Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7C60C4AC391E11EFAC2CE259762E951A.roa
File: 7C60C4AC391E11EFAC2CE259762E951A.roa (raw, json)
Hash identifier: 9Nw6l9/FqQWnxTZzWB+jTcooYMAQXalsE8kaNprM+jw=
Subject key identifier: 3D:39:D7:A2:6E:D4:4F:DF:1D:DC:05:1C:E7:FA:51:48:7F:90:D8:74
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0557
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7C60C4AC391E11EFAC2CE259762E951A.roa
Signing time: Wed 03 Jul 2024 09:27:37 +0000
ROA not before: Wed 03 Jul 2024 09:27:34 +0000
ROA not after: Mon 29 Jul 2024 09:27:34 +0000
asID: 23470
IP address blocks: 102.177.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 3 09:27:34 2024 GMT
Not After : Jul 29 09:27:34 2024 GMT
Subject: CN=66851989-66d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:ab:4d:7d:e3:db:09:ea:f4:64:d1:06:d5:
2e:ff:91:6d:7f:44:bb:aa:19:c3:8f:e5:d4:0d:81:
0d:42:83:0a:f4:00:aa:ea:fd:af:35:85:f6:a6:d0:
9f:6a:6d:2b:fe:51:34:00:68:14:bf:9c:ee:39:8a:
b0:46:64:dc:2e:ee:5e:d4:0c:83:db:2d:78:68:5b:
75:d7:22:c0:25:f4:b8:3c:f6:af:1c:74:d3:b9:de:
c8:aa:5a:0c:90:82:18:d6:75:32:cf:b1:ba:97:76:
25:8d:2c:62:ad:0f:4f:a6:09:1c:01:fb:36:06:ef:
6a:85:e6:c4:fe:f1:7c:ac:7f:b2:e5:9b:0d:13:36:
14:51:bb:94:42:6d:fb:94:33:96:3d:55:89:75:ea:
24:5b:b1:25:2c:a3:4e:81:64:1e:83:44:1d:ad:51:
74:5f:b7:b6:71:da:7e:b2:15:25:ba:b0:b1:7d:24:
22:84:91:05:f3:74:31:c6:40:59:35:9f:c2:39:bc:
98:96:26:f4:96:23:cf:b7:8f:93:2d:bf:04:0c:2a:
25:f7:91:10:9d:69:d1:30:68:20:bf:5d:e4:50:a9:
cc:ef:e5:23:20:f5:b6:b8:96:46:43:10:01:b3:60:
58:da:7d:79:0e:57:0f:0d:5b:ed:24:64:39:a1:73:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:39:D7:A2:6E:D4:4F:DF:1D:DC:05:1C:E7:FA:51:48:7F:90:D8:74
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/7C60C4AC391E11EFAC2CE259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.182.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:77:91:85:08:d1:c0:15:d0:81:d5:4a:31:99:48:5a:9c:c7:
f3:3c:e3:09:c8:77:d9:15:02:97:54:68:f8:34:16:55:ac:7a:
02:5b:fa:05:cd:c0:af:a4:79:61:17:91:6f:8e:98:42:47:0e:
b5:f5:4e:21:c2:53:b8:b2:e2:f9:1c:a5:24:c9:b3:2a:98:d4:
bc:7a:08:35:ab:cf:e7:99:6f:47:a2:b5:d4:a1:50:8e:06:42:
28:06:fe:a5:b1:80:30:3d:ec:34:9c:0e:31:25:6d:d6:21:11:
ec:99:4a:39:87:61:9d:9e:f7:cb:54:11:a5:97:16:38:37:f2:
74:64:6a:3f:e0:61:f3:a6:20:ec:19:08:d7:82:bb:2c:66:9e:
41:a5:68:c6:2a:c0:32:a9:f2:c8:7d:3e:cb:4e:79:9b:79:74:
44:91:12:81:62:da:aa:d8:9b:11:8c:80:04:0d:f2:a3:18:3c:
80:8b:34:13:3c:97:f4:1d:e3:33:81:a2:fb:e3:4f:90:6d:82:
5f:7a:9e:5b:95:74:cd:be:40:ff:69:63:fd:5e:8a:73:35:6d:
82:3d:ef:64:a6:1b:9b:6d:ce:11:87:bb:2b:3b:e3:b7:98:ce:
6c:74:c7:86:1f:3c:0a:65:58:a3:b6:1e:b2:8d:f3:0c:21:c8:
2f:e0:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 04:09:48 2024 by rpki-client on console-fra.rpki-client.org