Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/78B0B6A846E811ECADB23F29D8A014CE.roa
File: 78B0B6A846E811ECADB23F29D8A014CE.roa (raw, json)
Hash identifier: rUYU0s1CQvmffsmpAUs+VjG0i0KzHUuano5wjf8q4lg=
Subject key identifier: 94:D1:E5:EC:45:3F:F2:37:A5:78:46:CF:A5:C2:9B:D6:7B:6B:04:FD
Certificate issuer: /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial: 03
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/78B0B6A846E811ECADB23F29D8A014CE.roa
Signing time: Tue 16 Nov 2021 14:21:21 +0000
ROA not before: Tue 16 Nov 2021 14:21:17 +0000
ROA not after: Tue 15 Nov 2022 14:21:17 +0000
asID: 328970
IP address blocks: 102.217.188.0/22 maxlen: 24
2c0f:5b00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Validity
Not Before: Nov 16 14:21:17 2021 GMT
Not After : Nov 15 14:21:17 2022 GMT
Subject: CN=6193be61-20c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:78:ef:d7:33:27:13:47:a1:48:54:da:ab:e7:
49:7a:d7:f9:42:4e:77:20:3a:52:d5:1b:39:a6:3e:
e4:39:80:6a:91:b7:92:2b:54:20:ab:7e:6e:88:4e:
3c:6b:01:a2:b6:17:e4:1b:0b:91:7c:f6:4b:c9:1f:
63:46:e3:0f:af:da:93:1e:64:1c:29:ec:70:65:5e:
9a:39:6d:ba:a2:9c:fb:f6:ee:f3:de:45:b9:79:07:
c4:e8:29:52:8b:c2:8f:b7:5a:f7:0e:24:d2:c9:86:
42:17:5c:e1:6e:c7:d1:f2:d4:13:6b:16:03:b6:ca:
3a:ae:13:1d:87:e1:b2:49:04:9d:dd:e3:93:5f:00:
b3:04:2b:3f:aa:91:60:94:7b:41:da:03:08:81:02:
03:e1:dd:b3:a6:b0:a2:89:b3:67:45:50:79:bd:73:
d4:15:ee:18:17:9f:c1:b8:98:4a:0b:91:37:40:f8:
81:10:9f:84:20:7f:eb:ef:e3:8b:db:9a:46:6c:0f:
76:70:8f:e8:3a:d6:ae:2f:ef:a2:f9:b3:78:a3:89:
02:f3:78:10:61:af:71:52:d9:e7:fc:fe:05:ae:ac:
3f:0a:c2:c6:4b:7f:b3:9b:0f:91:00:e8:7f:8d:ee:
a2:7b:fd:a6:f0:b6:3f:96:cc:3d:b6:f7:11:95:51:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:E5:EC:45:3F:F2:37:A5:78:46:CF:A5:C2:9B:D6:7B:6B:04:FD
X509v3 Authority Key Identifier:
keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/78B0B6A846E811ECADB23F29D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.188.0/22
IPv6:
2c0f:5b00::/32
Signature Algorithm: sha256WithRSAEncryption
c8:ea:f3:53:5e:41:14:84:3e:04:1e:4c:8d:64:3c:a1:3b:a6:
95:35:61:8c:6c:c6:b2:4f:ad:4c:53:87:4e:65:1e:9b:77:ee:
73:77:72:fc:28:5c:f2:b3:8e:90:fe:45:6b:a1:af:35:c3:cc:
5a:3e:c8:0c:c1:35:39:52:81:5c:a5:b0:c6:a0:e7:ce:48:63:
4f:40:39:3a:8d:14:1d:2f:e7:a1:87:03:04:2e:5d:d4:ef:59:
e2:7c:13:e2:2c:9d:bb:f9:6d:6b:bf:c5:86:24:d8:6c:ba:03:
16:f1:cf:5b:ba:7b:39:d1:eb:13:37:2f:c6:65:18:68:da:dd:
b9:5e:5d:c7:81:11:27:09:e3:33:16:d3:75:f3:ae:f8:ab:b6:
52:87:30:b7:eb:2e:a9:1f:e6:5c:54:d6:15:9c:36:4e:91:b7:
9d:52:ef:a1:97:9a:86:0a:71:48:aa:1f:b9:46:5b:f1:09:72:
5c:9c:7e:fc:60:a5:8f:16:08:42:91:cb:26:6f:66:2c:d0:c7:
76:f7:25:58:b1:3a:25:df:ce:eb:a6:56:79:16:e3:7a:29:29:
e1:73:d2:ae:47:1a:04:26:11:48:7b:82:74:b3:a4:c4:e9:bc:
f2:3b:3c:0b:61:d0:d4:4f:30:28:68:a3:73:4f:0c:35:e3:fa:
be:d1:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org