Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
File: B974CFFCE5F411ECB9F66FDFF1222468.roa (raw, json)
Hash identifier: kUvdGHxK91iRkdikUcX76fb807Dd6a9wejNChlRPDEY=
Subject key identifier: 79:CD:76:39:8B:B5:71:3B:95:C4:12:EA:EC:F5:15:0F:55:70:8C:F5
Certificate issuer: /CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Certificate serial: 0234
Authority key identifier: 45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
Signing time: Mon 06 Jun 2022 23:59:39 +0000
ROA not before: Tue 06 Jun 2023 23:59:35 +0000
ROA not after: Tue 06 Jun 2023 23:59:35 +0000
asID: 7233
IP address blocks: 102.165.183.0/28 maxlen: 30
2001:43f8:1140:1::/64 maxlen: 120
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Validity
Not Before: Jun 6 23:59:35 2023 GMT
Not After : Jun 6 23:59:35 2023 GMT
Subject: CN=629e94eb-5c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:ea:d4:02:dc:ae:ce:86:e3:1b:e7:ac:08:
e9:88:b5:3c:ca:02:38:78:27:55:1b:47:42:18:ce:
8b:d7:8d:7b:0a:80:c3:1a:33:36:ef:8a:03:6f:35:
7d:02:d7:c0:c4:b0:af:e0:62:a1:94:4c:32:a1:4c:
5f:99:43:b2:cf:42:4f:bd:3a:71:2d:1d:d0:4f:12:
6e:f9:2e:9b:61:f6:3d:f8:59:82:0d:99:05:f4:57:
1d:06:0b:fc:78:16:54:fb:e5:ae:c0:6f:ed:b1:27:
c2:fc:a6:08:91:c6:b9:e5:31:fe:1a:89:63:7f:76:
f6:e0:7a:09:df:08:91:f8:a2:5e:0a:e0:39:01:4d:
af:af:64:4e:d9:57:6a:51:0f:bb:d4:f5:91:13:08:
cb:1f:0e:99:0b:1d:ae:01:de:60:a1:a7:3c:7f:4e:
78:84:e6:d9:01:97:92:b7:d6:56:b1:95:60:a8:32:
cb:66:66:60:f0:f8:d4:15:80:99:dc:3c:8f:ce:2b:
57:ab:33:8f:d2:25:c1:b1:88:b0:00:89:a9:11:7a:
f4:ab:b0:08:c4:0f:7e:1a:69:2e:5d:2e:4f:dd:1f:
40:f9:2c:2a:ad:c3:26:b4:d9:ae:02:df:bb:c7:c3:
80:07:53:b1:a3:bd:e8:49:d2:3d:0a:7b:0b:7e:20:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CD:76:39:8B:B5:71:3B:95:C4:12:EA:EC:F5:15:0F:55:70:8C:F5
X509v3 Authority Key Identifier:
keyid:45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/RS6r_HbS38Fh9OI6swwGmxMpCUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/B974CFFCE5F411ECB9F66FDFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.183.0/28
IPv6:
2001:43f8:1140:1::/64
Signature Algorithm: sha256WithRSAEncryption
7e:87:2e:fc:4c:62:2a:42:9d:e5:e0:85:d8:11:96:0b:cd:07:
76:43:31:5a:80:95:b7:29:57:45:d6:3b:ed:c1:79:26:5d:c4:
88:59:b3:a1:b2:84:da:4e:55:fb:07:c3:8a:21:02:bc:0d:9f:
a7:26:6a:2b:e1:7d:80:ce:46:98:a4:db:df:a8:dd:43:7e:a4:
27:df:a5:fa:0b:b8:86:b9:4c:5b:c5:f5:a9:7b:84:bf:0f:7e:
4b:2b:66:db:12:d8:3e:d5:89:20:83:bd:5e:e8:d5:b5:32:a4:
82:ea:60:da:18:d2:d4:c4:41:13:1d:27:d6:8a:e1:db:5f:c4:
65:89:15:56:5c:ed:fd:41:b6:78:5b:f8:9a:64:17:2a:4f:9c:
93:12:30:bf:5a:2e:1e:c3:e3:a4:10:00:7c:43:06:36:68:db:
74:ce:c8:cd:1c:85:33:8e:5d:53:f2:25:cd:96:5c:85:23:7a:
16:16:fd:9c:32:47:ae:a4:a2:31:c9:99:43:08:85:79:ea:47:
1b:e7:8b:cd:ae:cc:2c:83:e6:cc:0e:b9:0b:7e:79:9d:48:91:
83:cb:eb:4b:88:21:fb:8e:4b:e7:61:c9:e4:5e:b3:b9:a1:1b:
ef:02:21:c8:a0:df:cd:8b:96:14:26:5d:f9:a1:74:71:59:fc:
e8:56:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org