Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CC2E68562DB611EDAA3711ADF1222468.roa
File: CC2E68562DB611EDAA3711ADF1222468.roa (raw, json)
Hash identifier: QpTq4jskEV3yHw2bmQpzS9FEtG2p79AwWOh9qHlzbz8=
Subject key identifier: 4F:ED:0A:A7:E9:EF:4A:EF:C7:0D:C9:0D:8E:39:05:F9:F6:07:C9:67
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0227
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CC2E68562DB611EDAA3711ADF1222468.roa
Signing time: Tue 06 Sep 2022 07:37:45 +0000
ROA not before: Tue 06 Sep 2022 07:37:42 +0000
ROA not after: Mon 31 Jul 2023 07:37:42 +0000
asID: 22724
IP address blocks: 102.177.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 07:37:42 2022 GMT
Not After : Jul 31 07:37:42 2023 GMT
Subject: CN=6316f8c9-54ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:b9:b5:b4:03:0a:90:af:52:18:06:b9:1b:
d1:6c:4a:bf:e3:99:91:4f:28:be:63:0c:bf:cb:df:
57:2d:81:5f:ae:01:f8:86:93:3a:17:76:71:6f:bb:
03:5f:d2:a9:58:02:49:42:00:2f:7b:9e:88:31:c3:
44:c1:89:f0:81:c2:4d:c4:4a:37:23:52:bf:a5:a0:
d7:cc:a2:d4:3e:1a:14:7d:70:7d:b3:cb:62:2f:af:
73:cc:37:66:fd:0e:42:c4:fd:57:02:90:0f:fe:ed:
5b:6a:83:37:3d:b3:1d:b9:0e:08:07:49:64:49:9f:
13:64:60:e4:8c:48:a3:ee:78:96:21:81:67:72:45:
e6:fa:48:25:95:09:7f:fc:47:54:39:bf:3d:d6:7f:
8e:44:7d:b5:84:db:7c:bb:05:ab:05:8e:43:c8:29:
59:30:c0:a5:50:96:47:f6:c0:9f:9b:6b:74:4d:64:
7a:c1:84:7d:7d:9f:94:b6:0a:1c:52:42:2f:81:48:
12:72:5f:c1:80:89:0c:b9:fb:ec:0e:6c:a6:b7:3f:
cf:78:cf:0d:8c:4a:33:8d:db:fe:ff:27:2d:ff:c5:
42:de:4c:cf:f1:98:f0:b3:3d:d2:48:52:52:99:88:
a5:4a:75:c9:75:b5:47:a3:3e:96:be:0f:d9:5b:52:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:0A:A7:E9:EF:4A:EF:C7:0D:C9:0D:8E:39:05:F9:F6:07:C9:67
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CC2E68562DB611EDAA3711ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:16:9b:7b:18:63:0a:0f:5d:20:f4:88:91:27:0e:a5:b3:4f:
09:71:0c:a1:a2:a6:23:96:5a:7e:01:89:f7:47:fc:18:f8:6b:
fe:fa:90:ad:f1:01:2e:01:ef:a5:89:53:e7:d8:2a:5f:02:52:
8a:1e:b0:65:7f:cc:31:60:4a:62:91:da:a5:8e:1a:26:4c:06:
9e:ce:c1:32:c1:5f:3b:ce:c3:5d:a6:57:7a:1b:bd:42:64:b5:
ba:0f:c5:c4:f5:e0:ad:52:0e:6f:fd:21:94:aa:67:8a:ca:c5:
48:01:9d:e7:f0:e3:75:75:89:70:de:de:f4:c1:34:d6:e5:93:
45:9a:55:58:b7:cb:d8:7f:fc:19:41:ad:0e:db:dc:50:a3:10:
03:18:61:50:29:19:b6:42:a9:69:9c:20:d5:5a:10:e0:98:d6:
c5:2b:f9:52:0d:92:76:24:fe:0d:8f:86:e4:5a:c2:53:50:94:
69:2f:58:02:91:77:0a:0a:05:85:18:bd:c3:f0:80:cc:e3:1b:
de:94:2b:9f:3c:f6:47:94:30:ad:ae:8d:d7:c8:02:38:4e:6e:
4e:1c:7b:05:fd:55:9c:3b:2a:08:94:a0:0f:93:1f:0d:1c:6a:
54:ea:de:24:e3:6b:a7:34:1b:d8:7a:c6:88:d0:51:1d:51:d7:
69:cb:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org