:d8:81:fe:4a:44:fb:
c6:c2:5c:9d:2b:39:56:14:b8:57:75:d9:d3:8e:33:
f6:22:d5:40:8a:4a:b1:b2:b5:89:35:c7:4d:09:43:
86:e8:d0:81:7f:0a:15:da:a1:05:29:dd:65:b0:7f:
14:c7:47:b4:e3:bb:c4:e3:4e:ac:0c:46:98:53:36:
e7:36:35:b5:0a:a3:02:30:8b:c1:a4:ab:7c:70:2e:
1c:61:3a:0f:4a:9f:6b:e8:b3:ad:e2:6b:e8:60:6a:
92:b2:d2:43:34:ec:87:90:b3:92:77:80:ab:28:06:
77:49:c7:e7:13:2e:62:59:d9:5c:59:ed:ee:35:4b:
6d:f3:06:7c:25:c9:41:78:4a:24:90:b5:b0:e8:df:
2f:53:1c:19:9a:3d:77:f5:37:1a:0b:f4:c0:ac:40:
d4:08:a9:9e:23:8e:71:d6:5d:e4:b6:25:c0:62:f5:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:22:80:75:69:56:5B:06:F5:2A:C4:8C:FB:A8:44:77:0F:DD:4B
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/7F0E94544F9611EDB4CE138DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d4:94:e2:54:21:06:43:ac:6e:68:92:6d:11:23:5a:a8:14:
fd:2c:58:ee:3d:0a:4c:b1:13:bd:4e:87:11:39:bf:57:72:bd:
b8:a9:57:34:6d:6a:0d:10:63:03:df:50:a5:8d:f2:7a:8f:71:
27:e0:15:23:99:3c:36:01:74:8e:7f:5d:ba:17:56:c5:d5:16:
ab:cb:ba:f7:03:f1:cf:a3:75:9f:95:4b:34:9e:b7:f4:43:e5:
9d:88:d0:3a:e7:0b:fe:25:77:7a:d8:0f:1a:b4:b3:fb:a7:3c:
18:5c:b0:b8:17:d8:28:36:4d:2d:11:f7:18:69:fe:90:bf:5d:
24:58:1a:b2:cd:6a:b2:c4:da:37:a8:01:13:8b:cd:75:75:22:
99:a7:06:c4:cc:05:57:d9:96:3a:20:8f:a9:11:5b:7b:9c:20:
24:19:f5:a0:2d:16:1b:3a:87:3c:13:33:22:89:5c:44:ef:da:
8a:35:a5:07:d7:04:4e:37:41:b3:e1:b5:e7:59:d7:fa:d2:22:
d0:c4:01:d3:a3:68:f8:0f:7d:ae:be:13:93:68:af:1a:05:19:
c9:6a:02:d9:8a:77:54:92:4a:af:c7:5c:5e:af:07:45:3c:63:
83:c1:ff:5e:1c:67:35:5d:90:63:b9:8d:75:03:f2:6f:d9:47:
a0:85:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org