Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F7E733C6800011EFB0ED19BB762E951A.roa
File: F7E733C6800011EFB0ED19BB762E951A.roa (raw, json)
Hash identifier: vszQM7kWakQEtKerDpP2yzRVuLQ3r3PHYddrksjxUik=
Subject key identifier: 80:A8:31:C7:CD:1D:6E:23:44:8F:6F:76:5B:F3:84:6D:CD:67:6C:85
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05D0
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F7E733C6800011EFB0ED19BB762E951A.roa
Signing time: Tue 01 Oct 2024 14:25:12 +0000
ROA not before: Tue 01 Oct 2024 14:25:09 +0000
ROA not after: Tue 08 Oct 2024 14:25:09 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:25:09 2024 GMT
Not After : Oct 8 14:25:09 2024 GMT
Subject: CN=66fc0648-ba4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:27:74:43:38:1b:89:ce:c3:4c:7b:b0:f0:
46:6a:3f:37:74:8a:ab:d1:24:f8:85:1c:94:47:8f:
22:73:a4:f0:ea:40:28:33:26:77:29:47:c9:37:ec:
f2:80:69:45:07:33:07:20:dc:e3:a4:bc:38:40:e3:
12:53:49:1f:f4:a4:35:f6:b2:df:38:56:81:cb:f6:
16:72:7e:1c:33:2f:7a:c9:7d:28:07:b3:5d:2d:84:
c7:9e:c2:00:9c:7a:87:41:04:59:1a:43:27:3f:d8:
3c:82:98:72:2e:57:35:a2:b1:8e:ca:d7:45:cd:6c:
3e:1d:eb:bf:b7:ee:23:5e:18:3d:ac:56:5f:a3:da:
e4:0b:61:a9:80:03:79:51:b4:5e:56:07:01:bc:f1:
9f:37:4e:d6:a8:0a:53:c8:55:be:b0:68:06:dc:87:
6e:df:e3:f6:f1:a8:9b:75:19:7e:f3:e5:e4:51:9b:
e3:92:d2:2f:b9:73:7c:e3:6d:f5:75:08:24:51:b4:
c0:ef:a3:df:60:a6:86:bc:ef:70:23:a1:87:1b:6c:
7f:a1:a7:bb:97:4f:7f:82:14:ea:e4:fc:50:dd:8c:
50:9f:35:6e:a8:d6:09:11:73:21:64:e0:54:90:be:
64:e6:ca:4c:94:e6:b9:1a:85:6e:2b:e7:42:dd:8f:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:31:C7:CD:1D:6E:23:44:8F:6F:76:5B:F3:84:6D:CD:67:6C:85
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F7E733C6800011EFB0ED19BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:11:ec:b4:f2:aa:f5:2b:d4:c2:61:7e:49:9a:1e:ec:49:3c:
cd:61:15:52:7d:4e:76:7c:c4:aa:23:bb:5a:8d:e0:74:59:b1:
24:75:3c:ff:a7:2b:b3:bf:67:8f:b4:eb:f6:30:e0:04:36:51:
cf:86:74:fc:88:08:3e:3f:26:10:5c:a5:21:6f:eb:d2:a5:a1:
98:0a:d7:0b:7d:94:0c:56:d6:4b:07:1e:78:55:11:9c:bd:af:
38:ef:68:ed:73:14:34:61:07:9f:fb:25:41:40:50:55:80:01:
a4:d9:ff:27:51:6c:aa:68:b8:9b:da:66:24:69:57:c0:98:77:
ef:0d:08:0a:d8:4c:73:c3:cc:85:df:6b:65:85:17:65:8d:8d:
d7:86:0a:16:5a:10:9b:bd:04:7b:aa:a5:fd:70:2c:4c:1f:4b:
06:eb:58:81:50:e3:47:ff:04:1d:12:57:f6:07:76:39:9d:7e:
7a:0b:d9:fa:59:ea:c3:f9:4f:2f:d1:4f:27:36:89:07:b6:12:
2a:60:91:df:77:5d:3c:af:c7:c6:64:24:a4:d8:5a:32:bd:69:
af:5e:cd:63:ae:59:5c:67:fc:57:e3:2e:73:b4:5a:69:77:4e:
e6:42:6e:ae:a9:01:14:a0:6f:26:3c:ef:5a:50:96:88:1d:90:
8c:b3:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:32:58 2024 by rpki-client on console-fra.rpki-client.org