Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/D51A2348E5F311ECB314B3DCF1222468.roa
File: D51A2348E5F311ECB314B3DCF1222468.roa (raw, json)
Hash identifier: bJSE+noHLCTyYJq/C9p4X8MfIRv612cV60YsUVyXTIM=
Subject key identifier: B1:0B:64:A9:6D:50:17:C9:39:43:B0:68:62:C7:92:B2:F0:38:3E:D7
Certificate issuer: /CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Certificate serial: 0230
Authority key identifier: 45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/D51A2348E5F311ECB314B3DCF1222468.roa
Signing time: Mon 06 Jun 2022 23:53:16 +0000
ROA not before: Wed 07 Jun 2023 23:53:12 +0000
ROA not after: Wed 07 Jun 2023 23:53:12 +0000
asID: 10310
IP address blocks: 102.165.183.0/28 maxlen: 32
2001:43f8:1140:1::/64 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Validity
Not Before: Jun 7 23:53:12 2023 GMT
Not After : Jun 7 23:53:12 2023 GMT
Subject: CN=629e936c-ac77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:42:ca:50:91:79:21:9c:2f:e2:89:3b:67:
e5:db:38:4a:a6:8b:98:3f:06:51:3b:a3:c6:00:25:
69:07:d1:cf:d8:82:a4:3a:f5:0b:5b:16:49:ee:1c:
27:99:1f:82:6d:fb:5e:2a:11:c9:6d:52:ee:3c:db:
19:b8:88:45:d1:12:12:c8:8b:78:7a:b9:e3:7f:11:
90:7c:e3:6a:9a:40:bb:42:85:f0:73:ee:3a:97:7c:
63:c8:ae:e1:9b:24:4f:4b:24:0f:ab:fd:54:f6:d8:
29:21:ac:0c:18:3e:85:8e:f3:f7:15:28:87:5b:47:
ab:87:e2:55:44:ba:9c:28:84:96:c9:c9:e0:d5:45:
91:ad:46:90:b6:2b:87:2c:1a:25:85:64:c0:e3:49:
7d:be:76:99:37:c1:37:20:fa:b5:4f:4e:39:76:23:
15:05:02:87:1b:05:dd:19:fe:e6:09:f8:48:1f:f4:
96:09:41:96:ca:40:0c:dd:a6:d0:a4:0f:d0:1f:9d:
ed:1f:c1:f5:43:3e:65:2d:b2:68:41:fa:ae:fd:c9:
9e:bc:f5:c8:d3:72:08:b9:11:0e:18:7b:a5:1f:e8:
c7:41:68:8f:63:9b:1d:38:41:03:78:d2:e0:e3:8b:
31:0b:af:7b:99:b5:7a:a4:66:f6:06:23:22:ce:a0:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:64:A9:6D:50:17:C9:39:43:B0:68:62:C7:92:B2:F0:38:3E:D7
X509v3 Authority Key Identifier:
keyid:45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/RS6r_HbS38Fh9OI6swwGmxMpCUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/D51A2348E5F311ECB314B3DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.183.0/28
IPv6:
2001:43f8:1140:1::/64
Signature Algorithm: sha256WithRSAEncryption
47:e5:36:a1:46:dc:9c:2f:85:ec:ee:5e:d7:3a:4e:15:42:b1:
6f:b7:b1:df:1b:27:f0:84:f0:e9:82:80:ba:ad:03:e5:29:2c:
67:db:40:75:92:bd:05:44:64:bc:88:cd:79:9c:e7:22:19:cb:
d2:63:99:b0:9e:07:c4:e8:33:59:7b:61:d7:d9:c9:1b:0e:32:
c2:88:65:cb:5b:80:f9:8a:a8:28:97:2c:d9:89:49:8c:9a:b6:
d0:b4:0a:22:35:83:50:1f:44:ce:aa:3a:32:f5:1c:dd:ce:0e:
84:94:39:4c:e4:eb:ed:63:be:b2:75:5c:7b:14:77:10:9a:2b:
96:ec:4d:ee:c1:f2:0c:c1:71:c9:d6:0e:0d:41:dd:db:e0:06:
72:ff:8e:78:71:da:bb:a6:bd:74:4a:6b:7a:12:69:1b:24:ef:
fd:89:37:b3:78:83:68:c4:e0:e0:c4:5c:c1:bd:00:a7:9c:c6:
da:15:9d:d8:7c:c2:4a:e5:36:1a:e4:74:69:63:cf:2d:6e:41:
ff:2b:98:1c:52:c6:10:c1:ae:0f:16:de:71:9c:c9:e0:2e:f4:
f4:2d:58:5f:12:49:53:82:2c:65:b9:89:90:9e:d8:1d:0b:a1:
36:2b:fa:84:f8:e8:f1:68:09:88:f9:ab:37:30:df:2d:96:0f:
df:4e:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org