Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/78DDF46A5F9F11EF8BAF15A6762E951A.roa
File: 78DDF46A5F9F11EF8BAF15A6762E951A.roa (raw, json)
Hash identifier: iPJiFCtzWHp6L0o31I5eOqV06/r4M9yFDWiyqmir7R8=
Subject key identifier: BE:85:A6:35:9B:AA:0D:59:80:D5:9A:E3:4A:50:E6:11:59:FB:EB:BB
Certificate issuer: /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial: E9
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/78DDF46A5F9F11EF8BAF15A6762E951A.roa
Signing time: Wed 21 Aug 2024 09:26:40 +0000
ROA not before: Wed 21 Aug 2024 09:26:37 +0000
ROA not after: Sat 31 Aug 2024 09:26:37 +0000
asID: 43260
IP address blocks: 102.216.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Validity
Not Before: Aug 21 09:26:37 2024 GMT
Not After : Aug 31 09:26:37 2024 GMT
Subject: CN=66c5b2d0-8e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:06:44:93:91:7a:4b:d2:17:aa:bb:d3:a1:
c5:e0:24:32:66:0f:c1:36:e7:9d:62:f8:17:c2:2e:
cc:3a:1e:ff:f3:5f:5d:6c:73:44:97:1f:65:cc:84:
65:1e:76:da:e3:75:d3:ca:c8:44:a0:9c:b4:13:3c:
09:c1:cf:7f:6a:27:b7:28:13:a0:a5:ba:28:c4:9a:
bf:f6:12:18:5f:05:b1:67:59:12:ea:b6:5a:c6:bc:
dd:c6:3d:31:50:4e:ae:99:43:3e:1f:53:5f:c6:a2:
ce:ea:1b:de:cd:2d:0a:a1:a5:5b:4d:4f:59:e2:ac:
29:e3:be:c2:14:3e:55:c5:47:f8:67:67:6a:bf:1d:
30:ea:64:cb:c6:49:ad:97:05:40:06:9e:39:dc:60:
43:c2:0e:1e:51:1e:4a:09:2a:8d:92:3a:e7:ec:a2:
c7:74:fd:c0:a7:eb:cc:a4:2e:de:58:4a:8f:d1:81:
e8:9c:5f:30:0c:03:b6:50:ab:24:27:6b:83:8b:c4:
27:06:c9:ee:53:19:42:83:4a:15:c8:f1:78:16:f3:
ad:97:57:49:da:02:24:84:68:e3:75:37:f0:9b:03:
6c:ac:73:4b:bf:ed:0b:5b:55:f9:50:12:de:00:ac:
1e:6f:ed:08:6f:00:2c:f3:c2:64:6e:25:a5:71:d0:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:A6:35:9B:AA:0D:59:80:D5:9A:E3:4A:50:E6:11:59:FB:EB:BB
X509v3 Authority Key Identifier:
keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/78DDF46A5F9F11EF8BAF15A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5a:9a:c0:c1:06:cb:d4:f9:a1:70:84:66:49:24:54:d1:81:
7d:16:bb:48:5f:b7:57:ef:a9:cb:fc:59:59:ab:f3:eb:5b:56:
28:6b:d0:6d:0e:ce:b2:c9:71:83:ad:8f:29:05:fd:21:bf:61:
4e:4f:7f:28:f5:78:a6:f8:22:d8:6a:36:ac:e9:93:d6:0d:d9:
40:b2:d1:b3:ef:68:b6:62:13:a0:e6:da:04:e9:dd:ac:62:c4:
e7:fb:8a:3b:89:de:10:89:1a:ed:b7:1b:63:37:43:05:b0:e4:
d7:52:73:81:a2:ac:85:04:37:2e:6c:15:fe:fb:30:a7:a6:7d:
c1:f6:44:d3:e1:8e:60:2d:18:b0:18:a7:bd:b7:7e:12:1b:65:
7b:c4:18:50:11:63:fd:14:f7:37:37:e0:f9:e4:6c:d1:53:29:
2d:a1:1a:6e:19:c7:43:b4:81:67:3d:33:7e:57:34:1b:f4:63:
76:bc:1c:06:5c:81:78:b4:eb:d1:16:53:ba:43:68:98:f1:bd:
dd:7b:a5:99:b7:c2:6a:81:57:e2:03:db:45:aa:b8:6d:dc:8e:
db:c3:81:b2:85:ab:38:5b:d9:fb:b0:c6:b3:a7:86:17:87:2a:
ae:e6:7f:0d:67:65:31:6f:bd:8c:2f:9c:68:dc:23:6e:39:81:
7c:2d:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 03:47:13 2024 by rpki-client on console-fra.rpki-client.org