Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/170909A4800211EFAC512543762E951A.roa
File: 170909A4800211EFAC512543762E951A.roa (raw, json)
Hash identifier: nKcHcCemNYtdaIumWnZ1rHbbwR2fBSDxDrkdRgD3+7I=
Subject key identifier: 2C:09:14:34:CE:4C:51:59:CB:3D:8B:CF:D3:3A:D8:C9:C9:64:62:E1
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05D6
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/170909A4800211EFAC512543762E951A.roa
Signing time: Tue 01 Oct 2024 14:33:14 +0000
ROA not before: Tue 01 Oct 2024 14:33:10 +0000
ROA not after: Sat 26 Oct 2024 14:33:10 +0000
asID: 23470
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494 (0x5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:33:10 2024 GMT
Not After : Oct 26 14:33:10 2024 GMT
Subject: CN=66fc082a-6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:38:e5:ab:85:48:4e:57:26:d2:80:02:7e:
92:18:bb:07:b3:1a:4a:2e:38:51:72:db:a4:69:32:
f3:6b:69:4d:31:3a:de:93:10:96:cd:5c:b8:5e:03:
3b:fe:16:de:9c:4e:96:c3:5b:16:21:a5:c6:0e:1b:
92:7d:eb:c0:4a:7b:65:c5:11:88:55:80:82:b4:99:
29:bf:20:59:63:81:90:67:8c:4a:a0:dc:0d:62:dd:
25:da:9b:56:b4:dd:08:39:bc:da:c2:44:61:d1:63:
22:21:a9:75:6c:f7:67:49:1b:89:71:42:dc:e3:6f:
b8:a6:73:a4:aa:59:28:2b:d3:f1:78:8b:f2:97:d5:
06:77:cf:f4:8a:0b:ca:d4:4d:bd:ad:48:1a:3e:3b:
82:db:07:94:52:af:5b:83:51:d0:6d:f5:55:c1:6d:
f5:dc:7c:c4:b1:e1:60:f4:b1:df:d9:75:0a:d0:62:
7f:c4:7e:7d:96:22:65:a0:b7:c8:c4:62:a8:ce:07:
53:55:e1:5c:05:90:5a:20:de:f3:1d:34:53:56:03:
49:e0:c5:97:9d:18:73:61:08:fb:fd:ed:01:df:f9:
b1:85:25:92:03:2b:37:ec:7f:e0:fe:62:e3:60:c5:
cf:d2:d2:0e:e0:1f:22:81:e1:a5:9e:ff:fe:d0:e9:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:14:34:CE:4C:51:59:CB:3D:8B:CF:D3:3A:D8:C9:C9:64:62:E1
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/170909A4800211EFAC512543762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:21:6d:c9:99:41:19:1c:05:3a:64:c0:08:9c:10:88:03:fd:
54:60:b1:21:5d:0c:00:26:71:f2:15:7a:2f:a1:5e:fc:a9:42:
fd:ff:71:9e:67:b3:7c:ba:52:5e:a5:9a:be:06:21:e5:20:d8:
d5:ec:a7:5c:2d:b9:3b:40:69:4b:fe:de:b0:4f:5e:85:b1:10:
79:92:37:e9:2a:0b:fc:fc:b0:1c:67:c0:9b:e0:94:b3:4e:ba:
59:2a:06:56:59:85:fd:7a:01:6a:82:03:a9:93:37:d1:c6:32:
22:31:06:f4:b5:ce:e1:73:47:16:5e:42:4d:c8:24:fe:fe:d0:
69:dd:7f:5b:e9:5d:0e:df:47:eb:38:82:ba:a3:70:80:89:a6:
de:ea:0a:b1:a9:c0:6a:d8:33:98:08:54:13:74:25:e6:40:43:
d0:7a:f5:96:e9:a7:bd:3e:9b:25:70:cd:d1:13:0e:1d:cb:83:
0d:d8:42:2a:b6:57:2e:a5:d2:c2:9e:9f:67:f5:a5:5f:71:e2:
15:cd:ee:10:88:2d:f3:04:ad:c4:3c:99:1a:fd:a6:76:a4:90:
0f:5c:6d:3b:62:5b:bb:9f:e3:d2:96:cd:3b:b2:b1:85:90:66:
58:47:7b:fa:e0:d9:7b:dc:08:af:41:d6:19:02:5e:12:7d:c9:
56:42:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 04:25:27 2024 by rpki-client on console-ams.rpki-client.org