Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DFA2C52EE1D11EBBE83AA41D8A014CE.roa
File: 3DFA2C52EE1D11EBBE83AA41D8A014CE.roa (raw, json)
Hash identifier: H/KbBYsR37bK4VsbcNIHWajYgzrXSjGPjD+59YGu9I0=
Subject key identifier: F3:53:06:C7:F7:54:94:FC:7C:D9:FB:DD:97:88:5C:40:47:70:71:47
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 047F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DFA2C52EE1D11EBBE83AA41D8A014CE.roa
Signing time: Mon 26 Jul 2021 14:25:10 +0000
ROA not before: Mon 26 Jul 2021 14:25:06 +0000
ROA not after: Tue 26 Jul 2022 14:25:06 +0000
asID: 206150
IP address blocks: 102.165.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 26 14:25:06 2021 GMT
Not After : Jul 26 14:25:06 2022 GMT
Subject: CN=60fec5c6-e0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:14:80:7f:ec:3c:6b:24:6b:d6:02:e6:03:
f0:1f:d5:7a:f1:8a:7b:17:0c:fc:3a:fa:c1:6c:cc:
9c:f8:89:b9:9a:3a:b6:63:42:81:f2:d0:85:dd:d0:
e4:8f:58:81:a6:48:9d:49:e9:76:23:3b:40:5f:ad:
7e:22:e1:30:36:fc:89:b0:8f:90:4d:c7:09:74:33:
cf:93:b9:b9:b8:36:d5:78:10:32:77:e1:74:9d:c0:
68:27:f2:e9:35:fa:fd:cb:6c:10:cf:83:7d:8d:c7:
76:e2:c8:59:7d:4d:6e:44:0e:d5:03:66:19:b5:d9:
62:e1:89:e9:f2:45:38:a0:b8:d6:dc:9b:34:ef:71:
34:cf:8a:ac:1b:36:9e:f9:c2:1c:14:21:0b:92:a4:
dc:27:73:3c:7c:97:20:1d:43:a1:35:a6:96:c3:f9:
1a:1b:fb:20:93:9f:3a:70:41:96:fb:36:02:9a:bb:
5a:5a:ef:a5:30:b5:7a:7e:d5:eb:6e:db:a7:14:f2:
d3:ab:18:00:f4:6e:e8:c4:31:57:d6:80:d5:f5:f0:
5e:da:ae:8c:72:4d:e2:31:4b:9a:ae:3c:66:76:c1:
ca:31:30:ef:06:00:77:72:ca:0b:33:a9:b0:71:34:
63:1f:ef:99:46:ef:5e:09:7b:f7:b3:82:82:b9:42:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:06:C7:F7:54:94:FC:7C:D9:FB:DD:97:88:5C:40:47:70:71:47
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DFA2C52EE1D11EBBE83AA41D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.41.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:d8:03:bf:f2:7f:db:cd:43:92:bc:51:12:d6:5d:0e:d3:
f3:cd:78:dc:b1:19:76:8c:1c:c6:e2:c0:70:e6:d5:2f:ff:de:
60:13:9e:9e:02:0e:3a:93:dd:65:69:b1:3b:2c:0c:ed:4d:2f:
95:bd:21:c1:de:64:4e:87:a4:6e:9f:ed:6a:73:43:17:a9:c3:
f8:02:4a:54:cb:99:1f:2d:33:86:6e:c5:62:cf:71:d5:df:10:
37:37:b9:37:7f:76:61:79:3a:18:8c:ee:26:38:03:11:3f:c9:
fe:c1:31:98:3f:3c:7d:9e:ab:57:55:ec:dc:c6:b8:71:ef:f6:
72:3d:16:cf:86:39:e5:26:3a:36:10:b3:d3:7c:6e:25:48:09:
b1:41:a1:3e:c0:0d:52:20:9c:d5:7c:d8:1a:4d:54:83:22:ad:
42:13:b5:23:d5:b4:7f:ae:30:1a:6a:b0:57:ef:07:62:86:b6:
3e:ab:28:d5:65:7e:34:ec:b4:8a:cb:9a:21:77:9a:15:38:49:
c2:21:ed:98:29:38:d9:35:b0:ef:c6:02:8e:59:c4:22:87:19:
c6:cf:9f:56:a1:38:62:b2:bf:29:53:77:a8:a3:a2:cb:63:e5:
3e:4f:2e:4b:4a:5c:0b:75:98:a4:4b:33:35:d7:05:91:f9:60:
0e:59:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org