Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/505E3136AA1511EC801E3DDF5A40D577.roa
File: 505E3136AA1511EC801E3DDF5A40D577.roa (raw, json)
Hash identifier: I8diWMe9Jgi1rgf5TBjboZL9RnXMTCprJpHvrFAqlCQ=
Subject key identifier: 2A:17:BB:EC:7C:0F:38:6F:AE:1E:62:78:0B:7E:4F:03:21:0F:47:70
Certificate issuer: /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial: 0139
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/505E3136AA1511EC801E3DDF5A40D577.roa
Signing time: Tue 22 Mar 2022 19:21:46 +0000
ROA not before: Tue 22 Mar 2022 19:21:38 +0000
ROA not after: Wed 22 Mar 2023 19:21:38 +0000
asID: 328732
IP address blocks: 102.216.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Validity
Not Before: Mar 22 19:21:38 2022 GMT
Not After : Mar 22 19:21:38 2023 GMT
Subject: CN=623a21ca-fdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:fd:ba:a5:a7:59:57:40:20:3c:63:6a:3f:
dd:8a:f0:80:fc:4b:57:73:c9:b2:d6:8f:69:f0:42:
a9:ae:50:c7:63:d2:04:2a:af:b7:04:9d:c7:35:f3:
cd:7c:12:12:27:58:91:f8:14:7b:93:44:b4:00:73:
f9:3b:bc:63:51:b8:00:61:f4:43:86:8d:08:ef:ae:
a9:34:d5:58:e2:d2:7c:51:fe:0f:87:96:3b:ff:a0:
16:b6:8f:d5:65:5b:77:a7:ae:f7:c0:ab:06:ba:6c:
ef:dc:03:b7:a8:94:29:cc:12:2c:91:6d:05:0b:38:
a7:6f:c5:a0:0f:72:de:03:d3:33:1a:4e:35:31:78:
66:d6:e5:48:52:17:e0:e3:2e:02:35:88:69:aa:d6:
9c:95:33:7c:9f:6e:1d:a9:96:08:18:7e:48:06:a8:
cb:9c:a7:9f:e1:8a:73:f8:56:52:e5:83:33:ad:63:
a8:af:68:0a:55:21:86:f2:08:e5:32:77:39:94:c5:
30:03:75:32:77:d1:c2:a3:4a:0d:9a:37:b9:34:70:
b0:0b:11:61:6b:ad:77:d1:c0:5f:6c:0a:3b:31:83:
30:37:fc:b0:e4:86:95:fd:da:e4:9a:a1:a2:74:50:
1a:63:b3:e9:5f:15:69:d0:98:8b:5d:c7:fc:f1:d3:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:BB:EC:7C:0F:38:6F:AE:1E:62:78:0B:7E:4F:03:21:0F:47:70
X509v3 Authority Key Identifier:
keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/505E3136AA1511EC801E3DDF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.220.0/22
Signature Algorithm: sha256WithRSAEncryption
63:47:6c:89:3a:3e:19:55:45:5a:0a:a0:52:13:3a:2c:62:a7:
9d:75:09:07:70:e6:d1:36:08:61:86:33:72:f3:f2:29:a4:4f:
df:de:01:ed:93:1c:4e:06:13:94:dc:83:ed:02:5a:45:78:43:
e6:4b:94:f9:ba:32:cf:38:a2:0b:d2:76:84:1e:e5:f1:b8:27:
2b:ed:21:31:55:37:e3:ca:5f:7d:6c:2a:83:a7:75:bc:ce:f0:
b6:0e:8e:43:10:8d:69:79:b5:9c:67:5e:85:8b:b8:9b:c7:e3:
e1:b1:f4:e2:d1:db:d8:d7:b1:a6:4a:4b:a8:3b:b2:d7:bb:4d:
45:e0:1a:f8:f3:61:76:71:72:fb:20:be:5e:d8:1e:53:b6:c1:
29:f1:cf:43:96:22:aa:95:22:02:3f:3f:3a:cc:e1:c3:de:5c:
31:5f:f4:aa:e9:89:e2:6f:2b:e3:20:7c:1f:60:aa:5f:53:40:
fc:8a:cd:33:51:dd:28:c8:f5:8f:07:75:4a:8a:ce:50:4c:fd:
e4:7c:79:43:ca:33:ef:34:9e:7b:a3:31:d7:5a:c1:f7:8b:a8:
90:8a:77:d2:80:84:f8:d7:a4:c6:97:6b:93:4b:9f:fc:9d:02:
a3:40:aa:6d:8e:b8:ac:54:d0:a4:de:3d:7c:8e:4e:dc:04:58:
1a:c5:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org