Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B7E1380E60411EA86547379F8AEA228.roa
File: 2B7E1380E60411EA86547379F8AEA228.roa (raw, json)
Hash identifier: HRQFAivzuN7oj4yXqBX+yrolgMCl9MOS/QAXMKUB+7s=
Subject key identifier: FC:F4:84:AB:56:16:FB:71:FA:C6:32:8F:6C:F0:76:B6:93:11:F9:4F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0229
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B7E1380E60411EA86547379F8AEA228.roa
Signing time: Mon 24 Aug 2020 12:20:25 +0000
ROA not before: Mon 24 Aug 2020 12:20:11 +0000
ROA not after: Wed 24 Aug 2022 12:20:11 +0000
asID: 25098
IP address blocks: 102.165.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 12:20:11 2020 GMT
Not After : Aug 24 12:20:11 2022 GMT
Subject: CN=5f43b088-9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:e7:3a:6f:02:76:ea:e8:4b:7b:42:40:e0:
f4:a2:54:fe:d7:30:13:91:0a:b5:87:bf:3f:9f:e7:
74:f6:fd:0f:57:ed:eb:9c:4b:7f:a9:a0:6a:fa:cb:
3b:4d:bd:8e:13:a7:d4:a2:30:1f:ce:3a:5b:c2:26:
2b:cf:e8:5d:c3:24:7f:3b:a1:c5:2c:d3:9b:c1:e4:
1f:6a:71:7f:d5:37:96:d7:f4:54:24:90:ed:61:13:
a5:64:62:1c:ae:f6:dd:da:42:62:1e:09:90:5f:6d:
0b:14:00:f1:b0:ed:47:8f:99:6a:c6:c0:a9:4e:f6:
40:0d:23:c5:89:cd:5f:0a:72:a6:d0:e7:84:0a:28:
f4:9b:f0:26:97:65:6c:07:d3:90:0a:ac:99:16:a0:
c1:dc:9b:54:ba:8a:e0:91:9a:6a:18:a4:9a:7d:d9:
db:c6:5d:92:22:8c:f4:99:33:4b:0a:c6:6a:ff:55:
7a:94:2d:08:51:33:09:d6:d7:9f:16:51:02:28:75:
be:26:03:81:71:86:1a:1a:1e:c1:eb:8b:d8:2e:da:
02:b7:ba:c5:09:ae:00:c7:a0:c6:7b:24:5c:c7:0e:
74:05:52:aa:d1:b6:a5:28:e1:6d:9b:a4:27:5c:b4:
10:69:d7:55:24:9f:0e:52:56:46:95:1b:2b:62:d1:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:84:AB:56:16:FB:71:FA:C6:32:8F:6C:F0:76:B6:93:11:F9:4F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2B7E1380E60411EA86547379F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.31.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7a:23:72:28:93:43:eb:3d:7a:b0:89:74:01:d0:9e:e3:b3:
67:ab:b2:d4:a5:f1:5b:7f:92:3d:33:be:34:02:49:40:27:7c:
3b:6e:f4:5e:58:47:ad:87:13:55:35:24:c6:8a:77:00:1b:9f:
2f:be:c1:f9:cf:17:bc:28:cc:e2:2c:69:8a:2d:65:24:83:60:
bc:89:2a:59:a6:93:fe:81:b5:53:3c:2d:af:19:a6:57:ed:0b:
e2:f0:71:f3:84:b2:50:15:4d:75:b2:d4:38:ea:11:fa:40:94:
4e:3b:1e:9d:c4:e2:24:2b:b3:c0:32:66:bd:92:32:0d:3a:ad:
92:94:ac:cc:6e:4b:98:82:b0:fc:84:e1:5f:d5:a8:9c:06:41:
c3:87:18:86:69:f0:76:de:0b:52:fa:7e:6c:91:4d:b8:06:6b:
aa:10:6d:5c:2f:99:81:ec:dc:f6:65:41:2f:99:42:d7:87:5f:
25:64:8c:20:8f:78:cb:32:9b:ef:a0:76:4b:0a:9b:ad:d6:50:
15:45:48:52:36:0c:84:94:e7:0f:f9:b7:63:1e:6b:7c:4a:b1:
cc:ff:8a:41:fb:c5:38:c8:46:4e:80:55:c3:cb:00:3e:90:26:
23:7c:70:23:e9:3f:4d:e7:e3:b9:1e:95:f8:2e:fe:81:72:ba:
fa:97:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org