Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B1C11D4D85C11ECB5A79087F1222468.roa
File: 2B1C11D4D85C11ECB5A79087F1222468.roa (raw, json)
Hash identifier: endE5VpbSPEPmoUKW3sZ6dhhItviUftHv+PpXsyA12w=
Subject key identifier: 2D:9D:EB:EB:7A:26:84:99:F8:AF:E4:00:9E:47:EC:E8:1C:7A:20:3E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0667
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B1C11D4D85C11ECB5A79087F1222468.roa
Signing time: Fri 20 May 2022 16:44:51 +0000
ROA not before: Fri 20 May 2022 16:44:48 +0000
ROA not after: Sat 20 May 2023 16:44:48 +0000
asID: 135375
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 20 16:44:48 2022 GMT
Not After : May 20 16:44:48 2023 GMT
Subject: CN=6287c583-58fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:96:4e:d0:ce:35:ab:84:1c:f3:c0:8a:10:
82:e3:58:3f:ec:c0:28:ef:b3:2b:43:63:a0:9a:39:
8d:7a:5c:c7:01:ac:6c:cb:f3:6c:fd:ee:5b:af:8f:
aa:31:ef:a4:c0:2b:b4:7e:ca:70:62:d8:1a:d6:9d:
2e:e1:17:cc:83:1b:db:f6:c5:10:a0:bd:72:d6:bd:
95:74:5e:0b:b7:17:99:1c:81:e5:b2:72:37:b0:ab:
3f:48:e8:f3:3b:91:86:ca:27:e5:2c:39:2c:69:eb:
ca:e7:08:bb:9f:78:2d:2e:89:4f:24:0e:7e:35:56:
65:c6:91:70:86:68:c9:39:5a:7d:35:b1:2b:cb:49:
30:8b:ca:5c:ba:04:28:2f:73:41:3f:33:15:96:25:
9e:6b:97:b1:2c:30:ac:a9:f6:12:f4:27:7a:09:83:
98:4b:d6:39:42:7d:6e:61:ff:07:65:e0:82:95:97:
a1:97:99:d6:22:3d:a0:68:a9:06:0a:48:65:3d:c2:
f4:69:9f:ce:8b:9d:67:cf:6b:dc:0e:83:e3:6e:ce:
62:3d:6a:aa:8c:f3:91:3c:03:ee:db:d7:03:8a:ae:
0b:0f:48:f1:4b:ac:a7:d8:4a:f8:23:93:6b:73:1b:
d8:15:73:4f:09:33:bc:61:99:4d:ae:0e:d1:03:fa:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:EB:EB:7A:26:84:99:F8:AF:E4:00:9E:47:EC:E8:1C:7A:20:3E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B1C11D4D85C11ECB5A79087F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bc:d5:a6:5c:04:c2:77:97:43:98:b8:c9:3e:38:19:8d:db:
ef:f0:2d:45:48:a4:74:d3:12:ca:a6:7f:36:61:4d:8a:56:d7:
68:4b:31:de:cc:6f:14:5d:34:39:75:e2:a0:b5:32:42:bd:c4:
28:8b:4e:13:6a:04:83:1f:09:be:18:16:c6:19:a3:6c:9a:2f:
a0:c3:72:63:ba:08:22:2c:80:06:75:0d:65:00:04:98:0a:5b:
eb:73:02:30:99:67:b8:c0:02:f7:b7:87:68:8a:1a:65:31:28:
a4:14:2a:5e:ad:6c:18:5e:c8:ca:f3:33:a4:a5:f5:b1:b6:85:
82:55:d8:6a:b3:a2:76:6c:1c:0a:01:4c:2a:6a:3a:53:9e:fc:
2c:f7:f8:f5:b0:68:3d:e8:32:42:01:c3:e3:25:f8:55:f2:f2:
b8:69:f2:55:bc:10:8c:cb:f2:3b:91:58:66:43:ff:41:32:53:
7d:1e:2a:2d:67:93:e3:f8:44:55:f3:8a:1b:c2:c2:4a:34:07:
ee:6e:8a:c5:f3:38:2f:9c:58:15:21:3f:27:98:c6:9e:55:3c:
81:42:2e:0f:a6:34:d8:e4:1a:64:a8:51:84:fe:2e:6a:be:91:
06:b5:13:d0:87:13:9c:31:e5:d0:68:b2:2a:67:8c:09:f8:85:
e8:b2:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org