Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/674CDBF8566111EBAE72B70AF8AEA228.roa
File: 674CDBF8566111EBAE72B70AF8AEA228.roa (raw, json)
Hash identifier: dNnPllNIAHmj79usrbSEFbpz2THDIqdu21qnrXpaCAI=
Subject key identifier: 7A:C8:95:EA:7A:E8:61:AA:41:0A:54:4D:F8:6F:57:44:06:53:0D:9F
Certificate issuer: /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial: 02
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/674CDBF8566111EBAE72B70AF8AEA228.roa
Signing time: Thu 14 Jan 2021 12:09:51 +0000
ROA not before: Thu 14 Jan 2021 12:09:46 +0000
ROA not after: Wed 31 Jan 2024 12:09:46 +0000
asID: 328346
IP address blocks: 102.134.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Validity
Not Before: Jan 14 12:09:46 2021 GMT
Not After : Jan 31 12:09:46 2024 GMT
Subject: CN=6000348f-cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:0f:0d:71:b4:24:ea:96:74:6d:a1:34:20:
5a:79:76:06:23:d2:31:fc:b7:00:23:54:d5:8e:dd:
4d:12:0d:1f:df:27:63:7c:d0:4a:0a:ec:c3:04:4a:
e0:c0:af:e4:f5:93:a8:6e:6a:c4:96:22:27:fe:f3:
5a:08:82:53:0c:7b:35:e6:fd:00:9a:36:c7:80:3b:
b1:8c:7f:74:14:ae:6d:a8:7a:d6:25:92:18:85:91:
a5:c1:3c:fd:59:39:7a:6c:e9:d6:76:5d:1f:d3:db:
ef:6f:cc:ad:3b:83:78:6a:2d:0d:ea:9e:8a:89:4f:
f3:c4:e0:ca:72:3c:f4:4f:26:ee:e3:e7:c1:21:c2:
1c:ad:bf:7b:b7:5a:2c:b1:f4:e7:27:ef:99:59:a7:
6d:6c:50:20:a5:1d:bd:81:13:f6:12:cc:cc:eb:51:
ba:6c:82:c3:73:6a:4d:21:59:fd:dd:68:7c:6c:5a:
3a:cf:f9:bd:7c:70:c2:d8:cc:04:aa:5a:ac:c7:f8:
a4:23:0f:08:41:40:c2:77:68:4e:24:a8:35:6e:f2:
80:6c:32:e3:af:82:93:9e:ee:6d:ec:19:28:e5:c3:
bc:59:f1:f7:9e:a6:fc:e3:70:b9:2d:6d:af:a6:6f:
94:37:69:f7:65:c6:71:c6:ab:39:b5:ac:37:d7:59:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:95:EA:7A:E8:61:AA:41:0A:54:4D:F8:6F:57:44:06:53:0D:9F
X509v3 Authority Key Identifier:
keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/674CDBF8566111EBAE72B70AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.134.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:90:46:35:c4:47:77:c1:8f:03:64:f2:ff:0e:aa:f2:d1:a6:
7c:29:68:88:31:98:23:3f:a9:76:47:99:23:de:0a:af:4e:eb:
77:e8:14:55:03:8e:07:57:bc:c8:a3:e2:02:90:80:32:81:08:
f0:71:ec:31:ca:d0:07:b0:51:f5:bb:d2:9c:e1:44:37:e7:9c:
a3:8b:57:aa:67:26:5a:c0:a4:f1:d9:91:d2:be:b4:b5:97:44:
94:cb:11:33:19:21:34:53:f3:2f:9f:64:5c:ef:aa:fb:bf:6e:
59:92:39:51:6a:6d:a0:85:95:62:9f:d3:92:e9:9a:6d:0b:96:
a1:02:a3:95:12:f5:51:be:6f:ee:bd:a0:a6:2b:1e:1e:35:12:
4c:21:7c:14:8d:aa:1a:d5:8d:d7:71:7b:ba:50:81:dd:c0:a6:
3c:ca:bd:98:f9:f3:06:42:1f:13:15:14:6d:7d:5c:41:3c:fc:
a6:44:a9:02:2a:40:b7:98:12:37:c2:98:95:4b:a2:f0:42:c6:
85:9a:ad:f2:2c:20:5f:b7:73:f4:6e:cd:16:69:91:de:94:b4:
aa:44:55:aa:6a:7b:4e:a3:2e:5d:18:38:c1:ad:d1:2f:fc:1e:
f2:78:92:3f:23:12:a7:ea:91:9c:a7:a0:9f:f0:73:9d:94:49:
b4:a7:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 01:58:08 2024 by rpki-client on console-fra.rpki-client.org