Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F8EEFE66776911EE991A7C7A4AD9E6FC.roa
File: F8EEFE66776911EE991A7C7A4AD9E6FC.roa (raw, json)
Hash identifier: 6Mqe+4LkN/pKWWEuJo+orXJyObLKQKUTYxDWjmgktTU=
Subject key identifier: F2:DE:D3:3F:9F:F2:1C:E9:2A:B0:2D:84:D8:08:D8:0E:66:8E:A0:53
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0421
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F8EEFE66776911EE991A7C7A4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 21:19:13 +0000
ROA not before: Mon 30 Oct 2023 21:19:10 +0000
ROA not after: Sun 28 Apr 2024 21:19:10 +0000
asID: 21859
IP address blocks: 102.177.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 30 21:19:10 2023 GMT
Not After : Apr 28 21:19:10 2024 GMT
Subject: CN=65401dd1-8823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:e1:7c:e0:1f:c6:41:18:3a:a0:bd:3e:d7:
df:42:37:3e:4d:67:f0:a2:6b:ce:0f:17:72:1a:30:
42:e9:81:94:bf:e8:d0:86:98:9c:2b:03:03:5e:9f:
27:1d:e6:4a:5a:54:27:3e:33:63:f0:bd:56:c7:5e:
c9:d7:de:b7:9d:d9:d3:05:60:b3:e1:51:fe:60:80:
d3:d2:7c:f1:95:7b:c8:c7:1d:5b:bc:87:c6:cc:c2:
0e:51:4c:57:4f:0d:46:97:4a:48:60:6d:a7:ea:f6:
1e:f3:ca:d5:6d:6c:da:d0:cb:ee:8c:74:0a:ec:71:
fc:42:5a:16:aa:af:77:29:62:5f:60:85:be:8d:23:
f7:8a:fc:48:dc:8b:74:12:4c:7d:e0:09:f6:ff:1a:
72:5c:f0:36:fd:17:26:ed:91:05:f8:cb:33:1e:14:
b8:12:ff:7f:92:cb:ac:02:3d:f1:01:68:7f:38:8f:
46:57:76:b7:1c:2e:94:03:1d:9c:aa:56:52:58:b4:
63:a0:65:68:36:2a:88:de:f5:e8:47:68:1f:11:53:
15:b2:cf:43:77:f9:c4:8a:51:25:60:b5:71:d7:c1:
a8:09:39:68:aa:e5:6e:1f:e3:64:b0:3e:85:55:12:
7b:3d:27:fa:f2:8f:88:11:76:21:27:54:2c:3b:fa:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:D3:3F:9F:F2:1C:E9:2A:B0:2D:84:D8:08:D8:0E:66:8E:A0:53
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/F8EEFE66776911EE991A7C7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:01:4c:ac:8f:a2:4c:eb:3a:cf:2f:4a:a1:82:f2:39:ce:8d:
99:09:f7:56:30:6e:e0:f2:9f:1f:d6:b8:bc:b7:1a:08:32:01:
3d:a8:bd:65:41:68:92:8c:5b:65:58:b7:5f:f2:3c:bc:e3:af:
e6:61:11:e7:56:4f:a5:5b:ba:5f:75:6f:9b:7e:ba:4b:29:fd:
93:f1:66:fa:f5:b0:2a:9c:04:db:09:be:48:e4:2c:2c:60:bb:
8d:d1:a9:2a:7a:99:c7:e9:0f:5d:60:c2:bc:87:da:31:37:1c:
f5:aa:09:a2:05:74:66:db:99:3c:03:12:9a:b2:81:40:05:cc:
9b:6f:0a:c4:78:f1:06:e7:d6:65:55:72:ef:80:f2:b5:da:fb:
43:64:1a:d3:24:d5:79:23:30:d7:34:17:9b:77:a8:72:ea:b1:
f2:47:c0:15:7b:34:f2:cc:91:01:2a:53:d4:7b:c8:eb:31:61:
76:08:36:53:90:bd:05:54:e5:ed:ee:a3:8d:6c:de:83:0a:6c:
e8:48:76:4d:c8:7b:55:50:6c:98:35:e1:81:83:95:55:8b:ba:
73:c6:62:81:37:ae:c4:79:4b:79:19:db:c9:51:00:56:71:27:
c5:97:d1:23:85:0f:f9:2b:59:00:6a:7c:92:64:7c:0b:28:16:
e5:7d:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org