Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/4B9BEA641D6311EDAFDD178BF1222468.roa
File: 4B9BEA641D6311EDAFDD178BF1222468.roa (raw, json)
Hash identifier: 7aSC3z7PyQjTnL7uSM66U2b1ScPbySVvT8fHfOiwIVg=
Subject key identifier: 04:47:D0:38:CD:30:FA:61:54:F0:91:FB:98:02:80:E0:9E:40:E3:C3
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 08
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/4B9BEA641D6311EDAFDD178BF1222468.roa
Signing time: Tue 16 Aug 2022 12:59:43 +0000
ROA not before: Tue 16 Aug 2022 12:59:39 +0000
ROA not after: Fri 31 Mar 2023 12:59:39 +0000
asID: 25818
IP address blocks: 102.64.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Aug 16 12:59:39 2022 GMT
Not After : Mar 31 12:59:39 2023 GMT
Subject: CN=62fb94bf-c31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:21:1b:20:af:1d:6e:c4:79:3b:22:48:13:
81:da:ef:31:a0:0a:a6:e1:2f:5e:54:af:92:0e:fd:
b7:77:36:7e:f6:b6:08:42:d0:10:ed:79:90:29:eb:
53:4f:7d:b1:29:12:24:b2:06:de:64:bd:d2:19:16:
ab:f3:e2:9b:33:62:2d:77:34:b4:05:33:8d:dc:95:
44:24:c1:49:2b:b3:38:e2:db:11:cf:c4:45:4c:3d:
60:cd:25:f4:dd:a0:2b:6b:9b:a9:86:97:b0:c8:aa:
46:df:25:f6:44:a7:39:fc:98:0b:6e:cc:7a:95:fb:
34:12:61:2a:e3:f4:fc:70:64:bf:f5:73:3e:a2:ff:
a3:9d:7e:96:43:fa:b9:83:56:22:ab:87:e2:5f:ff:
62:d7:04:d4:63:d1:b4:de:35:0b:7b:a0:03:b1:f9:
6d:3d:7a:0c:21:70:16:13:8b:9a:40:42:87:97:6b:
e7:12:ff:2c:d4:6e:00:b9:7c:d3:e2:6f:f2:87:17:
77:39:34:5f:96:57:07:92:49:b2:bb:a1:26:f1:59:
3a:8c:d1:e1:04:b7:9e:02:a3:88:96:45:97:71:e1:
e0:1a:88:74:1e:0a:95:60:ba:a8:88:e4:51:ce:d2:
d0:2e:de:af:92:12:71:06:ed:80:3e:94:bf:99:3e:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:D0:38:CD:30:FA:61:54:F0:91:FB:98:02:80:E0:9E:40:E3:C3
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/4B9BEA641D6311EDAFDD178BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.64.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:19:66:51:8a:b8:a5:11:28:f3:17:bf:ee:fd:c4:3c:1f:bc:
28:51:a8:63:2b:25:c7:f6:d0:23:73:86:2f:aa:bb:26:93:bc:
d0:9d:97:f4:51:c3:ab:94:f5:f0:c8:c3:9a:b5:21:84:43:48:
0b:ba:e0:92:88:7b:1f:10:0a:9b:09:68:7d:18:61:7c:73:60:
ba:ab:44:73:3a:fe:5a:c3:e7:0b:c1:14:69:a8:07:17:02:5b:
09:61:9f:66:b1:b0:67:2e:e5:31:2d:d3:42:46:ff:2d:bf:b2:
87:04:03:8a:e9:7b:28:c5:c1:27:79:ad:2f:57:38:eb:d2:c0:
be:1e:f9:af:f3:a0:d7:4f:11:c1:cb:07:7f:fc:36:1e:92:92:
80:14:f6:67:ea:35:5f:de:cc:45:7b:d5:53:26:73:81:65:16:
2a:fc:d6:75:2e:b4:f3:99:4a:5f:e2:2d:d9:7e:1c:64:f4:e2:
f3:80:58:78:b9:27:6b:1b:66:4b:78:a8:0e:d3:72:e1:e4:5c:
eb:ca:89:f7:54:70:4a:6a:94:d1:8d:83:32:e5:0e:f0:e0:5a:
d9:e5:ac:4b:58:59:70:6a:40:25:c0:24:84:e5:74:fd:e6:e4:
96:c3:3d:b4:6a:5e:62:ed:ae:d4:dc:e2:d9:2b:ae:fb:dc:f5:
c1:f7:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org