Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/ACFAA7824E9611EDA00B2A93F1222468.roa
File: ACFAA7824E9611EDA00B2A93F1222468.roa (raw, json)
Hash identifier: IHrnPso7JFTOEbFZIax4ZQvuD4pXfzU9xwr0KDRW+I0=
Subject key identifier: 14:1F:ED:E0:3F:23:B3:F9:19:1F:2F:21:48:42:12:F6:E6:37:56:A5
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 08
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/ACFAA7824E9611EDA00B2A93F1222468.roa
Signing time: Tue 18 Oct 2022 03:40:57 +0000
ROA not before: Tue 18 Oct 2022 03:40:54 +0000
ROA not after: Fri 31 Mar 2023 03:40:54 +0000
asID: 329159
IP address blocks: 102.214.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 18 03:40:54 2022 GMT
Not After : Mar 31 03:40:54 2023 GMT
Subject: CN=634e2049-0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:9d:8f:39:97:d7:3a:39:61:c7:1f:45:69:
b3:78:92:57:dd:64:b7:70:b8:5d:c7:fd:35:fa:f1:
c6:ae:38:b0:e2:e1:f7:d0:7d:4d:86:fc:61:c7:33:
b3:c6:e9:71:9b:bf:8c:69:cd:0e:14:6c:69:8b:a0:
19:a9:d2:0a:26:8b:a4:86:b3:d9:a1:39:49:1c:c3:
5c:d8:be:7e:4f:0b:e2:6e:87:4e:54:c4:88:57:9f:
89:dc:61:a2:bb:43:ab:ce:39:5d:5e:df:54:35:89:
82:a0:b7:69:ea:9e:ba:61:5d:9b:e0:ab:43:63:3b:
e9:03:fb:e6:96:1c:e6:f2:4a:74:a7:eb:d3:78:da:
9a:80:d8:b0:89:ff:f3:42:32:75:6b:1a:43:2e:a4:
b1:a8:9b:4b:29:4d:fb:2e:8b:d7:69:18:ec:9d:39:
1b:43:2b:59:43:53:90:fd:38:05:25:84:cc:25:10:
21:9a:4d:7d:64:4c:f5:89:93:61:58:8c:1e:c9:cf:
76:e1:75:e1:b3:93:6f:7c:53:45:b5:56:91:33:1b:
4a:6a:70:13:4a:b3:71:58:17:eb:ef:a4:d8:e5:23:
63:59:27:fe:33:74:c9:23:01:eb:2e:5f:9f:4c:1d:
fd:20:95:72:28:64:2a:3a:8c:55:74:51:bf:16:27:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:ED:E0:3F:23:B3:F9:19:1F:2F:21:48:42:12:F6:E6:37:56:A5
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/ACFAA7824E9611EDA00B2A93F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.200.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:e1:9d:9a:08:a0:95:7a:08:0f:b4:62:4e:58:41:5c:0b:88:
94:7c:39:e1:2a:0c:d9:0a:4b:3e:99:d8:a2:a4:95:64:98:b5:
ca:cf:74:c0:72:fb:41:b0:62:32:4e:99:b7:af:33:89:62:28:
56:f3:da:31:48:33:1f:ef:4c:cb:4f:7d:6b:0d:b6:d2:10:18:
fb:a5:90:e3:ff:2f:11:18:69:16:23:a8:cd:7f:02:8d:2f:5f:
21:5e:e9:96:ec:37:60:82:d3:65:f6:a5:fa:05:79:0d:5f:8d:
04:93:cb:93:fe:67:f3:db:8e:4e:cf:71:0a:a3:52:6a:cb:3f:
18:d2:65:d7:04:90:d9:5a:e6:33:86:94:ec:70:53:57:fe:52:
32:ec:12:d6:c5:d2:0d:1c:e5:04:1b:d0:f5:6e:95:80:9c:78:
04:18:ef:0c:c1:63:b6:49:c0:d7:14:d6:6b:30:57:ec:04:25:
93:5e:27:f7:0a:c2:76:0f:d2:c6:89:bb:ef:b9:91:38:cd:20:
c9:d8:b3:17:2e:db:46:89:14:ab:91:cd:15:f2:98:ab:77:85:
7f:ea:2c:aa:59:48:a4:7e:f9:cb:1d:f4:98:4e:71:df:03:d8:
6b:62:59:3e:ee:6a:ec:03:15:72:f2:c3:a9:88:69:76:3b:1f:
6d:bd:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org