Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E6899862DBC11ED85A91EBCF1222468.roa
File: 9E6899862DBC11ED85A91EBCF1222468.roa (raw, json)
Hash identifier: GZUlGkcH6FUD4Fvzh4QmEhKBF4rmxtP/yw9QMqGWKgA=
Subject key identifier: 10:16:72:57:71:3E:20:42:31:A0:D7:33:32:3F:50:31:6B:F2:DA:C7
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 023D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E6899862DBC11ED85A91EBCF1222468.roa
Signing time: Tue 06 Sep 2022 08:19:25 +0000
ROA not before: Tue 06 Sep 2022 08:19:22 +0000
ROA not after: Mon 31 Jul 2023 08:19:22 +0000
asID: 22724
IP address blocks: 102.177.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 08:19:22 2022 GMT
Not After : Jul 31 08:19:22 2023 GMT
Subject: CN=6317028d-9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:de:99:be:57:6b:f8:a7:3b:2f:8a:fd:a1:
d1:af:ae:ec:ae:26:3f:1e:2a:c4:79:9a:f0:35:f8:
34:27:52:85:c8:3e:ff:8d:88:05:3d:a5:f9:c6:f2:
64:db:cf:f2:6b:de:22:3a:31:cd:f8:e1:32:31:67:
85:8a:f9:6a:58:cf:3f:ec:45:b1:d9:d8:22:02:36:
11:5f:f7:1f:78:ed:28:35:19:16:f8:95:23:d0:bf:
0f:b1:16:42:2d:53:dd:ce:0f:06:da:5f:96:fd:e2:
df:53:23:83:28:54:50:0b:80:7d:ed:5b:b2:21:09:
4f:e4:e6:79:1c:75:8a:c8:50:b5:84:b4:af:9d:35:
89:98:41:ad:b7:5e:0b:63:51:27:c9:72:8b:93:ae:
9b:94:6b:5a:34:80:e6:fe:40:5c:f6:95:7b:05:de:
fe:2f:07:03:e6:2c:4d:a5:bf:52:c9:b0:02:66:b3:
a0:a6:01:c5:f3:53:6f:0e:6d:27:4d:f6:fa:ea:9d:
c0:27:b8:c2:43:5c:87:0c:95:ec:54:e0:9b:a1:f3:
3c:da:f8:17:23:15:a3:1c:d9:4a:ce:8e:4f:ea:bf:
01:30:35:f2:73:c7:e6:2d:6e:60:b0:47:d0:ae:19:
51:1b:8f:42:ec:bc:7f:a8:88:a0:6e:91:a5:76:4d:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:72:57:71:3E:20:42:31:A0:D7:33:32:3F:50:31:6B:F2:DA:C7
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E6899862DBC11ED85A91EBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.173.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6b:95:58:86:43:9b:7c:dc:a8:32:cd:89:c1:27:69:61:7d:
56:de:50:4b:a5:b3:cf:f1:ae:72:ad:d2:ea:4b:e0:5b:31:cb:
d6:ca:23:bb:33:11:75:ad:69:3d:b8:07:c8:be:13:60:5c:68:
4f:a4:fb:d5:6e:7c:7e:bc:fc:ed:3c:cb:f7:82:c6:9d:46:98:
8a:98:0f:43:91:48:6b:ce:58:b2:08:fe:26:cc:52:b3:c8:e8:
0a:57:e6:05:05:3a:77:b6:c2:a7:e4:02:a1:73:6b:d5:a5:4b:
e7:69:e2:d2:21:e5:b6:74:d6:ca:8b:fb:a6:8f:d7:12:26:3a:
cf:82:62:39:d3:74:56:ef:05:8e:b9:70:30:14:55:3e:33:8b:
61:6e:fd:13:a7:c6:ed:e4:78:2f:c4:84:96:a9:8e:46:84:c7:
3a:43:72:f2:2b:be:74:e6:a2:d2:39:69:2e:28:da:f5:e6:d1:
d7:da:22:0f:eb:84:ea:c7:7f:88:5f:13:fd:5f:05:81:b2:ad:
c3:22:05:a8:11:45:50:bb:6a:b2:25:f0:18:82:a9:0c:f0:c1:
24:d6:21:f8:b9:e0:8c:5e:7d:e8:c4:50:77:90:37:ee:a0:46:
c7:50:3a:60:17:6a:56:85:fc:da:ec:bb:0f:e0:8e:2e:18:14:
64:d3:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:47:36 2023 by rpki-client on console-fra.rpki-client.org