Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4939DA6C776A11EEB39F657B4AD9E6FC.roa
File: 4939DA6C776A11EEB39F657B4AD9E6FC.roa (raw, json)
Hash identifier: CPJJZRdA7YoYDilX42w2v22kFez2mZrCfNb4D+qHhqc=
Subject key identifier: AA:4E:EE:7F:83:2F:18:AD:B0:2A:05:A6:3B:7B:3A:4C:EB:99:61:1C
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0425
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4939DA6C776A11EEB39F657B4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 21:21:27 +0000
ROA not before: Mon 30 Oct 2023 21:21:24 +0000
ROA not after: Sat 25 Nov 2023 21:21:24 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 30 21:21:24 2023 GMT
Not After : Nov 25 21:21:24 2023 GMT
Subject: CN=65401e57-0c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:4d:11:20:bb:b5:a7:b4:0c:3e:ea:58:d6:
0d:de:d6:71:45:cb:0e:ae:ee:f7:27:cf:51:ea:92:
f4:db:b9:ac:25:ca:17:f9:2d:61:56:92:2d:d2:53:
5e:a5:c4:03:8a:79:e2:8e:83:77:08:64:8a:0e:f8:
2e:4d:f8:b7:ce:03:8d:60:94:6e:74:8c:c8:4d:72:
75:2f:62:38:20:07:dc:ad:8a:39:a2:15:7a:10:dd:
51:4e:d6:d0:77:17:38:cc:7d:7a:66:4c:dc:d2:d9:
70:8d:5b:62:2a:0a:1d:5d:8e:36:f2:9c:2b:fc:37:
2c:92:4d:bc:e8:a6:13:75:45:16:fb:25:37:ab:62:
a0:ce:1a:30:f5:d2:8b:cc:54:38:db:52:44:84:21:
22:73:8e:86:95:8c:45:70:80:77:83:3e:67:bd:f8:
19:44:eb:c7:c5:ce:13:b9:a1:79:d2:6e:21:4e:90:
43:a5:d2:8f:e8:fa:b4:78:d3:4b:6c:af:f9:d9:b6:
bb:91:e7:cd:8d:d7:da:3a:fc:9f:cf:61:5c:cf:38:
2f:23:97:f6:ee:f0:67:70:2a:bd:24:e9:b2:f6:63:
6d:a9:4b:c3:0a:ab:9b:e0:0e:89:c1:0b:f6:03:77:
6f:da:e6:e9:06:29:81:b7:f0:c6:37:4d:ab:15:b6:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:EE:7F:83:2F:18:AD:B0:2A:05:A6:3B:7B:3A:4C:EB:99:61:1C
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4939DA6C776A11EEB39F657B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f6:12:fa:f2:a3:53:74:c7:2f:8a:5b:fa:68:16:58:d4:df:
c4:9c:b4:b1:e4:14:ff:56:4f:b5:ae:38:97:05:93:14:dd:a6:
22:94:e0:35:6f:2d:a8:7e:de:43:2f:0a:b3:95:ec:16:c8:1c:
47:94:06:f9:d5:6b:23:83:69:03:a2:00:a9:97:1b:0c:7a:8e:
cb:b3:de:40:8f:9a:ff:88:38:b4:75:65:3f:a0:5d:77:67:b8:
84:63:f4:c4:8f:59:58:14:7d:53:ff:63:23:62:ba:51:57:24:
66:98:d4:27:20:f0:32:38:3b:f1:a6:82:13:99:0c:ec:32:19:
ac:73:fc:08:65:d5:a8:7c:b6:1f:3a:64:66:d7:bc:9d:d9:1a:
14:0c:b5:ad:50:3a:22:f6:0d:08:a0:1a:c2:4d:e5:02:ad:5d:
df:fb:d9:ff:9f:e1:b9:92:48:24:39:2a:23:e3:2a:3e:af:e3:
c5:1f:f0:21:96:79:bd:2f:fb:3d:fb:11:5f:7c:1a:4e:9a:94:
a9:8e:57:37:8b:2d:d2:55:b7:f9:97:81:ed:f8:56:8c:4d:77:
fd:e7:af:e4:36:bc:af:69:bf:a7:bf:2c:b4:98:a7:be:f4:fb:
8a:ca:37:ac:68:2f:93:2e:32:66:23:7c:77:b3:28:7f:ed:f4:
20:1e:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 02:17:33 2023 by rpki-client on console-fra.rpki-client.org