Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/C883D042D4F611ECB13C62DDF1222468.roa
File: C883D042D4F611ECB13C62DDF1222468.roa (raw, json)
Hash identifier: YrQw6GhZ/YKlws+eCQpPkp3TQNe5VD7W/LxVE51F5rs=
Subject key identifier: BC:3E:3B:31:47:3C:F3:D0:CD:04:63:50:8B:0F:C1:C9:36:53:F9:B8
Certificate issuer: /CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Certificate serial: 06
Authority key identifier: DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/C883D042D4F611ECB13C62DDF1222468.roa
Signing time: Mon 16 May 2022 09:01:33 +0000
ROA not before: Mon 16 May 2022 09:01:29 +0000
ROA not after: Sun 31 Dec 2023 09:01:29 +0000
asID: 329012
IP address blocks: 102.218.18.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Validity
Not Before: May 16 09:01:29 2022 GMT
Not After : Dec 31 09:01:29 2023 GMT
Subject: CN=628212ed-70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:89:54:a7:f1:96:4e:ae:6b:85:e9:ca:e7:
a3:52:34:98:9e:b9:2b:09:57:6d:f8:be:c1:1b:f4:
5d:dd:e9:53:58:9c:c2:85:ba:d6:a5:b3:54:bf:cf:
e0:d3:3d:03:e3:db:b4:1d:2d:05:3e:6f:e0:3b:47:
20:54:5c:2f:37:8d:22:42:71:44:dd:42:a7:bf:f3:
4a:f9:93:71:60:01:b4:3d:86:f0:9c:de:de:d7:1b:
a2:09:4e:71:2a:3e:65:af:43:ce:8a:a2:90:98:32:
5a:a2:c8:6b:06:53:b1:fc:d0:3c:53:83:31:52:2e:
e1:ca:e4:81:c2:24:51:c0:63:66:ba:6d:d7:24:8b:
33:e5:07:b8:a8:75:66:e9:ae:a5:cc:13:14:7a:3c:
19:83:84:87:8f:8b:2f:2b:ba:d4:6b:5d:89:bc:2b:
a9:78:15:d2:b0:59:b1:a6:0f:7a:35:bb:b9:b1:59:
00:e3:94:a4:96:40:d5:0f:86:36:aa:2b:b1:8c:34:
bc:37:dd:99:2c:49:02:d8:3e:e2:e3:38:99:57:68:
61:e0:a8:15:e7:cb:b9:9c:b6:2d:77:1c:44:89:a0:
fe:d7:0b:45:29:2a:cc:e0:53:33:cb:90:61:f5:6e:
f5:67:a9:8b:9c:96:ff:3e:74:e4:99:d4:3c:3c:d4:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:3B:31:47:3C:F3:D0:CD:04:63:50:8B:0F:C1:C9:36:53:F9:B8
X509v3 Authority Key Identifier:
keyid:DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/C883D042D4F611ECB13C62DDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.218.18.0/23
Signature Algorithm: sha256WithRSAEncryption
92:76:21:97:20:af:2f:0b:b3:5c:03:e5:36:09:37:e3:c9:9c:
de:81:8f:9e:f2:f0:4e:13:d9:56:46:24:b7:b0:63:39:17:43:
88:a9:36:13:d1:41:93:c8:30:93:0b:8c:c2:39:3a:a2:10:e0:
a9:09:9a:79:78:06:2b:c4:65:93:a7:cc:f0:1b:92:81:85:21:
e1:d4:b1:16:79:33:65:c9:83:e4:55:8a:b4:29:20:98:4b:cd:
e5:36:50:5d:0e:c2:03:ba:de:b5:27:9d:4e:14:fa:f8:fa:50:
8d:36:bb:6f:70:1d:27:e3:58:b2:a3:4f:96:e7:88:c8:ca:29:
16:72:bd:f9:06:fd:f0:4e:62:4a:9b:04:82:fe:1d:2f:a9:24:
dc:c4:22:da:49:19:e7:8a:a9:a9:a0:e3:54:46:1f:18:79:27:
e6:b1:82:96:6c:e2:25:ad:8e:4b:77:87:48:57:95:4b:48:60:
2e:1c:02:22:e6:a6:5d:1f:82:5b:3e:a0:b2:66:56:e5:6e:eb:
c0:1c:d3:a4:a6:ac:77:39:27:3b:6c:4a:dd:17:98:3b:5d:1d:
33:6c:5c:12:c0:e0:a6:ed:68:c7:f7:f9:a6:1c:1c:9c:91:8d:
ba:d2:0d:ae:32:ed:70:90:21:d5:6d:77:93:cb:29:e6:43:6f:
3d:b6:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:46 2024 by rpki-client on console-fra.rpki-client.org