Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5DB3D130800311EFA730D14B762E951A.roa
File: 5DB3D130800311EFA730D14B762E951A.roa (raw, json)
Hash identifier: KCLze4CVZJk/KXELoh0UFmlzR4ICSrpPeP+adH7mFaw=
Subject key identifier: 1D:BA:3C:8F:85:BB:31:7F:42:61:9B:64:52:1F:85:FD:7B:3D:A8:ED
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05DE
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5DB3D130800311EFA730D14B762E951A.roa
Signing time: Tue 01 Oct 2024 14:42:22 +0000
ROA not before: Tue 01 Oct 2024 14:42:18 +0000
ROA not after: Wed 30 Oct 2024 14:42:18 +0000
asID: 9304
IP address blocks: 102.177.186.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:42:18 2024 GMT
Not After : Oct 30 14:42:18 2024 GMT
Subject: CN=66fc0a4e-5ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:9a:ad:92:1e:08:49:56:b5:5c:cd:84:55:
72:f9:ce:13:3b:b5:2d:ef:4c:6b:0f:2e:18:50:30:
ea:69:df:7d:27:e3:98:f9:6f:fd:d6:e3:10:b8:3c:
df:13:45:a2:39:94:16:77:7b:95:6d:7b:02:4b:0d:
43:ea:4b:56:a2:62:4a:62:1f:f4:51:b3:29:b7:cb:
48:b1:2d:c0:3f:03:59:c5:5f:27:f4:0b:f2:93:cc:
80:16:39:e4:74:e9:f1:c9:78:80:9f:a6:dd:d6:a7:
0f:1e:cd:48:db:78:0c:e2:4f:e4:de:03:aa:f7:e5:
ac:71:f4:73:ef:35:d8:a6:07:e5:cf:35:d4:a3:97:
f9:ab:a7:49:65:41:d2:af:fe:6f:73:61:f7:31:13:
92:72:0a:cc:d6:50:9c:80:20:8e:dc:3f:27:df:c9:
43:87:84:e5:78:a2:60:41:e6:35:17:b9:03:4f:4a:
d1:8a:0d:80:90:6e:4a:80:ff:c3:e1:c1:4b:bf:21:
05:ba:60:a5:bf:eb:8d:f9:d5:aa:38:c5:9a:21:a2:
1a:f0:24:cc:8f:cf:23:44:bd:50:d9:09:d7:a8:01:
c7:ed:17:32:ff:e5:96:be:e2:4c:db:a6:d1:75:52:
f2:4c:30:a4:cf:64:37:70:fe:89:c7:d3:43:43:cf:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:3C:8F:85:BB:31:7F:42:61:9B:64:52:1F:85:FD:7B:3D:A8:ED
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5DB3D130800311EFA730D14B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.186.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:82:51:5b:81:e2:9a:6a:7d:5c:05:07:98:25:96:ac:6f:1f:
09:75:f6:ca:e4:e1:29:7f:7c:71:dd:c3:e6:0a:40:e0:5f:d4:
0d:94:c4:74:e7:fd:88:12:9d:e3:b7:39:78:53:10:44:cb:19:
84:08:37:3d:cf:a9:0f:be:4b:0f:b7:a8:d8:b2:a7:37:c1:f2:
11:6d:f4:51:54:5c:00:c8:c1:85:20:73:77:e8:b2:a0:29:82:
42:7c:a1:90:46:db:e5:fd:c3:2a:52:15:35:06:a6:c6:14:39:
a3:33:fb:2b:79:ac:b5:53:b0:86:a5:8f:3a:a4:af:08:55:17:
4a:5f:e1:53:7c:1f:a6:a8:4c:00:4b:38:69:de:0b:f5:1a:b3:
e6:37:f9:1b:6b:af:0a:15:a7:f5:64:38:8a:d0:4a:03:13:2c:
de:ae:e9:a9:30:44:b4:8b:79:29:5b:9b:8b:40:8b:9e:d0:8c:
c5:14:94:26:fd:64:ac:ab:d2:1b:24:a7:0a:f1:73:de:9d:6e:
17:51:98:1b:b4:6c:5f:63:12:71:f1:00:4a:21:c9:8f:91:8a:
76:a3:af:ce:b0:5a:e1:af:2b:04:a9:95:ad:5c:11:66:ab:80:
76:e2:e6:cc:8b:d4:55:c8:d8:aa:79:81:06:f3:7f:52:34:78:
b3:3a:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org