Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B3B23F363CF611EFAA15FF5B762E951A.roa
File: B3B23F363CF611EFAA15FF5B762E951A.roa (raw, json)
Hash identifier: 03gd2qtjs+aP53jone5o1I74SaPHLeyyFYukK9nNJo0=
Subject key identifier: 7B:D0:BD:BF:3F:7B:5B:85:46:10:F7:91:35:7E:EB:E6:40:6B:10:19
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0565
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B3B23F363CF611EFAA15FF5B762E951A.roa
Signing time: Mon 08 Jul 2024 06:52:55 +0000
ROA not before: Mon 08 Jul 2024 06:52:51 +0000
ROA not after: Thu 01 Aug 2024 06:52:51 +0000
asID: 3491
IP address blocks: 102.177.186.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 8 06:52:51 2024 GMT
Not After : Aug 1 06:52:51 2024 GMT
Subject: CN=668b8cc7-20a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:9f:ce:8a:ad:dc:b3:c1:e7:b0:95:c7:3e:
de:c4:6f:79:10:07:c5:32:4e:c7:a2:61:84:72:68:
62:6f:72:b0:67:84:61:3a:b1:78:04:45:bc:0a:a4:
bb:cb:47:5b:dc:71:26:13:20:8b:2a:00:f3:1a:0a:
cb:13:b4:25:07:90:f9:6e:f5:d0:af:95:a4:3c:cb:
71:08:a1:2e:cc:42:59:f8:d5:c7:ad:a7:69:30:2f:
81:2e:34:9b:35:2c:f7:cd:4f:f9:f2:c7:2b:4c:1b:
64:2f:52:a2:ff:5a:5a:ae:07:2d:76:7d:18:ab:9e:
ef:4d:6c:4a:75:4d:4e:d0:ae:df:f1:da:64:9c:58:
a1:0f:c2:c8:0a:66:10:11:aa:3d:56:72:2b:60:7f:
4d:59:ae:cb:83:7b:e7:29:ac:8f:8e:4b:df:ef:06:
c8:7a:a4:b2:3c:47:2a:91:39:59:e9:50:19:ac:a6:
9c:98:85:20:5b:f7:e8:3f:23:50:32:39:4e:0b:e7:
05:04:d0:70:12:42:cf:ef:03:93:ce:88:9e:7d:ad:
82:54:4d:06:d0:26:e5:70:53:9b:88:16:60:61:09:
d2:e1:15:5c:f7:0c:5b:6d:9d:4c:43:f3:9e:1d:5c:
0c:99:84:01:ff:bc:59:11:58:da:89:40:ad:a5:50:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:BD:BF:3F:7B:5B:85:46:10:F7:91:35:7E:EB:E6:40:6B:10:19
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B3B23F363CF611EFAA15FF5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.186.0/23
Signature Algorithm: sha256WithRSAEncryption
46:cd:07:be:28:df:d3:62:67:e2:0d:fc:ec:b4:f6:bb:41:b5:
b7:b6:bd:f7:24:4f:df:66:d6:cf:47:94:80:58:2d:b9:ae:08:
d5:17:45:9d:c3:6d:d1:62:c4:5a:c3:c1:db:04:9b:4d:26:0c:
93:8e:bd:cb:ef:20:8c:54:a5:04:28:15:fa:9e:c1:50:32:b5:
10:8f:7a:74:b8:94:62:f4:f8:84:34:9f:0e:fe:79:57:64:5b:
bf:3d:75:cb:4b:0f:b6:f9:83:af:45:d4:81:5a:a2:2c:9c:4d:
8e:de:a7:36:31:5b:b7:3f:a7:5e:60:09:36:3a:78:7b:1f:4a:
16:f9:89:c0:73:a9:c4:07:55:ea:1c:51:dc:94:41:e1:84:24:
a8:b0:92:02:c0:40:8e:f6:70:57:2f:34:b8:d4:f3:64:e8:99:
80:4e:f0:cb:2f:a2:cc:0d:25:c8:a0:07:58:83:bd:4f:57:40:
a5:88:9f:1e:f0:95:a6:f9:4c:ea:08:b7:b8:fc:e8:e6:25:3b:
d3:5a:cc:f6:2b:f0:74:ac:40:56:e0:b5:50:7d:d2:86:39:f0:
78:df:3a:d2:4c:eb:f5:98:c3:12:7e:26:db:53:51:6d:e1:96:
82:0b:58:c0:97:70:91:01:ba:e7:5a:d5:02:bd:67:22:fa:0a:
1c:71:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 03:36:55 2024 by rpki-client on console-fra.rpki-client.org