Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BE1C2B6A2DB911ED83E48FB4F1222468.roa
File: BE1C2B6A2DB911ED83E48FB4F1222468.roa (raw, json)
Hash identifier: erG8v+jKuhRANmvHuFENq5+m2V+/VtZ+O58mE6dmfCc=
Subject key identifier: F2:6F:82:AC:74:06:28:CD:80:80:13:73:74:0E:DD:EB:25:49:F2:DC
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 022D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BE1C2B6A2DB911ED83E48FB4F1222468.roa
Signing time: Tue 06 Sep 2022 07:58:50 +0000
ROA not before: Tue 06 Sep 2022 07:58:46 +0000
ROA not after: Mon 31 Jul 2023 07:58:46 +0000
asID: 22724
IP address blocks: 102.177.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 07:58:46 2022 GMT
Not After : Jul 31 07:58:46 2023 GMT
Subject: CN=6316fdba-7205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:eb:24:f6:f9:e5:12:60:57:3c:84:c2:97:
ed:59:7f:cb:8a:69:38:56:6b:97:5b:7c:c6:d5:4d:
89:05:75:e8:e4:a4:09:f1:34:39:36:42:cb:fa:d8:
0f:07:a4:35:13:1f:2e:9d:58:61:3b:c2:ac:5d:cd:
1e:c9:4d:6c:76:ff:e4:ce:ec:6e:6f:fe:6e:66:2f:
98:9d:70:03:3f:b0:d1:7e:60:66:a5:bb:f7:c2:e0:
77:5f:be:c7:17:18:d4:00:ac:ba:5d:26:77:80:60:
9d:6f:d0:04:2b:ed:f5:6c:30:3c:45:c4:f2:de:23:
07:87:10:dd:c1:a2:86:6e:eb:fd:07:4f:02:d9:94:
75:88:d9:d1:35:ae:a0:10:3e:12:66:21:9f:b3:42:
3f:b3:05:3a:3f:66:cf:c6:2f:bd:97:8d:2b:2f:22:
2f:9c:44:e3:9f:2a:b0:0f:f5:37:cd:85:cc:79:92:
46:44:e9:33:13:23:c2:7e:0b:3e:39:fa:86:4d:25:
ba:fd:c9:9e:0b:ec:2f:ae:63:5c:1c:4f:07:bf:87:
04:af:4e:1a:0d:4d:f6:29:35:04:7c:80:51:d4:40:
89:4c:e9:48:22:a1:68:6e:8f:18:16:07:bc:fa:c2:
c0:e1:82:57:c3:1d:af:a4:71:3c:b3:d0:92:07:d8:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:82:AC:74:06:28:CD:80:80:13:73:74:0E:DD:EB:25:49:F2:DC
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BE1C2B6A2DB911ED83E48FB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.165.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2e:1a:67:40:13:b8:f3:9e:0b:69:36:71:3f:f7:e6:ff:cd:
99:bd:68:d3:78:40:87:a8:e0:06:c1:a1:ce:d8:a9:68:9c:f6:
f2:9f:c2:2b:ac:eb:9e:18:5c:20:3d:df:69:6f:2c:85:af:4e:
74:d0:58:54:e8:48:84:d4:a0:45:a8:51:40:58:3e:e1:f5:d8:
ed:99:6a:0e:06:d7:a8:39:12:9e:61:5c:db:a8:d7:2d:5c:c6:
07:e0:8b:b0:32:ea:ab:d2:ac:01:39:89:eb:4d:56:14:63:a6:
e7:2b:06:7b:ca:e2:d5:a8:e7:54:b1:2d:6e:91:9d:09:b2:f6:
e0:13:55:47:43:8d:72:78:61:0b:0b:3e:20:30:59:e5:48:c3:
67:a5:f2:f3:a7:78:a3:b6:31:47:1e:63:ab:0f:8a:0e:8a:45:
8d:2e:aa:f8:a2:76:13:01:bb:9b:dc:53:cf:12:d0:c3:01:1a:
5c:6e:21:5b:11:a5:ba:5d:03:0f:c1:7c:bd:45:a9:1a:2d:8f:
16:1c:da:e2:8e:1c:e2:03:5c:bf:47:77:01:17:83:9f:31:cd:
6d:16:df:ea:29:62:9c:91:28:4a:ef:1c:1d:29:47:a2:71:69:
69:a1:39:a6:e9:1a:80:2a:d9:50:17:f8:c3:3d:54:2f:1f:a1:
cc:16:a7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:51:21 2023 by rpki-client on console-ams.rpki-client.org