Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21B8F85E181611EFAC618131017001B1.roa
File: 21B8F85E181611EFAC618131017001B1.roa (raw, json)
Hash identifier: A+mC0FFSnqjszOgFX/ZvWAfmkjvy9nRWxV8q/YDGtPA=
Subject key identifier: 54:1A:CB:BE:52:F0:93:40:63:69:1D:A5:8D:70:C1:EF:CC:C0:BC:3A
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0514
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21B8F85E181611EFAC618131017001B1.roa
Signing time: Wed 22 May 2024 08:34:41 +0000
ROA not before: Wed 22 May 2024 08:34:37 +0000
ROA not after: Tue 18 Jun 2024 08:34:37 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 22 08:34:37 2024 GMT
Not After : Jun 18 08:34:37 2024 GMT
Subject: CN=664dae20-2060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:b8:5a:84:2a:f5:4d:a8:6c:77:53:53:e5:
d5:68:1a:da:19:2e:45:3f:79:ea:73:fc:f5:ee:41:
e3:c2:e3:3f:ac:ce:7e:6b:a1:02:e3:b9:c0:62:22:
a7:63:8d:01:67:ec:c2:b9:2e:48:b5:6c:5a:d1:4e:
50:e0:f6:29:d1:a1:fd:40:3f:0b:54:10:81:08:1c:
cd:a6:b4:37:16:81:7a:82:8b:da:df:d5:42:45:04:
ba:7e:d5:fa:a3:7a:bf:09:b7:70:2d:f6:0e:b3:1d:
2b:f3:a0:7d:e5:f5:aa:a0:fa:23:6a:b6:7d:ad:b4:
08:d6:e8:17:37:a0:7b:cf:50:d5:e9:02:61:90:da:
f1:d9:2b:6e:a8:85:7b:cb:f9:ef:66:25:82:04:1d:
2b:e2:08:de:68:42:0d:9f:f0:b4:9c:28:18:11:be:
b3:03:87:ad:63:a9:df:45:e1:03:80:fa:6c:59:a7:
8d:44:74:f9:12:27:1d:fd:ac:a7:e1:18:44:fd:9f:
5b:0a:71:14:4a:60:71:81:55:b0:27:19:76:85:52:
6b:dd:17:d1:40:ed:3d:b6:8c:33:bd:25:80:c7:4b:
c8:3d:0e:6f:82:90:c7:f4:d2:d4:f6:7d:3f:44:35:
ef:84:8c:75:0d:8c:ef:19:1f:b0:81:17:8a:b5:cc:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:CB:BE:52:F0:93:40:63:69:1D:A5:8D:70:C1:EF:CC:C0:BC:3A
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/21B8F85E181611EFAC618131017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b4:71:ee:d5:db:11:1f:a1:b8:00:c9:69:20:67:31:e1:3d:
1e:46:bb:5c:63:29:fa:a2:02:04:c7:ca:f0:d7:94:ed:8b:94:
76:7f:6d:44:d5:ae:95:8d:5c:63:02:c1:fd:e0:07:fe:37:28:
62:21:bd:68:5c:5f:a6:b1:77:8d:55:2c:a5:77:f7:4b:c2:7f:
76:38:6a:06:7e:8f:d2:c4:48:e9:70:46:ff:20:51:55:95:4b:
c2:51:0f:d9:dc:d5:fb:39:35:54:2d:85:e0:d9:3c:5b:8f:27:
82:25:04:d6:db:e6:77:75:4b:15:c1:bc:68:25:80:3c:8c:0f:
f4:98:c6:f5:b2:97:22:93:72:5d:9f:a7:03:c2:31:9e:62:77:
15:50:22:0d:f5:f4:4c:12:c8:59:35:5a:df:8d:df:0d:2a:b1:
f1:86:24:f4:fe:a3:5e:b8:44:24:63:e3:e3:68:a2:80:66:28:
f7:93:35:45:a5:77:94:61:bf:84:e6:ad:05:c2:62:b2:b6:7d:
22:75:b8:e8:50:49:44:00:14:43:78:e9:dc:39:72:42:90:b5:
d6:6e:fe:0d:8c:33:be:ea:2e:0e:ef:62:38:46:60:31:8d:8d:
ef:35:1e:6d:1b:0f:3f:88:f5:5f:3d:48:6a:6c:fe:aa:77:5e:
65:44:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 02:29:10 2024 by rpki-client on console-fra.rpki-client.org