Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E25007B6800211EF85589C49762E951A.roa
File: E25007B6800211EF85589C49762E951A.roa (raw, json)
Hash identifier: C6zBXtCwvNW7ZzZnbZ5pY7JzTegzQJPrwjzOgh+PFtc=
Subject key identifier: 1E:19:CB:3A:13:57:5A:C7:34:A0:96:39:D1:E1:DD:6D:9A:3A:35:FF
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05DA
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E25007B6800211EF85589C49762E951A.roa
Signing time: Tue 01 Oct 2024 14:38:55 +0000
ROA not before: Tue 01 Oct 2024 14:38:40 +0000
ROA not after: Sun 03 Nov 2024 14:38:40 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:38:40 2024 GMT
Not After : Nov 3 14:38:40 2024 GMT
Subject: CN=66fc097f-264a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:94:ca:a1:42:c4:ac:68:33:ea:3a:85:cf:
1b:ec:ba:8f:aa:95:44:0a:ed:13:94:30:8a:76:42:
91:7a:49:dd:49:c7:df:44:f7:73:0f:81:37:5e:af:
40:c9:33:e7:cc:db:dd:c7:f4:2f:04:5c:e2:19:fd:
ee:81:ec:e0:f8:73:15:6c:26:c1:ca:fd:a1:39:8e:
76:8f:6a:53:61:35:d4:4a:4b:29:7a:42:d9:a3:e7:
2a:83:8a:89:21:8a:de:b5:45:44:ac:b9:c7:97:f6:
af:48:90:b4:6c:19:22:00:38:89:21:c3:30:aa:a3:
c5:37:f8:cc:ce:cc:61:18:ef:74:54:af:34:ee:bb:
f2:62:82:7b:1a:11:96:36:e8:03:40:5a:42:11:15:
fa:87:d5:e7:12:fd:89:1d:2c:df:db:78:96:30:a1:
c8:ce:15:43:04:96:57:04:89:4a:43:e5:3d:40:02:
d3:40:be:28:00:1d:e0:d5:f8:c0:b6:c4:5e:a4:ab:
28:6c:91:b4:10:15:14:d0:ff:83:1c:94:35:72:6c:
b3:2f:b9:e2:d0:14:c5:4e:95:7b:0f:a2:fb:0a:dc:
5e:8b:b2:1e:a9:62:29:d5:8d:7f:5e:58:ee:89:99:
21:17:0d:95:71:f4:3e:9b:73:df:a0:b5:17:32:b8:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:CB:3A:13:57:5A:C7:34:A0:96:39:D1:E1:DD:6D:9A:3A:35:FF
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E25007B6800211EF85589C49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:2e:06:db:da:07:05:6b:b8:e5:cc:30:dd:d5:74:6e:3c:84:
75:4e:df:8e:0e:16:c7:93:46:69:8b:2d:fb:9e:a9:fc:1f:02:
21:86:f9:04:4c:9b:2f:43:d1:4f:f2:c1:7c:96:ef:4a:11:5d:
92:04:fe:75:83:8c:16:d7:a6:a1:bb:f8:64:b0:bb:e1:fa:22:
d3:9f:85:22:62:64:af:bb:98:20:41:16:eb:82:52:00:69:23:
c9:4f:87:73:81:cc:00:58:06:0a:7d:20:25:96:e2:9c:3c:cf:
16:38:84:8d:6b:a7:6d:0e:01:c2:fd:fb:6b:70:a2:a7:bd:36:
69:c1:41:a0:8f:a7:47:ca:9c:96:f3:f6:6b:39:ce:83:98:cf:
87:bb:f2:52:fe:69:a2:c0:4a:15:0b:db:cb:3a:60:d8:ac:92:
7f:a3:13:0c:37:d8:d7:de:4e:41:4e:a7:a3:fe:fa:45:97:f5:
0f:e8:e9:2a:88:0f:57:f3:ac:3c:50:91:7f:76:d8:d3:69:2b:
e5:16:ac:e6:0e:e3:3d:75:3e:97:f3:79:2c:5f:47:94:10:41:
8f:b4:de:06:54:77:ce:a3:83:76:c8:ca:5d:e1:ff:55:77:de:
c7:77:a9:80:21:15:5f:1d:88:30:4f:bd:a3:3b:5d:f7:8c:79:
df:a8:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 05:09:26 2024 by rpki-client on console-ams.rpki-client.org