Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/E73A8B664E0E11ED81A21AADF1222468.roa
File: E73A8B664E0E11ED81A21AADF1222468.roa (raw, json)
Hash identifier: Qy1HqY6ks8jBQGY4MQhslEBp8QxMZv1A5k+sG2HwnMI=
Subject key identifier: 10:9A:51:66:C0:D8:AC:07:40:57:34:EB:D9:02:14:71:ED:6C:4D:71
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 05
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/E73A8B664E0E11ED81A21AADF1222468.roa
Signing time: Mon 17 Oct 2022 11:29:03 +0000
ROA not before: Mon 17 Oct 2022 11:29:00 +0000
ROA not after: Fri 31 Mar 2023 11:29:00 +0000
asID: 329159
IP address blocks: 102.214.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 17 11:29:00 2022 GMT
Not After : Mar 31 11:29:00 2023 GMT
Subject: CN=634d3c7f-f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:7a:e7:57:1f:a3:a9:51:8a:60:8e:bb:b4:
91:2a:4b:fa:fc:57:a4:40:29:f4:a2:f6:e9:88:81:
03:27:19:9c:57:66:f8:38:7a:20:ec:60:77:e3:cf:
5c:8e:94:8c:6b:fb:80:1e:e1:98:8b:f0:6b:42:a7:
c0:a3:ef:77:0f:69:16:f8:51:b5:30:fd:26:5a:94:
ca:df:f2:f3:5d:56:97:a1:8d:47:56:7c:15:74:3d:
86:62:51:ea:0c:b9:10:06:ed:bc:44:72:8f:f3:77:
ca:d6:9d:c9:fd:7c:07:35:5b:0d:3d:dc:7c:95:08:
b9:e6:70:7c:57:9b:2f:f4:e7:c8:98:1b:fb:39:62:
c5:93:a3:e2:fc:10:03:06:a8:30:9d:06:f6:31:0e:
f3:3b:61:de:b2:57:a5:d1:4e:70:54:29:58:ff:3c:
b5:21:a6:17:14:1d:50:73:04:a3:b6:4c:fc:3b:da:
d9:fd:7f:61:f9:59:b5:25:c1:4d:61:fa:fd:f1:47:
51:d5:a9:eb:67:d1:b2:3e:ee:ad:d0:7f:5e:3b:ca:
c6:0d:13:43:98:59:e6:67:e1:61:ae:f2:49:70:d5:
d3:ee:e1:93:fe:45:29:2e:50:c1:db:6f:6e:e9:ca:
2b:69:2a:21:9e:09:46:d7:d7:06:b2:2f:11:a3:00:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:51:66:C0:D8:AC:07:40:57:34:EB:D9:02:14:71:ED:6C:4D:71
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/E73A8B664E0E11ED81A21AADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.200.0/22
Signature Algorithm: sha256WithRSAEncryption
68:5e:53:43:46:1f:14:bf:6a:31:52:09:e0:8e:fe:16:40:d7:
7f:6a:4a:8c:bb:2d:68:3d:4b:bf:70:a3:98:01:d4:87:91:d1:
78:c5:2f:6d:0a:28:bc:25:81:b5:1e:22:6b:28:84:f4:90:a0:
98:e4:59:ab:90:84:0c:f1:59:9a:8f:3c:9c:5a:e2:4a:d6:6a:
6d:6f:07:8b:97:68:b8:70:9e:df:a0:3d:de:0a:9c:69:01:b4:
43:c3:c9:73:fe:c6:04:1d:f2:95:2f:ab:8a:46:45:83:e0:83:
77:00:d6:d4:e3:67:ec:9b:18:fe:84:e2:e7:73:4b:13:08:87:
67:e4:8c:5c:d2:94:30:3f:64:5a:17:43:c8:ac:db:6c:4b:21:
58:ce:a8:6a:b7:5e:40:8d:25:bb:c3:ed:ae:45:8e:77:75:1a:
c0:10:e6:e8:8d:04:a7:d6:bc:f6:e5:c0:33:3a:4c:19:cb:85:
ca:8b:9f:74:0f:80:d3:7b:0b:e3:54:6e:4c:5a:35:89:09:87:
f9:11:4d:26:9d:4c:5b:98:b9:37:e9:af:0c:77:94:e8:51:70:
84:47:95:1d:b3:70:4b:07:3c:50:05:60:c1:90:3b:b0:36:d9:
0b:ee:e8:19:f1:4c:01:fa:6e:4c:b8:36:72:53:69:77:ee:82:
c1:d6:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org