Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/7C92D04E9BC811EEA9FFB580D25BE465.roa
File: 7C92D04E9BC811EEA9FFB580D25BE465.roa (raw, json)
Hash identifier: Gr9J+OlJGPbmEAWdb4ETUf2d1dJTdXGJeQ6R0Pw/mSY=
Subject key identifier: AA:F2:43:88:97:E5:3A:F8:FF:11:93:99:4C:D1:5C:70:28:7A:EF:C3
Certificate issuer: /CN=F3686B65AF/serialNumber=B8AD9011EF3B28987B5CE230F1E275547330396A
Certificate serial: 06
Authority key identifier: B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/7C92D04E9BC811EEA9FFB580D25BE465.roa
Signing time: Sat 16 Dec 2023 04:06:28 +0000
ROA not before: Sat 16 Dec 2023 04:06:23 +0000
ROA not after: Tue 31 Dec 2024 04:06:23 +0000
asID: 6939
IP address blocks: 102.216.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686B65AF
Validity
Not Before: Dec 16 04:06:23 2023 GMT
Not After : Dec 31 04:06:23 2024 GMT
Subject: CN=657d2244-1d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:a9:cb:9a:fd:bb:94:a7:c5:ce:06:5b:03:
c9:de:59:76:b4:04:f2:23:54:a3:a4:33:2f:3c:f1:
40:30:f9:cf:67:1f:2c:cd:e7:9b:7a:f7:03:81:ad:
a9:32:38:e9:b3:74:cc:fa:bb:60:e9:f5:a6:3c:ff:
a9:f7:d1:e8:68:df:7b:af:d1:5e:53:bf:20:d7:4c:
24:6b:b8:77:00:0b:50:0c:eb:cd:b5:b1:e4:e6:99:
2a:ff:5e:3f:8b:0a:8b:67:1f:93:ad:cb:1c:b3:b6:
8c:40:df:80:9b:61:77:3a:57:77:75:37:25:b7:58:
66:25:2e:98:ab:db:0c:49:d1:1d:27:16:11:e5:7f:
a8:b9:e4:a5:d8:d9:4f:2e:30:a0:77:42:8b:63:f0:
76:66:5b:07:bc:ab:6f:a4:c2:5e:dd:d3:32:0b:d6:
f3:32:e4:a7:1f:8e:9e:16:35:96:01:18:54:71:fc:
37:b1:72:65:cb:62:56:67:fb:88:18:89:31:9b:fe:
db:33:cd:7b:ed:87:5d:09:42:22:23:06:6e:aa:3b:
bf:c3:4c:2f:9a:6a:58:e5:01:b2:5c:07:67:1e:a4:
4e:00:80:95:d8:df:d7:ef:6e:25:bd:93:78:87:e5:
97:f4:8e:ee:bf:49:f3:b7:71:d7:7e:47:39:0f:53:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:43:88:97:E5:3A:F8:FF:11:93:99:4C:D1:5C:70:28:7A:EF:C3
X509v3 Authority Key Identifier:
keyid:B8:AD:90:11:EF:3B:28:98:7B:5C:E2:30:F1:E2:75:54:73:30:39:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/uK2QEe87KJh7XOIw8eJ1VHMwOWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uK2QEe87KJh7XOIw8eJ1VHMwOWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686B65/C5F0BEB29A8411EEA702E730D25BE465/7C92D04E9BC811EEA9FFB580D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:63:4b:e5:c4:f7:ae:be:bb:e7:18:4b:0f:92:07:45:c8:b3:
88:f2:a2:86:a4:ea:5f:30:e8:50:bf:50:82:9b:e9:06:66:d4:
3a:07:c5:eb:c4:11:c5:03:35:5e:c1:f2:1a:13:8c:66:5b:13:
5f:ef:e0:a0:91:05:e5:38:8e:62:2c:4d:73:69:b9:d0:9c:7a:
c6:b6:25:6e:2f:82:bd:7c:1c:ef:1e:0a:09:61:02:9a:14:94:
ec:28:3d:5a:7c:61:70:2f:b2:42:28:66:b2:b5:11:b6:2c:a3:
bc:2b:c3:c8:51:a4:99:1c:ee:52:7e:34:46:62:31:10:f0:df:
00:1b:7e:c9:e7:a9:f7:00:ed:81:39:ec:20:64:2d:17:c4:e9:
30:f0:97:38:92:11:3a:ec:5a:f2:04:60:87:63:de:f6:f1:56:
42:9e:8c:67:6c:6e:ec:3b:26:60:e3:5b:b3:cb:a3:97:83:2e:
a2:cb:4f:de:f1:66:13:81:c5:50:74:79:22:dd:48:b9:26:f1:
f6:7c:f8:0c:9b:a6:7d:0a:ad:26:b0:80:8c:07:1a:11:81:91:
26:5a:c4:f0:08:fb:5e:76:71:bd:b8:0a:61:1d:e5:6b:ab:f9:
c8:1e:c0:a6:8f:9b:09:14:29:77:24:b3:4f:12:bf:8b:62:25:
6d:ab:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:03:28 2025 by rpki-client