Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EFB4F3F4387C11EE874A97174AD9E6FC.roa
File: EFB4F3F4387C11EE874A97174AD9E6FC.roa (raw, json)
Hash identifier: WK0/lpRk4qOHK9k3n1KfcKL7+BufqsyTuIysiy2jXqM=
Subject key identifier: 7A:19:78:C1:25:BA:2B:5B:33:00:A6:BB:5D:2E:3C:BA:E8:CC:25:15
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 03B7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EFB4F3F4387C11EE874A97174AD9E6FC.roa
Signing time: Fri 11 Aug 2023 19:26:14 +0000
ROA not before: Fri 11 Aug 2023 19:26:11 +0000
ROA not after: Wed 01 Nov 2023 19:26:11 +0000
asID: 21682
IP address blocks: 102.177.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 11 19:26:11 2023 GMT
Not After : Nov 1 19:26:11 2023 GMT
Subject: CN=64d68b56-f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:bf:49:8a:75:00:10:e4:ca:1c:e0:56:21:
25:01:47:2e:7c:74:83:40:48:d0:78:aa:83:e1:f9:
f1:65:fa:30:e4:fe:fc:ac:d9:55:1d:38:d4:0c:1d:
13:b9:55:94:9a:18:12:20:d0:fc:81:69:0f:f2:5f:
f6:15:ff:7c:5a:ab:43:42:46:0b:e3:46:34:d7:0d:
ce:04:96:a8:d2:b0:6b:fa:95:2f:27:60:9c:0e:0d:
36:d5:0c:06:39:6c:66:75:fc:01:d9:a7:cc:65:de:
5a:a3:79:50:03:88:0b:7e:2b:a0:26:6b:27:cd:63:
ee:26:bd:2a:ae:da:2a:eb:ef:45:b6:51:2e:12:2a:
17:df:94:2e:b8:f5:77:0f:8c:1c:55:0e:3a:5b:56:
44:0a:87:c5:6d:e8:8b:ec:93:f8:77:5e:c0:bd:06:
49:c7:03:ed:0a:a9:51:63:08:f9:90:27:7a:9a:c4:
85:d0:b2:ea:0e:f2:d8:aa:93:36:45:bd:17:59:7d:
f6:ae:17:96:ae:c0:08:19:a4:b6:00:a6:55:fc:c6:
8f:64:e0:0a:bc:bf:99:f6:db:37:e4:47:9a:23:92:
cb:c5:b2:9c:52:fb:52:f1:a8:26:a8:da:56:60:df:
16:fc:7a:02:75:a2:64:4d:07:b3:43:20:5e:b9:3f:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:78:C1:25:BA:2B:5B:33:00:A6:BB:5D:2E:3C:BA:E8:CC:25:15
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/EFB4F3F4387C11EE874A97174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.186.0/23
Signature Algorithm: sha256WithRSAEncryption
10:a4:c3:61:af:71:1a:a1:1f:bb:fa:07:1b:aa:b9:5a:42:87:
f0:81:9b:ed:3f:57:a4:da:8f:81:7b:c2:fa:6e:52:4d:e4:22:
b0:0b:f8:7e:d4:5f:5c:78:c4:ad:11:13:d1:6a:4c:57:39:58:
34:a4:44:8e:ca:33:77:40:f6:a8:71:5c:36:35:df:9d:22:6f:
1b:0d:11:7a:1e:0b:b2:97:80:73:ad:9d:65:4c:4e:66:3d:c4:
ae:20:18:e1:8e:50:5e:db:a3:41:e8:ab:76:e5:b9:8f:b5:1c:
45:79:94:01:ed:80:79:cb:7b:28:7a:96:58:5b:40:9c:fb:19:
b9:1a:7c:45:64:58:20:61:ae:0c:d6:64:60:2e:ba:16:b5:b0:
c9:6f:48:d2:23:cf:8f:bd:1c:fc:c6:1d:2c:7a:06:d5:5f:73:
8b:67:b6:4d:eb:8d:c3:7e:ca:1b:a7:ef:cc:f4:2a:27:29:c5:
ce:e4:7e:2c:b1:cd:8e:3a:78:fa:fa:e4:d1:4f:e8:99:2d:31:
9e:f4:e6:ce:fe:35:cf:24:71:01:4f:b6:0a:d2:12:9f:83:fd:
cd:b4:17:c2:aa:c0:a9:73:60:78:53:fd:0d:64:23:fb:03:73:
85:80:69:33:34:55:f1:47:13:4a:94:05:4a:3a:41:de:73:82:
5d:db:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 02:03:12 2023 by rpki-client on console-fra.rpki-client.org