Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D54139A669C711EFA730F495762E951A.roa
File: D54139A669C711EFA730F495762E951A.roa (raw, json)
Hash identifier: WiKm3P+m7Ad2q4rwHN91F2/MgyKbj/b02Kb7gCwbXds=
Subject key identifier: C5:45:B4:28:9D:E5:78:3A:B2:88:66:2D:CC:76:DC:10:7B:D5:E8:FF
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05AD
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D54139A669C711EFA730F495762E951A.roa
Signing time: Tue 03 Sep 2024 07:40:47 +0000
ROA not before: Tue 03 Sep 2024 07:40:43 +0000
ROA not after: Mon 30 Sep 2024 07:40:43 +0000
asID: 9304
IP address blocks: 102.177.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 3 07:40:43 2024 GMT
Not After : Sep 30 07:40:43 2024 GMT
Subject: CN=66d6bd7f-9548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7d:35:a0:58:11:cb:af:58:33:36:0e:2e:0d:
4d:c1:04:62:6e:48:2e:5d:30:88:07:bd:ca:8e:57:
c4:53:94:97:9d:84:41:a1:2a:f7:9d:d7:07:38:6a:
35:90:00:d8:3b:8c:d6:e7:ea:86:1f:33:5e:b6:cd:
0a:c0:0f:c7:06:b8:70:ef:f9:50:ff:3b:02:a4:3f:
9e:02:72:f7:f5:b2:b7:6d:70:ec:0b:23:7f:12:1b:
33:0e:75:20:e5:5a:79:7d:8a:5a:e5:f7:ea:3b:eb:
9f:87:9e:c7:e0:ad:c0:ee:4a:7a:59:c7:49:e5:cd:
0f:2b:c5:3d:ef:02:69:75:04:70:a3:82:cc:ef:75:
6d:84:9f:34:c9:a3:53:9c:f4:06:95:10:ee:88:4d:
97:88:c2:de:7e:a6:e9:83:af:9d:55:75:2b:e9:ba:
df:bf:06:eb:0d:97:dd:8f:6b:e6:27:04:31:3f:44:
c3:06:7d:3f:4d:e7:91:48:1c:26:3d:a5:10:5a:0c:
e6:ee:35:ef:b7:8c:93:f9:fd:d4:23:27:9f:c7:2a:
3b:db:d1:de:1d:86:f9:96:33:b0:20:6d:28:97:2c:
0c:83:ce:20:75:ee:d3:c6:e0:b8:30:67:da:51:2d:
5d:dd:ba:21:9d:32:2e:4b:89:7f:e0:c0:86:0c:98:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:B4:28:9D:E5:78:3A:B2:88:66:2D:CC:76:DC:10:7B:D5:E8:FF
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/D54139A669C711EFA730F495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:16:bb:0b:47:2f:80:6e:8f:5e:f0:87:cf:db:f9:85:cd:3b:
26:5d:39:33:83:b0:b5:12:70:23:14:f9:cf:8e:a8:7e:df:5a:
fc:1f:70:82:6f:41:2f:f2:8e:dd:93:57:f1:c0:5d:a7:be:58:
b0:50:14:40:ec:e4:12:3f:d8:78:90:eb:47:db:95:75:58:2f:
0e:fb:d7:23:21:c4:94:24:39:e2:92:d8:03:d6:89:3a:3a:1b:
59:4b:b2:57:3c:0b:43:2b:3b:e1:16:63:0a:8b:17:7b:5a:ae:
ae:f6:f3:d5:5e:b4:1a:b9:1a:40:56:16:f5:fc:19:50:e2:bd:
2c:1d:ba:c9:83:6c:8b:23:a0:00:11:84:91:05:ec:2e:67:6c:
14:8d:73:7f:0d:01:e3:1e:66:23:47:e8:d5:91:58:8a:f3:30:
79:f3:c0:7a:23:38:68:9d:9e:0a:50:a7:a9:54:42:6c:a9:d9:
94:a4:d6:0f:63:94:4e:f8:ec:b6:28:f4:06:8c:11:52:84:1e:
27:39:75:8d:3d:5b:7b:40:6a:9e:1e:d6:55:a1:1c:2d:ea:5a:
b3:84:0c:9f:bd:d5:1a:43:e0:73:a4:69:bd:d1:13:f8:e9:a6:
e1:64:5f:6e:9c:1b:1d:56:15:5f:00:ed:65:48:ec:38:df:ec:
a5:50:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 04:45:08 2024 by rpki-client on console-ams.rpki-client.org