Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F23C6A10136B11EF923AF92D017001B1.roa
File: F23C6A10136B11EF923AF92D017001B1.roa (raw, json)
Hash identifier: y4KGFp4xvR/1Hxk7h9AHAJNNw8mRs2o0dfwkZhfNIbg=
Subject key identifier: 0A:5E:3D:82:43:A6:11:39:46:02:63:09:3E:2A:5C:37:26:73:A8:E2
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 04FD
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F23C6A10136B11EF923AF92D017001B1.roa
Signing time: Thu 16 May 2024 10:06:22 +0000
ROA not before: Thu 16 May 2024 10:06:18 +0000
ROA not after: Fri 24 May 2024 10:06:18 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 16 10:06:18 2024 GMT
Not After : May 24 10:06:18 2024 GMT
Subject: CN=6645da9e-4d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:f8:9a:f2:04:e1:d7:eb:04:30:b2:d5:02:
9d:09:89:7b:dc:27:88:e2:b6:6c:15:3c:be:e6:17:
f6:d4:d9:68:73:dc:cb:ee:48:dc:70:16:2b:03:63:
4c:a6:98:2a:89:c2:e0:b2:95:bf:82:7d:82:53:79:
ce:52:fb:7c:a2:a8:e4:0c:44:3c:c5:99:fd:51:56:
31:4e:7c:ff:ef:02:39:52:7e:c0:05:c4:64:6e:c8:
14:85:90:fe:8d:71:23:dd:fb:46:d2:21:b4:58:d4:
aa:a9:c5:70:c7:f6:ef:d6:92:18:27:5f:df:f2:1f:
b2:17:46:3e:e5:e8:7b:e8:a7:ae:e4:8c:ae:96:fc:
60:13:65:f8:46:2f:f3:53:97:8e:3a:f8:74:1b:1f:
09:dd:e1:a1:b0:e3:fd:2d:92:e2:a4:c5:d3:0f:3d:
40:ed:b3:46:3c:2f:24:e0:4f:1c:ef:7f:5d:f7:44:
c4:f2:b8:8e:33:7a:74:83:d9:39:e8:77:2d:79:06:
82:f5:17:41:df:ea:af:c0:8e:02:87:7c:bd:29:59:
64:f0:35:18:1d:00:27:0f:cd:15:a3:70:66:30:13:
db:3e:e1:6f:49:6d:57:93:1e:5a:54:a3:0d:4e:46:
32:94:65:74:4c:77:1a:66:02:e8:85:75:47:4d:dc:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:3D:82:43:A6:11:39:46:02:63:09:3E:2A:5C:37:26:73:A8:E2
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F23C6A10136B11EF923AF92D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2a:ae:38:70:58:d7:1b:23:5e:a7:f2:e9:2b:ea:a2:f5:e1:
ee:69:e5:70:c9:c5:a9:60:5a:34:91:71:01:40:68:e8:30:6c:
c2:cc:ba:56:30:72:83:f9:66:e4:e3:4f:21:7f:22:d3:b1:ee:
ca:94:68:09:90:68:79:83:ec:29:2b:db:94:60:60:9f:26:3b:
ce:bc:60:f1:2d:df:da:ec:46:88:3e:71:29:a0:01:68:98:77:
6e:f2:60:c1:6d:dd:7c:64:8d:12:3f:b7:58:6b:a9:5c:a8:8e:
21:a4:f0:d1:f9:82:77:4b:89:8d:a0:3f:3d:0c:17:88:0e:98:
a6:06:74:f8:34:22:af:0e:42:c3:4f:c6:c7:9d:9e:4d:dd:11:
7f:c0:f4:17:e4:bc:da:61:d8:2e:b0:6f:f5:8e:2e:90:07:68:
f0:f6:51:b1:c8:44:16:7e:92:92:26:0a:73:4c:89:dd:86:b9:
aa:76:ae:d9:81:c1:56:db:e4:c4:0f:a9:d3:7c:e3:af:bf:67:
50:ef:77:34:03:d7:4a:21:79:e3:12:41:b9:68:97:d0:32:e0:
04:d8:4c:bf:c9:a9:14:01:3e:9c:1a:0c:8b:8d:ad:16:43:b0:
50:79:53:97:14:d3:c5:4d:4b:b4:f3:fe:0e:49:7d:a7:82:bd:
b3:4b:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org