Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2826124A2DBB11EDBA6A3AB8F1222468.roa
File: 2826124A2DBB11EDBA6A3AB8F1222468.roa (raw, json)
Hash identifier: R0R+24/3g87Ikq1q0xsh3RSsVaAyEZzlfpkAudyoZac=
Subject key identifier: 72:8D:57:F9:BA:9B:56:AC:4E:5A:22:C5:95:28:B2:53:86:83:38:F8
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0237
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2826124A2DBB11EDBA6A3AB8F1222468.roa
Signing time: Tue 06 Sep 2022 08:08:57 +0000
ROA not before: Tue 06 Sep 2022 08:08:53 +0000
ROA not after: Mon 31 Jul 2023 08:08:53 +0000
asID: 22724
IP address blocks: 102.177.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 08:08:53 2022 GMT
Not After : Jul 31 08:08:53 2023 GMT
Subject: CN=63170019-0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:01:fc:89:bd:de:ca:a1:57:ef:87:8d:37:
10:b7:9e:86:7f:36:7a:1d:76:7b:8e:92:f3:06:3d:
f5:e4:18:24:a5:08:be:27:fd:51:fd:db:5e:3a:4c:
11:54:50:e4:c0:bd:72:30:41:b7:0b:d6:16:a1:d0:
a7:c7:d0:23:52:20:0e:1b:1f:34:25:8a:f6:e9:97:
9d:65:4a:35:29:59:87:41:57:a2:b2:19:9e:04:73:
44:a1:ac:e4:00:ef:9e:2b:ac:88:d7:ad:26:af:db:
a4:b3:14:5e:9c:01:3a:8d:c6:86:32:34:37:e2:4b:
eb:a1:f3:ad:8e:ee:58:aa:d7:79:e8:6a:1f:88:82:
35:68:8c:1a:02:a2:f1:a1:48:69:b9:7b:be:05:88:
51:18:fb:fa:65:43:f6:b6:5e:01:02:30:c8:97:62:
c8:7b:54:63:6e:ff:c9:b6:bf:87:1c:50:30:20:7e:
9d:9a:92:ba:a9:4e:68:f4:2f:ba:89:df:f4:3c:bf:
51:85:31:b6:d9:bd:04:84:fd:ef:99:38:de:2e:44:
6b:d3:35:22:73:a7:27:ed:22:f0:d4:9b:e3:1d:26:
2c:94:fb:fb:56:1b:ad:6c:d2:d4:26:18:9c:d0:b3:
ed:be:ba:b5:93:29:10:c9:dd:ea:94:21:12:56:92:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:57:F9:BA:9B:56:AC:4E:5A:22:C5:95:28:B2:53:86:83:38:F8
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/2826124A2DBB11EDBA6A3AB8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:40:6c:f7:74:3b:0f:d0:55:ee:8e:c4:d8:1a:22:dd:2b:49:
97:19:bd:3a:99:67:64:b7:1a:b6:2e:01:f0:09:65:8d:ca:4d:
00:46:8f:d8:d6:04:82:aa:2b:58:0f:c5:8a:41:b5:ac:f5:1a:
31:50:bd:e5:ea:14:47:87:78:ba:51:9d:88:6a:7e:48:0f:30:
af:15:79:cb:c1:89:2a:11:f8:76:17:25:0d:f6:54:92:c6:2f:
57:8e:f0:e2:85:89:d5:d8:87:60:60:b8:36:bd:86:99:7f:24:
49:d9:a1:93:ea:93:c8:68:bd:4b:e8:e2:62:7a:1c:00:86:04:
f8:fc:ba:2a:0e:ef:bc:99:1e:57:7e:d3:78:dd:ab:fe:42:2c:
95:0e:f7:77:43:7d:d1:fd:ef:0b:13:f5:19:04:d2:fa:5d:ac:
8b:34:c9:13:64:0d:42:0e:b4:19:31:a7:d1:df:c4:5c:5c:23:
92:14:93:a5:1f:22:0e:e4:0e:43:51:ef:0e:95:74:10:82:aa:
f6:ef:54:e2:95:30:24:b2:6f:22:39:42:3a:ce:24:8e:af:a9:
d6:64:f8:41:0e:92:03:b6:a7:ff:73:cc:f9:02:e8:7c:84:35:
a6:59:40:2b:3d:83:b4:d3:11:2b:01:4d:79:4f:44:7c:43:e1:
3d:2d:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:51:21 2023 by rpki-client on console-ams.rpki-client.org