Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/D11B3CA063F811EC96E6809A5A40D577.roa
File: D11B3CA063F811EC96E6809A5A40D577.roa (raw, json)
Hash identifier: IRqSY/AJUUNYmX9jRV5EkcLhyyPEuh+Wp+KtDNu8+mI=
Subject key identifier: 0B:F4:7B:61:7B:82:D8:56:D9:84:80:85:F1:B4:DF:4C:FF:68:A9:C7
Certificate issuer: /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial: 05
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/D11B3CA063F811EC96E6809A5A40D577.roa
Signing time: Thu 23 Dec 2021 14:01:25 +0000
ROA not before: Thu 23 Dec 2021 14:01:21 +0000
ROA not after: Fri 23 Dec 2022 14:01:21 +0000
asID: 16509
IP address blocks: 102.221.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Validity
Not Before: Dec 23 14:01:21 2021 GMT
Not After : Dec 23 14:01:21 2022 GMT
Subject: CN=61c48135-8db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:fb:50:3f:6e:df:32:33:0c:6c:77:39:9c:
95:63:77:ee:82:03:8f:76:a3:d2:6c:80:ab:8a:18:
f9:55:bd:c9:43:58:7e:50:74:b5:48:cd:4f:11:c2:
4b:0d:d2:37:e9:3f:60:5d:1a:6e:b7:00:51:75:ed:
38:62:af:ad:8a:01:53:78:84:9b:84:c9:5d:42:04:
e2:a5:6d:a4:f7:4e:2b:b9:56:1a:d5:77:79:06:80:
d8:af:62:11:8a:7b:8e:ff:a1:19:1b:61:85:9f:d5:
9e:a8:36:17:74:46:f0:af:d4:25:97:d1:05:eb:98:
32:f4:1d:41:e8:0e:54:6d:98:50:0f:60:16:56:ac:
5a:08:1e:48:74:a8:57:f1:25:18:f9:07:10:ad:41:
4d:61:98:24:d8:f5:7d:0b:80:08:08:ea:24:f6:a6:
0f:f4:43:36:47:e4:ea:ab:0e:be:6c:50:37:14:df:
51:30:33:0d:a5:08:83:31:96:c1:a3:a8:3a:f2:d5:
87:48:41:1b:4b:b1:36:a5:b5:81:47:52:90:46:12:
ac:15:89:79:7b:d2:33:05:2f:ab:72:c5:38:51:db:
8c:33:5c:4c:cf:63:05:89:f3:cd:1d:29:95:68:2c:
0c:82:39:3a:c5:f6:f1:f6:28:e3:f7:14:ff:79:39:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:7B:61:7B:82:D8:56:D9:84:80:85:F1:B4:DF:4C:FF:68:A9:C7
X509v3 Authority Key Identifier:
keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/D11B3CA063F811EC96E6809A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.221.184.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b0:27:f8:50:ea:ab:33:6c:c8:b6:12:be:4b:d4:cf:c1:9d:
83:d3:7f:ea:40:cb:a1:39:ba:d9:c1:33:ff:6d:97:ca:fc:34:
4b:00:86:9a:73:de:d8:49:95:fd:11:46:58:31:18:9d:74:f6:
94:ba:74:a6:a4:2b:fc:a6:b9:43:3d:f5:be:f5:4e:22:1b:8e:
10:a3:d5:82:04:16:4f:84:93:f7:39:9c:a8:4a:dc:4e:6f:42:
bb:e1:0a:ed:d3:78:85:19:e7:3d:d0:ec:11:6b:07:01:6e:52:
69:5e:ff:01:d5:32:c0:bf:23:49:c6:4b:b4:46:c8:d8:26:66:
00:42:25:97:05:e9:d2:25:ec:a9:f0:56:a3:b1:66:7c:49:a3:
1b:ef:30:3e:e5:f6:a5:38:62:77:e2:a5:90:ec:d2:b7:b5:5b:
7d:e5:96:e3:a0:1c:dc:d5:6a:5d:e9:3c:5e:d6:9c:6e:7d:ea:
42:6f:51:c2:d1:56:2d:34:9c:d8:d7:7b:44:cf:d7:74:17:4e:
6a:bb:d3:d5:f1:2b:60:5d:68:04:b6:0f:dd:4f:a3:99:c5:10:
5b:07:6a:e8:70:62:f7:f1:04:2c:28:b4:9f:13:bf:6b:ac:e2:
5f:5a:02:90:4e:8a:36:2d:b6:06:31:21:a2:51:bc:b1:61:ef:
44:0d:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org