Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C0A8C48700511ED83D333F3F1222468.roa
File: 1C0A8C48700511ED83D333F3F1222468.roa (raw, json)
Hash identifier: ntM0bfYj6lrb1sj9EoA8+SPQfhvRPdZqunKbvxZONYw=
Subject key identifier: E8:CC:A6:32:8B:53:6C:44:CD:27:B3:44:C5:31:D4:F4:76:88:3E:E4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 091F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C0A8C48700511ED83D333F3F1222468.roa
Signing time: Tue 29 Nov 2022 16:44:37 +0000
ROA not before: Tue 29 Nov 2022 16:44:31 +0000
ROA not after: Wed 29 Nov 2023 16:44:31 +0000
asID: 205361
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 29 16:44:31 2022 GMT
Not After : Nov 29 16:44:31 2023 GMT
Subject: CN=638636f4-be2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:30:81:7b:7a:d9:d9:2f:4a:0b:d1:33:fe:
e1:8c:f3:41:c3:f1:5d:96:28:87:60:5d:93:bb:6f:
57:0a:01:dc:aa:af:e8:56:01:05:c6:70:33:c0:53:
a4:9f:98:ee:e8:cb:49:a2:5a:51:fc:eb:e6:16:11:
8d:80:c9:73:4d:3e:44:27:d9:89:29:2f:e6:16:1e:
5d:f5:d5:30:44:67:85:30:14:cf:6d:c5:f0:5e:c2:
e7:ad:54:db:b9:38:fa:d4:e7:38:26:f8:39:8a:1d:
a0:b1:8d:60:a1:b7:99:15:25:dd:ff:c4:00:d5:3c:
ca:f0:47:d7:7a:55:84:8e:5d:56:e4:a4:46:c7:99:
e2:c6:00:08:ef:f6:37:05:8b:2a:7a:91:7b:3e:9e:
7b:e1:78:5d:23:a3:f4:19:a0:1d:cc:63:67:f3:b1:
0a:d9:01:92:f4:c4:1b:84:d9:6e:ac:a6:2b:92:8e:
c9:0d:2a:4e:50:40:84:a3:f9:c8:be:2d:3e:65:29:
de:c0:78:ca:63:8d:02:3a:e6:0c:f3:1d:3b:dc:a4:
6b:75:9d:33:56:7a:81:02:28:91:12:91:f2:1a:43:
1f:0a:f9:b8:a6:d9:95:c5:23:ce:54:2a:a5:a2:3f:
c4:18:ca:d6:4d:62:4d:bf:fb:9b:b0:93:99:6e:84:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:A6:32:8B:53:6C:44:CD:27:B3:44:C5:31:D4:F4:76:88:3E:E4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1C0A8C48700511ED83D333F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a0:e0:4e:c0:08:1f:2f:dd:49:f1:49:cc:96:22:b1:28:dd:
2f:b7:22:6f:f7:d9:61:4c:70:d3:d7:be:af:2b:5c:66:b7:bb:
9d:02:d1:3e:90:15:a3:bc:0c:ba:c3:f0:13:91:c7:10:23:9e:
67:29:10:c2:45:47:bf:8f:46:ee:63:72:5d:da:84:0a:c7:a9:
76:92:b3:c7:40:eb:82:a9:21:81:c6:95:de:29:e1:7e:cc:b8:
62:5e:02:91:e4:f0:58:b3:00:f4:17:7f:48:12:3e:3f:d2:b3:
b1:fb:07:cd:da:71:1e:c2:8a:4f:ff:e9:dd:ad:aa:f8:44:21:
f3:88:7e:e6:69:f0:38:a3:e8:a6:46:7a:51:e6:fc:1c:bb:31:
61:11:f8:db:c1:ec:83:c7:68:85:a0:fc:34:21:e6:a9:e2:7f:
4a:11:2f:cf:65:ed:e4:9b:7a:48:97:0f:cc:74:d1:65:c9:23:
94:ac:09:f2:54:33:97:e2:42:11:4a:37:36:97:04:55:02:4f:
47:38:ec:42:8d:b1:52:92:2a:69:d2:60:18:ca:dc:8a:9c:ed:
ec:27:f6:d4:ee:00:f1:ed:50:02:d3:aa:a2:af:99:67:ab:49:
8b:f2:b3:27:13:ff:b0:25:c1:59:7e:28:96:ba:6f:18:7f:de:
5c:14:09:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org