Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/8E2C368EB84211EDBE22C6CDF1222468.roa
File: 8E2C368EB84211EDBE22C6CDF1222468.roa (raw, json)
Hash identifier: JbDCigsPfYJYhlcMnR1cTg9IExK5coxhEJJ8QyMGcxA=
Subject key identifier: 54:B6:AC:F8:F0:DA:4F:21:6A:FF:83:25:64:25:D7:8A:83:98:FC:FA
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: AD
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/8E2C368EB84211EDBE22C6CDF1222468.roa
Signing time: Wed 01 Mar 2023 15:05:51 +0000
ROA not before: Wed 01 Mar 2023 15:05:47 +0000
ROA not after: Sun 31 Mar 2024 15:05:47 +0000
asID: 329159
IP address blocks: 102.214.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Mar 1 15:05:47 2023 GMT
Not After : Mar 31 15:05:47 2024 GMT
Subject: CN=63ff69cf-a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:e4:a0:2e:4f:f5:e3:93:2e:c7:ff:c5:4b:
28:e3:aa:ae:c7:3a:ca:d8:85:83:e8:b4:8e:fe:1c:
36:34:6a:e7:bc:81:62:cd:bc:30:4e:79:51:0c:e2:
ce:21:72:3d:a8:57:1d:ac:f3:29:9c:50:02:a1:cb:
0c:84:72:7c:14:71:57:cd:4d:0c:2e:ac:df:18:77:
35:d2:ed:49:93:8c:b8:18:18:d6:de:5d:43:e2:03:
f5:92:2e:61:c6:3f:16:de:16:10:aa:bf:e2:76:99:
67:b7:f7:c9:50:d0:38:54:ed:53:e3:dc:69:2f:3c:
66:0d:0d:21:9c:6d:cb:96:2e:54:5c:11:d7:4b:6c:
dc:e4:8b:f9:b2:39:b0:f6:e9:3d:a2:d8:a9:06:4f:
57:61:7f:2f:b3:1d:dd:f2:4e:3f:7b:f7:78:cc:97:
dd:4c:37:cc:a7:f2:16:37:2a:6f:ca:62:7d:b1:3d:
88:f9:6f:00:1d:06:e4:eb:d6:50:9e:5c:80:5f:c5:
ab:c8:f1:8d:85:08:0c:93:aa:01:a0:f5:ac:5b:21:
03:42:44:8e:83:72:02:7d:16:32:78:e0:ca:9b:d8:
4c:80:d8:27:44:62:05:1d:ce:45:0d:32:e4:fa:a2:
ed:08:df:44:24:fc:1a:f7:39:62:ae:50:10:78:f8:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:AC:F8:F0:DA:4F:21:6A:FF:83:25:64:25:D7:8A:83:98:FC:FA
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/8E2C368EB84211EDBE22C6CDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.202.0/24
Signature Algorithm: sha256WithRSAEncryption
70:21:a9:61:05:53:e1:95:60:2a:f4:33:ed:49:e7:99:f1:55:
10:77:40:0b:37:09:e6:01:7d:19:cb:58:65:6d:11:1f:3a:83:
14:de:1c:55:f4:01:2f:f1:b2:0a:5b:df:8b:b8:c8:36:b5:cf:
da:08:23:69:32:22:9e:69:71:b1:70:cd:f3:1a:fd:71:08:33:
9d:0c:82:6c:a7:d5:b4:2c:20:de:6d:3d:71:04:31:d6:b3:cd:
3d:85:2d:90:ee:ab:0a:ef:9c:3e:78:dd:4a:7f:66:26:58:6b:
99:f5:1c:5f:67:82:69:69:ad:a9:5c:37:ac:9e:2a:13:96:61:
a8:73:63:36:a0:82:76:cd:b1:6f:84:ac:c1:0c:b8:0e:34:91:
e7:67:be:44:39:80:0a:a4:3e:b7:3d:09:09:b6:ad:3a:ed:0b:
5c:c8:1f:26:ed:ce:6f:45:5d:f8:05:8f:ee:14:2d:da:88:7f:
7c:c1:37:d7:b5:9b:79:17:75:89:e7:ae:46:24:31:31:41:60:
bd:38:06:99:c1:3b:fe:29:3e:b7:38:7d:01:be:18:7c:a7:8c:
98:15:e7:22:7f:3b:03:00:d9:76:9b:a0:86:1f:1b:90:01:3c:
4f:2b:2f:10:df:18:cc:11:56:cd:de:98:31:3b:ea:0f:92:3e:
8a:dd:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org