Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3C627022DBC11EDABDA8ABCF1222468.roa
File: C3C627022DBC11EDABDA8ABCF1222468.roa (raw, json)
Hash identifier: k09fUZhXNaT3HG8SDI9xLyAq75heasPqX++Wd/8DssY=
Subject key identifier: 8C:13:F3:56:E7:E1:61:D9:CF:52:B2:74:A1:10:8B:1F:54:A6:24:43
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 023F
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3C627022DBC11EDABDA8ABCF1222468.roa
Signing time: Tue 06 Sep 2022 08:20:28 +0000
ROA not before: Tue 06 Sep 2022 08:20:24 +0000
ROA not after: Mon 31 Jul 2023 08:20:24 +0000
asID: 22724
IP address blocks: 102.177.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 575 (0x23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 08:20:24 2022 GMT
Not After : Jul 31 08:20:24 2023 GMT
Subject: CN=631702cc-2e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:91:e7:a3:00:e2:54:2f:a3:6e:fd:c8:96:
09:66:de:ff:d7:03:06:49:7c:73:e7:ac:15:1b:43:
e0:c5:be:7f:67:a2:d4:03:6f:e9:5b:87:25:64:8f:
a9:c2:b9:d8:be:7b:9d:e5:a3:8b:a8:65:b8:c4:04:
5a:59:48:26:c7:fc:fe:32:90:e9:29:42:83:0d:5b:
ad:15:32:b3:e2:49:a6:58:50:81:a8:a2:dc:2d:9a:
52:36:e4:95:8b:97:7a:f6:00:30:48:52:24:45:e1:
ad:b9:21:71:cf:a0:e0:12:a2:cd:e4:25:f9:8a:ef:
73:88:71:d9:3d:8a:de:02:02:16:7f:ad:e2:93:15:
c1:99:38:ca:6f:58:11:b5:2e:9e:6b:de:3f:99:2e:
20:00:ae:25:b5:c8:10:a3:35:3c:1e:90:3a:c7:3e:
01:ce:dc:21:65:55:b3:15:ab:b9:5d:b7:55:fb:25:
72:9c:02:2a:32:e7:d7:50:ed:90:91:2a:c7:22:6c:
d0:b8:81:91:8e:7e:0a:04:0a:f6:5b:79:3b:31:2f:
a7:12:d2:a8:9c:d0:68:d9:3c:40:3b:3d:ba:a1:f0:
c8:5b:cb:e4:fd:ca:dd:26:dc:49:a2:42:44:77:e1:
87:4d:0d:05:fd:ce:d4:19:d2:7a:4b:fe:47:bb:3c:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:F3:56:E7:E1:61:D9:CF:52:B2:74:A1:10:8B:1F:54:A6:24:43
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3C627022DBC11EDABDA8ABCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.174.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f1:a4:51:4b:19:e6:fb:da:2d:11:dd:98:9a:ea:ea:c6:a8:
e7:ca:ba:a3:b6:3c:7b:44:e3:44:a6:58:91:46:85:e2:13:3b:
8a:d7:f0:84:26:fc:42:bc:79:c2:dc:82:af:2e:ed:20:53:69:
68:96:f1:41:35:1d:f7:96:a8:9b:39:20:27:0e:6d:e3:70:6f:
76:b6:45:32:b6:83:eb:83:a7:9f:e3:fb:24:54:81:c5:86:80:
f1:3e:c1:71:9b:00:6a:65:34:26:35:0a:41:3b:a3:0b:99:41:
64:3f:60:49:0b:f9:ca:25:4c:1e:33:09:34:c7:8a:01:f7:a6:
33:ac:1c:2d:c9:fd:14:08:87:e9:f6:1e:83:ec:84:55:5c:47:
16:78:68:03:ad:99:fb:96:81:dd:4f:4d:4d:e1:d0:ec:36:57:
da:ee:d8:08:08:87:5d:85:28:b3:88:3e:06:ae:c6:2e:be:44:
c0:10:bd:d5:97:d4:d1:c5:ec:74:c9:85:e9:be:ec:af:99:90:
ea:e2:35:c1:91:0b:e2:7d:09:64:b3:fe:86:f4:b2:9b:a8:c1:
b4:48:8c:0c:4a:12:6f:3d:e1:7f:83:33:8b:a3:9f:a6:09:2f:
ef:2a:47:36:26:fa:69:a9:ec:8c:45:d3:86:ed:bb:5a:cb:af:
ad:69:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:47:36 2023 by rpki-client on console-fra.rpki-client.org