Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0E3CFC3ADA4811EB9362C56FF8AEA228.roa
File: 0E3CFC3ADA4811EB9362C56FF8AEA228.roa (raw, json)
Hash identifier: /troi+Dhbgz/p/fSIRTN1DTAJaPK4aDs30vTHYOVIUM=
Subject key identifier: 24:4B:6B:9F:62:BB:09:DA:06:B9:94:F4:72:F2:70:F3:46:B0:2B:70
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0439
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0E3CFC3ADA4811EB9362C56FF8AEA228.roa
Signing time: Thu 01 Jul 2021 08:40:58 +0000
ROA not before: Thu 01 Jul 2021 08:40:53 +0000
ROA not after: Fri 01 Jul 2022 08:40:53 +0000
asID: 40676
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 1 08:40:53 2021 GMT
Not After : Jul 1 08:40:53 2022 GMT
Subject: CN=60dd7f9a-6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:18:c5:95:fe:a8:ff:cd:3d:b3:d8:a8:24:
db:94:93:3d:69:cf:f5:15:9a:e0:48:10:bb:b3:19:
46:30:b2:07:c0:b1:1c:fa:a5:96:21:7f:eb:40:f5:
f5:8f:20:93:3c:0a:0a:2e:d3:b7:45:ff:88:47:c5:
d1:fe:de:aa:0a:ba:2a:eb:b6:2f:dc:87:e7:d5:8a:
30:2a:dd:dc:38:3b:b1:18:03:57:2e:fd:62:cf:95:
ff:e5:8e:3d:6a:8b:11:b1:fe:26:b5:10:6f:b9:b8:
71:00:fa:b9:a3:88:cc:a8:fb:bc:23:ff:4d:d5:3c:
b5:bb:00:8f:52:1a:be:28:64:3a:91:e0:3b:e3:2a:
37:b9:74:24:b1:1e:22:4e:33:20:69:90:f2:78:78:
d5:2a:12:01:11:73:39:dd:e1:5c:df:be:18:c9:0c:
a4:cd:82:f5:df:cc:e9:b8:eb:de:25:0e:14:75:43:
1f:4c:a9:a6:4a:76:7c:f9:bd:5c:0f:d2:61:8a:c6:
db:4e:69:56:13:b7:1c:46:5c:74:44:f2:54:68:06:
99:cd:81:fb:fd:1c:51:0d:b7:28:13:e3:a2:d4:ed:
ff:b1:b3:02:fe:3b:c2:af:1a:9a:07:31:9a:90:39:
d3:7d:e7:a0:1b:a4:9d:1f:5c:e3:8e:7f:dc:c0:33:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:6B:9F:62:BB:09:DA:06:B9:94:F4:72:F2:70:F3:46:B0:2B:70
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0E3CFC3ADA4811EB9362C56FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:a0:f4:2e:a3:4f:51:bf:53:88:cb:53:70:95:b3:19:85:50:
ab:4c:fa:95:96:e9:c1:91:59:90:2a:50:29:30:05:dc:46:1e:
74:22:dc:d5:c9:51:93:f0:e2:a3:80:e6:a0:46:18:8c:1f:5b:
bf:cc:ef:27:e3:62:cb:3e:d7:d1:66:96:b7:59:4e:db:97:0d:
a6:4a:fc:94:ee:86:e9:cb:63:45:3c:04:91:9f:a6:cb:e7:48:
7a:59:6a:d5:58:58:f0:33:d2:66:8b:d7:ed:f9:10:77:5b:b9:
4e:20:0e:21:f0:d1:6c:a1:78:6b:a3:b9:67:47:27:de:92:a2:
4f:39:51:4b:e9:44:1f:94:33:df:56:7d:83:f2:e8:5c:8f:2b:
64:72:7b:0d:6b:bf:f3:be:d8:59:ca:26:66:e2:e6:ea:d7:26:
1c:44:a7:43:48:4f:56:ae:92:bc:17:61:01:bd:0a:2f:ce:5b:
00:b6:9b:d4:88:21:69:8d:9c:9c:dd:67:af:94:92:9f:68:ef:
b1:ad:38:29:c9:a1:3b:1c:75:31:a2:be:28:71:0a:1d:63:9d:
ef:2a:17:b7:eb:fe:ff:69:b6:5f:ec:47:2b:8e:82:0f:5a:fb:
c0:40:50:c0:b4:d0:77:99:d3:95:75:ad:59:62:c6:a9:09:53:
0d:04:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org