Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35F96514F5E111ECA136DF83F1222468.roa
File: 35F96514F5E111ECA136DF83F1222468.roa (raw, json)
Hash identifier: muSwG0NZB03bzYnglyi8EN7MAx0uwT6hW77tJ95+GTY=
Subject key identifier: 39:AB:1F:41:BB:C5:4F:5C:DA:5D:18:4C:58:0A:AD:02:19:A4:4A:FC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35F96514F5E111ECA136DF83F1222468.roa
Signing time: Mon 27 Jun 2022 06:20:16 +0000
ROA not before: Mon 27 Jun 2022 06:20:12 +0000
ROA not after: Thu 27 Jun 2024 06:20:12 +0000
asID: 20141
IP address blocks: 102.165.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726 (0x6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 27 06:20:12 2022 GMT
Not After : Jun 27 06:20:12 2024 GMT
Subject: CN=62b94c20-297a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:bb:26:97:b0:03:85:a5:79:0a:21:4c:a5:
50:53:37:4e:02:e7:53:8c:d8:2f:a7:f4:9d:ff:d9:
c4:0a:de:2d:6b:8c:2a:64:4b:f8:81:e9:5c:08:f5:
d4:86:32:b2:76:31:e0:b8:53:52:89:61:07:21:cd:
60:c8:78:5d:a8:26:40:70:4e:21:fe:bb:62:43:f3:
b8:8b:3d:a6:79:59:70:d8:5c:c8:0f:2b:c9:e8:ab:
3f:8a:f7:45:25:b5:ac:04:d7:bb:26:53:b5:ac:7d:
62:6e:b2:0c:e5:59:8f:ef:12:9c:67:e5:41:71:a6:
5e:ea:cf:68:32:8e:c1:6b:c5:54:ad:44:d0:7b:0f:
3b:94:1a:15:3e:25:73:78:75:bf:ff:37:71:95:da:
be:78:70:c4:6b:42:4f:cb:ed:8e:94:b7:95:66:63:
3f:d1:1c:94:90:67:1c:fe:b9:2e:09:82:66:fc:a0:
ea:ac:17:ac:2d:67:c4:9a:6f:cc:cb:dc:e2:1f:2f:
40:25:76:db:0e:be:cc:9c:1f:e9:79:0f:77:2b:9d:
1e:30:dc:23:3b:18:c1:bd:f1:32:5b:19:83:a6:8b:
3b:c9:9c:b8:8c:83:37:87:35:0b:b8:b8:3e:53:6d:
65:2c:dc:d3:90:95:b2:ef:b2:3a:f6:a6:ab:15:13:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:1F:41:BB:C5:4F:5C:DA:5D:18:4C:58:0A:AD:02:19:A4:4A:FC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35F96514F5E111ECA136DF83F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.49.0/24
Signature Algorithm: sha256WithRSAEncryption
da:50:d9:65:28:60:59:d8:bc:86:52:f3:b5:36:12:e3:e9:00:
f5:7a:0c:4f:1b:0c:e7:d6:24:6a:39:8e:24:3d:1d:20:8f:f5:
20:7d:00:03:96:b2:10:55:1b:58:42:12:c9:71:df:07:2c:08:
7a:20:cf:95:51:44:a4:bf:ca:45:a0:c0:25:bc:a3:97:4c:0c:
5e:c3:d2:fa:8a:04:51:af:18:05:c1:1a:ee:20:8b:6f:f7:08:
06:d3:29:d6:16:3a:8c:35:f9:24:2f:a4:7c:24:7a:43:e5:dd:
ad:44:37:b7:8b:78:b5:03:b1:6b:5f:e1:85:54:04:b8:47:3b:
46:d9:b4:17:6b:64:0e:83:3e:c5:ac:f6:2a:42:ed:23:5c:47:
b7:29:d0:2d:dd:7e:15:94:f5:c3:4c:23:70:5b:02:66:6d:b5:
e2:e6:14:79:fb:d7:99:6a:16:f3:ba:c6:fe:d8:b8:1a:ad:ae:
b7:15:b8:41:b7:f5:de:b7:cf:20:0e:5d:d1:68:0d:3a:8c:46:
4a:b6:50:94:34:2e:82:40:d9:89:17:c1:7f:d8:65:79:ab:ff:
d1:99:dc:e0:1c:d5:7d:7d:d6:a7:d8:72:d4:fa:8a:13:fa:83:
c2:db:14:27:a1:8b:0e:8b:4f:60:ae:f6:ad:8d:a6:45:e8:bf:
24:b2:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 16:07:24 2024 by rpki-client on console-ams.rpki-client.org