Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/46D0AE58800211EF8CB12B45762E951A.roa
File: 46D0AE58800211EF8CB12B45762E951A.roa (raw, json)
Hash identifier: CBAwhHXmuGrcf40jxby026H6KgoE1dhNYU6tqR0SV0E=
Subject key identifier: 38:4C:FA:7F:D7:64:F9:6D:1E:48:6C:29:54:8E:BC:86:1E:C8:F1:B5
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05D8
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/46D0AE58800211EF8CB12B45762E951A.roa
Signing time: Tue 01 Oct 2024 14:34:34 +0000
ROA not before: Tue 01 Oct 2024 14:34:30 +0000
ROA not after: Sun 27 Oct 2024 14:34:30 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:34:30 2024 GMT
Not After : Oct 27 14:34:30 2024 GMT
Subject: CN=66fc087a-d4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:6b:fe:29:fa:1d:67:1e:c6:e3:b4:28:68:
e0:98:64:54:29:7f:b8:bd:c6:6c:32:9b:46:43:ab:
19:0d:37:fa:09:87:c0:2f:a5:79:b6:d2:ff:99:66:
18:f4:3a:1b:3d:5f:d3:3a:c1:55:59:c5:d0:da:12:
7e:74:c2:3a:a5:cc:69:de:a8:f6:02:aa:5d:df:38:
ea:25:5b:c8:2d:2f:3b:a6:52:80:5f:ce:fd:2f:08:
b7:58:05:ed:25:c4:e1:c5:d3:72:da:4a:92:1b:6e:
57:f0:aa:ac:90:67:6e:0b:23:9b:07:91:56:54:10:
3f:de:3e:58:f3:d0:2e:cb:4e:1f:37:41:77:43:8a:
e8:ea:b7:80:86:fa:a6:fa:97:fc:c5:fd:a0:64:0c:
0c:05:be:0e:26:f5:03:52:dd:fe:b1:c6:06:db:c4:
1c:b0:96:0f:54:32:bd:ef:6c:5b:29:1a:94:48:44:
09:e3:f6:f8:0d:ed:90:65:52:23:13:20:da:f6:04:
e6:d8:ea:59:2a:1b:9d:2b:ea:f8:a4:a8:f5:90:af:
ff:59:b4:36:3d:b8:64:2f:e4:fa:58:28:67:73:af:
62:fd:a6:f8:d0:85:27:18:23:62:a9:05:c8:96:5a:
70:48:39:18:10:8d:2f:6f:59:16:2d:01:9d:62:e6:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:FA:7F:D7:64:F9:6D:1E:48:6C:29:54:8E:BC:86:1E:C8:F1:B5
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/46D0AE58800211EF8CB12B45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:66:eb:db:17:b4:87:1a:a4:63:1f:27:34:e2:e7:17:48:16:
b3:cf:02:5a:f2:97:98:7a:5e:f2:27:4a:f8:5f:4f:a3:d0:21:
d3:58:5a:39:df:11:2c:d4:08:93:7e:02:3b:89:89:17:35:77:
96:64:49:09:7f:b8:bd:8c:d1:ee:db:93:9c:17:ca:16:86:ed:
6f:f8:fd:4b:12:c9:ba:b2:2e:66:82:6b:3b:5a:14:e5:c2:0f:
b8:95:b6:40:e5:e7:c1:24:7b:b4:00:0e:39:6a:fd:a1:05:d5:
02:7d:3a:7d:eb:e7:c8:b8:70:fa:f3:d9:31:8e:ee:c6:b5:19:
bd:f2:e1:9d:f4:7a:ec:ea:bd:5d:32:bf:e6:26:f2:71:18:29:
11:8a:02:e8:cb:80:44:87:57:b7:24:ad:fc:54:c7:03:4b:67:
73:a4:9b:b0:8c:4b:65:83:c8:76:e4:db:4a:06:b2:a9:fd:74:
a7:14:16:1a:df:00:98:98:e1:eb:90:86:f6:ab:7a:59:10:43:
82:55:6a:e3:3e:01:3f:0f:75:6f:19:ce:fd:c1:6b:be:d9:6c:
6f:41:ac:0f:7c:ee:3d:c0:5f:f8:9f:d8:3f:7a:91:fb:41:8e:
49:fb:18:48:9d:58:44:aa:61:35:ab:dc:0d:32:2a:5c:20:71:
c1:f7:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 03:20:02 2024 by rpki-client on console-fra.rpki-client.org