Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6BA21CB06F8411EE96DF694B4AD9E6FC.roa
File: 6BA21CB06F8411EE96DF694B4AD9E6FC.roa (raw, json)
Hash identifier: idCa5r7MaKRmfPn78VhpZX2wZ1c1mlFHq8LJDwL7dZc=
Subject key identifier: B1:E7:FE:74:A0:FB:73:5B:84:76:34:92:87:6A:1B:97:0F:11:FF:A3
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0410
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6BA21CB06F8411EE96DF694B4AD9E6FC.roa
Signing time: Fri 20 Oct 2023 20:08:23 +0000
ROA not before: Fri 20 Oct 2023 20:08:20 +0000
ROA not after: Tue 21 Nov 2023 20:08:20 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF
Validity
Not Before: Oct 20 20:08:20 2023 GMT
Not After : Nov 21 20:08:20 2023 GMT
Subject: CN=6532de37-7dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:2f:ca:1e:29:63:80:71:eb:90:40:39:26:
e0:ee:b6:4a:36:1b:24:40:a8:66:1b:40:d6:5b:d5:
89:b6:2d:8e:22:a2:2b:e8:cf:a6:c3:c3:27:51:57:
29:4c:2c:6d:59:c8:25:b6:d3:32:11:bd:66:94:51:
72:2d:54:02:c2:08:85:34:68:43:7e:5f:5d:31:3b:
f3:29:43:c0:3d:3d:fe:51:fc:80:cd:8b:24:b4:e2:
df:6b:bb:5d:8b:9f:4f:9e:61:ff:49:e1:ff:25:b4:
f6:f5:f5:43:05:b8:9a:d8:9e:c8:02:62:3d:70:e8:
d2:d1:1c:97:71:e7:d1:71:10:2b:80:71:41:38:8d:
a3:be:28:1c:ab:63:7c:29:2f:5a:8f:35:96:69:70:
26:52:b3:36:43:7a:12:c1:3d:23:4b:d6:2c:7c:f4:
96:23:61:b6:99:2c:ec:fa:63:83:5c:24:2a:ad:b6:
c0:71:fd:4a:63:fa:d6:1e:81:12:71:4a:aa:9f:3f:
7d:89:bf:16:64:42:f9:d7:c6:21:b8:50:9b:9b:8a:
97:86:2e:28:5d:c1:8a:da:84:0e:56:9f:07:44:a1:
a6:e4:f8:bd:2b:74:a1:8e:a4:61:82:e8:a2:e1:31:
ab:a8:43:bb:cd:5b:18:e8:8a:25:60:14:b0:af:31:
56:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:FE:74:A0:FB:73:5B:84:76:34:92:87:6A:1B:97:0F:11:FF:A3
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6BA21CB06F8411EE96DF694B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3d:3b:fe:9b:26:0e:35:c2:3c:90:54:2f:a7:45:b7:45:68:
bb:b3:ad:d0:4f:4a:38:b3:8e:4b:8f:36:02:b5:c4:ca:0c:57:
8a:58:e6:81:03:6f:95:0f:70:36:59:47:fa:51:32:1a:69:84:
b8:0f:34:dc:21:30:84:66:16:19:d6:50:74:49:5a:bf:01:8f:
f9:b7:a7:99:a3:b7:8e:7a:7c:51:7e:89:16:d0:de:1c:80:6c:
4f:e2:00:25:75:2f:74:13:e2:a7:95:40:d8:05:25:f8:bc:06:
d7:33:a8:63:86:dc:53:e0:fc:ff:58:f3:61:12:8b:20:19:a0:
7e:0a:02:43:35:cd:8e:7d:c0:64:14:f2:3f:46:d6:5d:30:0c:
15:9e:20:9d:70:89:19:de:91:5d:dd:ef:9e:cc:7a:53:0d:86:
a4:fd:c9:68:dc:8e:de:7a:90:ba:0d:55:9f:09:ed:96:7c:1c:
d0:16:3c:81:1f:f1:da:9e:cc:7a:f1:22:04:b2:70:b0:68:82:
07:29:08:f6:12:24:20:ee:da:d5:b2:22:49:c6:c2:aa:ff:7a:
ed:c9:92:dc:e4:2a:a4:cc:72:6f:32:ae:c2:c3:54:a0:53:bf:
73:f6:e0:17:7a:9f:4c:f9:2b:77:2d:8c:7d:97:88:d5:71:69:
bc:02:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:59:24 2025 by rpki-client