Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/070F2760F29911EDA25C144E4AD9E6FC.roa
File: 070F2760F29911EDA25C144E4AD9E6FC.roa (raw, json)
Hash identifier: GrvI1abg2Gd+aHLPxabudCCsOf9yh/GweA93oui/3BU=
Subject key identifier: 93:E1:09:A4:1D:65:6A:20:B9:70:CC:D7:C7:07:B0:EB:1C:06:9F:67
Certificate issuer: /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial: 02EB
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/070F2760F29911EDA25C144E4AD9E6FC.roa
Signing time: Sun 14 May 2023 20:50:58 +0000
ROA not before: Sun 14 May 2023 20:50:53 +0000
ROA not after: Tue 14 May 2024 20:50:53 +0000
asID: 328732
IP address blocks: 102.216.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Validity
Not Before: May 14 20:50:53 2023 GMT
Not After : May 14 20:50:53 2024 GMT
Subject: CN=646149b2-a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:ba:33:1c:51:8d:7d:69:6c:2c:14:6e:bc:
79:10:90:a6:e9:10:5d:89:c6:5d:c5:c0:0c:ce:3c:
72:d1:fd:16:f4:da:3b:bc:b4:a4:50:f4:d4:cc:87:
33:3a:53:17:f8:2a:84:b8:11:98:1d:83:0b:bc:85:
6c:85:b9:79:7e:de:a4:0d:47:f9:c1:0a:32:32:78:
ef:d0:54:d9:81:6f:b7:00:21:f7:bf:29:5c:5b:73:
cd:6a:0e:f3:75:43:2c:1a:7b:83:b6:b3:f3:f3:ce:
56:40:2e:17:09:7f:39:3e:60:04:2f:e9:ee:32:9a:
05:4c:c5:38:d8:72:55:02:3f:2c:f1:17:70:87:ba:
1d:2a:28:13:95:47:28:6e:1a:21:4e:03:78:e5:c1:
3c:7f:c1:f1:02:a8:43:ae:53:c0:14:38:92:4a:84:
8c:21:ec:21:98:0d:e7:79:a7:d2:d4:82:4a:98:9f:
f4:4c:06:03:f4:30:a5:47:bb:01:58:dc:9d:7d:81:
3d:b7:19:df:98:f6:d8:e4:e1:51:40:47:d3:bc:7f:
30:43:73:03:2c:61:b7:bc:aa:ec:3a:d5:fb:2b:16:
35:ec:60:fc:84:73:ed:5f:18:c2:9b:71:51:62:aa:
8d:d9:50:f0:02:94:c5:a3:7d:30:d8:9f:0d:4c:46:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:09:A4:1D:65:6A:20:B9:70:CC:D7:C7:07:B0:EB:1C:06:9F:67
X509v3 Authority Key Identifier:
keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/070F2760F29911EDA25C144E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.220.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b2:f6:00:d1:75:70:67:31:8c:c4:68:db:50:ad:81:58:62:
c8:c2:a8:8b:21:8f:d1:b2:6f:cd:a8:a4:f6:08:d2:4d:95:f8:
38:07:e2:59:d2:8c:09:12:ce:92:5f:6f:db:0b:44:47:f7:cf:
55:1c:97:7f:8e:e2:62:08:f8:bc:00:46:c7:6f:de:4a:98:ef:
a5:8e:d0:39:8e:24:0b:43:b2:c1:ba:3a:96:a8:0a:8e:97:1a:
bc:06:f2:15:1e:61:52:95:c8:07:59:ad:ab:ba:1d:bb:eb:b7:
46:8a:0e:10:1a:33:c9:5f:55:b0:0c:46:8f:5c:e9:5e:15:2c:
c6:b1:b6:ae:ee:d8:03:5b:7f:20:93:13:48:5f:46:68:b6:d6:
6c:db:7c:4b:8f:b3:f1:77:77:94:65:d1:67:16:65:f4:f7:75:
ff:de:ff:0b:9a:a7:8f:7d:b4:ae:1d:94:f2:11:40:fb:ee:7b:
87:a4:80:7a:69:a4:ca:30:9a:91:cc:e3:fc:cd:41:70:78:e3:
30:15:92:f8:a9:6a:3b:a8:ba:9d:66:7b:76:50:23:d2:27:db:
30:03:fa:a3:a6:f6:54:4a:68:b9:05:a4:33:7f:48:01:e9:5f:
c4:4d:ff:a1:fa:5c:59:27:66:fd:a8:92:9f:9f:88:73:25:fb:
13:5a:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org