Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/77B7CABA391C11EFB3E84D4C762E951A.roa
File: 77B7CABA391C11EFB3E84D4C762E951A.roa (raw, json)
Hash identifier: wwAfWz15aea/AGoT1eoalrP/D6rwN/lR1MweUKFjXzw=
Subject key identifier: 1A:D0:4B:D0:50:27:37:57:E1:C2:3F:4A:96:B6:67:20:6D:26:0D:E8
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 054F
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/77B7CABA391C11EFB3E84D4C762E951A.roa
Signing time: Wed 03 Jul 2024 09:13:10 +0000
ROA not before: Wed 03 Jul 2024 09:13:07 +0000
ROA not after: Fri 26 Jul 2024 09:13:07 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 3 09:13:07 2024 GMT
Not After : Jul 26 09:13:07 2024 GMT
Subject: CN=66851626-ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:51:b4:f3:d2:78:d9:5e:90:3a:88:83:22:
f5:10:24:5d:79:8b:ec:5c:af:56:be:67:12:05:87:
28:1a:7d:15:c1:3f:ca:54:60:5a:00:1f:a1:ac:3f:
2b:c3:7d:21:0e:2a:2c:d1:48:f3:7e:da:e7:c5:7f:
a9:95:ac:cc:77:db:9e:8f:4a:3d:eb:95:af:8a:0f:
e2:37:a2:c7:1b:3a:92:a8:3d:58:ae:fb:4e:6b:84:
8f:eb:9b:2c:80:35:63:be:90:34:68:23:5c:0c:b3:
23:6f:63:53:a9:e6:2e:fe:f3:fe:17:3f:08:51:63:
2d:6b:6b:e4:67:81:8f:0a:96:8f:ed:a5:85:e8:8a:
e5:3d:11:0b:02:5d:e4:18:3c:cf:fd:ad:31:cf:2c:
90:fd:64:1d:90:71:45:ff:bd:14:a6:39:da:7a:b2:
59:7f:fd:0d:f4:bf:61:7a:0e:ee:f6:27:63:5a:f3:
3e:32:f9:ad:b8:82:7e:05:82:b0:0b:55:8a:b3:a5:
5b:f7:34:bc:b1:9b:56:e0:be:da:8d:30:0b:6c:17:
ae:b7:68:17:d9:11:93:31:41:26:8f:e6:98:45:e1:
00:8c:86:b4:7d:52:57:20:14:1e:db:f0:a7:f7:88:
6e:79:8f:be:05:30:bb:77:de:cb:f9:05:26:ab:89:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:4B:D0:50:27:37:57:E1:C2:3F:4A:96:B6:67:20:6D:26:0D:E8
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/77B7CABA391C11EFB3E84D4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6e:f0:94:71:2e:00:48:77:cd:9a:9f:7e:66:3e:27:98:b7:
52:18:48:4c:99:6c:29:57:7f:bc:01:af:26:08:16:1e:8b:28:
05:45:93:9a:47:34:46:75:13:38:2e:4a:6c:fb:7a:6c:72:bf:
2c:1d:2b:d1:27:8d:9e:bb:96:e4:2a:07:02:59:91:0f:77:25:
a4:d5:fe:81:14:55:a1:8b:d2:b1:d0:14:68:45:0a:69:4b:30:
ad:1a:70:ef:fe:0a:72:a5:82:b0:dd:5d:b8:8b:56:2c:ee:3b:
5c:dd:bd:2e:47:fb:6e:5d:81:ea:0f:5f:30:1d:e7:b0:22:10:
36:c1:eb:f8:2a:2a:2e:ff:d7:5c:14:bb:84:4f:60:b9:67:7c:
e7:21:2a:01:71:9b:0c:c4:c3:6f:4a:62:fd:25:b4:8b:f8:91:
05:3f:a4:15:18:84:0d:6a:bd:d2:29:09:60:8c:b3:be:56:56:
79:02:2b:0d:ec:85:e9:f5:1d:5c:39:1a:71:92:2a:6c:e9:bc:
6b:b2:ec:a2:d8:69:c2:a0:a5:d1:81:e1:84:b6:2b:be:7e:01:
f6:df:8a:c2:ee:a6:b5:9d:03:4c:36:59:2b:8a:ea:35:45:c8:
4c:32:77:86:3d:30:de:73:bb:ea:e7:63:3b:16:14:b3:59:62:
e0:f8:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:12:40 2024 by rpki-client on console-ams.rpki-client.org