Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/7ADED09EF9F511EB9D812631D8A014CE.roa
File: 7ADED09EF9F511EB9D812631D8A014CE.roa (raw, json)
Hash identifier: 84w0ymQfQEZ0rhMiVd+gW7rlZ8RZw0fEm/5SXFrHX+c=
Subject key identifier: B3:CD:A0:68:4E:F4:BD:25:A8:27:F4:D2:96:43:C5:1B:DD:A9:DC:F9
Certificate issuer: /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial: 02
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/7ADED09EF9F511EB9D812631D8A014CE.roa
Signing time: Tue 10 Aug 2021 16:11:08 +0000
ROA not before: Tue 10 Aug 2021 16:11:04 +0000
ROA not after: Thu 01 Jun 2023 16:11:04 +0000
asID: 328650
IP address blocks: 102.36.136.0/22 maxlen: 24
2001:43f8:1400::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36818C8AF
Validity
Not Before: Aug 10 16:11:04 2021 GMT
Not After : Jun 1 16:11:04 2023 GMT
Subject: CN=6112a51c-811c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:60:28:2e:e8:9b:42:e8:5f:44:88:df:4b:
f1:c9:c4:9c:62:d0:53:cf:3c:8f:ad:de:9c:b1:80:
a6:95:cd:0c:cf:47:01:bd:a9:88:97:87:e8:74:ba:
2e:5f:0d:6d:e2:41:f6:91:07:17:e6:d6:3d:8b:2f:
ff:2c:a8:eb:6b:2a:88:9e:a0:fb:a7:07:8c:56:0a:
12:07:59:ce:38:e8:ef:0f:5c:c5:98:1e:d5:a2:7a:
31:36:fa:57:01:3f:95:c8:b0:de:ae:b2:49:fc:a1:
73:4b:15:d0:dd:73:6d:55:fa:a8:5f:7e:a3:9b:98:
8d:05:84:4a:07:e8:ef:e1:fb:63:7e:f1:c6:66:29:
f1:97:db:02:cb:f5:f4:42:51:ba:26:3e:4c:4c:00:
20:be:b8:8e:f7:44:c3:0d:2d:b9:15:a0:5f:56:1c:
a2:55:06:3f:56:76:38:f8:bc:08:e0:af:62:21:35:
34:44:f7:6e:c1:87:c8:2a:4f:74:35:3a:17:5e:d7:
49:da:78:38:88:39:ba:98:df:37:45:56:cc:05:dc:
b8:4e:77:44:29:72:50:72:d9:84:59:7d:f4:c5:1e:
cb:00:68:a0:9f:d0:9b:c3:a1:29:ba:2a:bd:71:e9:
4c:49:ed:8c:eb:3d:b1:cd:1f:fc:e3:90:05:08:83:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:A0:68:4E:F4:BD:25:A8:27:F4:D2:96:43:C5:1B:DD:A9:DC:F9
X509v3 Authority Key Identifier:
keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/7ADED09EF9F511EB9D812631D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.136.0/22
IPv6:
2001:43f8:1400::/48
Signature Algorithm: sha256WithRSAEncryption
5b:d9:39:60:f4:fd:7e:b2:c0:52:dd:06:5b:a0:f9:85:04:e6:
6d:c5:d1:b6:8f:5e:95:11:f8:3f:c8:bf:f6:af:bc:bc:89:20:
9d:91:ec:0e:9d:5e:ed:47:45:7f:e3:04:16:11:5d:1f:af:1e:
b4:38:58:50:af:d3:7f:1c:9a:cd:58:83:4e:75:3e:d4:70:bc:
41:4c:61:db:df:67:c0:8d:d8:dc:f9:0d:9a:14:64:d9:61:d0:
80:3e:46:dc:6c:30:e7:65:fe:c2:e3:81:04:83:fa:4d:6f:88:
38:9b:66:fd:eb:78:11:48:c9:90:4a:98:42:ad:56:65:d5:ef:
73:7f:e5:71:a5:5f:d2:ea:cc:52:b7:91:ff:04:5b:1b:88:f5:
3e:bc:6d:ed:7f:a2:87:d6:85:fb:60:f3:b7:ff:a5:5b:ea:3f:
d9:24:2c:19:ff:c3:8c:24:57:a3:85:54:e2:df:50:3c:b1:20:
cc:62:a5:19:9c:ad:bd:2f:b5:dc:03:6a:8d:28:94:9f:5a:f8:
b0:36:aa:67:7b:f1:1d:0d:f2:ea:ee:6a:cf:18:c6:a7:7e:42:
bf:56:df:dd:a7:2e:02:8c:37:0e:80:36:c6:95:04:8f:8e:f2:
c3:56:40:7f:b4:1f:9a:1f:2c:e5:ed:89:c0:03:b3:04:58:64:
09:40:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:48:54 2025 by rpki-client