Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5DE4D6A2DBC11EDAA85EDBCF1222468.roa
File: E5DE4D6A2DBC11EDAA85EDBCF1222468.roa (raw, json)
Hash identifier: 1jA+T6cB8Fp2Tf708QlZ5SgvURJFc6gAw9RarrADT8Q=
Subject key identifier: 70:3E:6B:26:B8:AF:E5:2F:0C:B5:3C:2E:8F:75:B7:CC:DB:AA:31:89
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0241
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5DE4D6A2DBC11EDAA85EDBCF1222468.roa
Signing time: Tue 06 Sep 2022 08:21:25 +0000
ROA not before: Tue 06 Sep 2022 08:21:22 +0000
ROA not after: Mon 31 Jul 2023 08:21:22 +0000
asID: 22724
IP address blocks: 102.177.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 08:21:22 2022 GMT
Not After : Jul 31 08:21:22 2023 GMT
Subject: CN=63170305-a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:cd:50:da:2e:ee:60:6e:a3:09:26:32:ff:
31:96:b2:b1:9b:86:12:c9:45:3c:43:95:11:7c:ae:
00:10:6d:e1:97:01:b3:54:e1:82:db:26:d6:2f:6f:
7c:26:23:d6:3e:c4:5c:a1:a1:50:ec:40:50:58:63:
d2:97:39:4f:e1:ee:d2:fa:c2:14:5b:59:ea:e4:27:
93:7b:4d:fd:a5:b4:31:a9:cd:97:37:d7:de:3a:21:
89:6c:bb:32:03:a4:56:24:41:ba:39:76:bf:0c:42:
db:56:db:8f:20:35:17:73:a7:4f:74:e4:60:f3:31:
d2:90:df:b0:c0:b6:e7:f7:1c:91:0d:34:50:b9:35:
34:80:c6:e1:30:1e:8e:fa:1e:97:4e:89:23:61:29:
64:54:0c:35:86:d7:fd:c8:d7:36:37:bc:a8:4e:62:
7d:cf:88:00:ba:c6:71:b7:65:fb:c6:21:dd:6a:fa:
b3:b1:25:10:d8:76:04:8b:44:11:29:57:d0:9d:10:
45:25:23:c8:cb:7c:9a:ec:a2:d2:ad:f7:3d:f0:68:
58:77:da:7a:56:86:69:9e:27:b8:e2:4a:14:b5:9d:
31:32:55:33:ae:99:fa:b8:33:62:4d:fa:46:6e:31:
a1:68:ac:b7:18:7c:89:8b:94:3f:69:74:55:db:c7:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:6B:26:B8:AF:E5:2F:0C:B5:3C:2E:8F:75:B7:CC:DB:AA:31:89
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/E5DE4D6A2DBC11EDAA85EDBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.175.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c4:82:4c:66:f3:b6:bc:27:1d:3e:34:f4:e0:7f:a2:ef:b8:
a6:9a:b6:4b:ea:64:bd:c9:6f:87:5a:ce:4c:ea:b0:50:1d:54:
b8:d4:31:ee:82:43:36:9e:5e:4f:a4:3e:6e:cd:e8:1a:18:bf:
21:f9:67:45:41:44:56:65:1a:db:2a:6c:81:f6:f9:d9:34:f1:
80:86:e1:a6:ad:6b:27:24:1b:4e:3f:79:e7:90:e2:cc:5a:d6:
f6:c0:63:a6:39:70:86:dc:d1:cf:f6:d8:42:3a:0e:f8:ef:1f:
8a:91:a5:9d:5e:03:27:bb:53:47:f7:15:03:b2:42:6a:25:40:
fb:47:26:b7:3f:73:d9:30:a3:07:d5:b1:88:51:e7:51:75:97:
ec:66:e4:6e:96:4a:50:a5:93:2f:ff:4a:2d:6c:d3:e1:94:77:
5a:5b:cb:6a:28:61:11:62:36:8f:2f:f4:70:fa:9e:61:d4:b4:
c0:a7:17:fd:46:aa:98:d5:c3:14:bf:80:9d:82:cb:54:27:c3:
e2:20:0a:3b:0f:6a:0e:89:f7:41:97:22:c3:ad:a9:89:bb:91:
d6:1b:3b:2c:ef:43:91:77:9c:e5:dc:f6:b8:cf:e3:ca:da:0a:
31:3e:6d:1a:78:c7:96:0f:52:9e:ee:6e:41:0c:8d:4c:60:fa:
7a:0c:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 15:51:21 2023 by rpki-client on console-ams.rpki-client.org