Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EE518E8A62D11ECA80A22E55A40D577.roa
File: 3EE518E8A62D11ECA80A22E55A40D577.roa (raw, json)
Hash identifier: JIrxxF2A2dE+aAUhZhwDZzpkYydq0hVJ5NfsIEuoaio=
Subject key identifier: F9:5F:18:09:9E:6F:D0:23:E2:99:C7:1F:12:9C:5C:33:8F:84:9C:50
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0609
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EE518E8A62D11ECA80A22E55A40D577.roa
Signing time: Thu 17 Mar 2022 20:03:00 +0000
ROA not before: Thu 17 Mar 2022 20:02:56 +0000
ROA not after: Fri 17 Mar 2023 20:02:56 +0000
asID: 266400
IP address blocks: 102.165.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1545 (0x609)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 17 20:02:56 2022 GMT
Not After : Mar 17 20:02:56 2023 GMT
Subject: CN=623393f4-e0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:25:bc:1f:59:b4:01:d7:1c:03:5f:b7:1c:
25:67:33:55:3e:8b:21:ad:13:ed:ec:2c:de:98:8c:
ea:69:61:5f:18:12:28:09:2b:4c:56:89:53:73:63:
c6:24:3b:2a:43:c7:c7:5d:dc:71:7f:25:e3:4d:9d:
2f:1f:91:31:4e:20:32:a9:5e:1f:e6:7c:a1:fc:59:
01:8c:c9:14:ce:5b:79:65:aa:78:bc:66:57:55:93:
7e:4c:a5:e7:ca:15:6b:da:ca:c3:72:17:21:c4:44:
a8:0c:fb:5d:6d:a7:2d:2d:7e:de:d1:c1:74:c6:f2:
d9:09:6b:5d:a0:dc:f8:1d:ed:45:3c:6a:e0:e9:d4:
35:9c:38:91:fd:42:1b:e3:3f:19:dc:c6:f4:c6:02:
a4:79:ee:a5:92:ef:fc:f4:31:10:69:33:f4:e8:e0:
7b:ad:1b:7e:ff:98:ca:d9:eb:6d:c0:61:4a:00:d3:
46:79:93:88:64:5f:77:b3:b5:73:7a:50:93:e8:c1:
0d:8e:b0:df:bc:15:74:eb:83:59:ee:35:c6:5b:16:
6d:45:85:41:ae:68:d0:2a:bd:71:f4:e3:b9:ae:a7:
13:fa:80:fa:07:08:fe:f8:83:45:c8:c1:b2:45:95:
91:cc:b6:b4:6e:d0:15:37:96:e2:cc:1b:91:a4:6d:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:18:09:9E:6F:D0:23:E2:99:C7:1F:12:9C:5C:33:8F:84:9C:50
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3EE518E8A62D11ECA80A22E55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.25.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d9:ff:a0:21:d3:10:4d:f8:c9:57:17:fa:c0:87:39:c9:2b:
ab:3b:86:33:7b:72:7d:79:4a:8d:fc:e8:77:60:10:ee:4a:0a:
2a:6f:a8:fd:27:91:58:f1:9d:3c:01:2c:f9:5b:5c:e4:b1:3a:
cb:1c:f3:47:81:80:b6:68:02:16:55:f9:39:8c:b9:b4:8f:34:
6a:81:17:40:3f:3f:60:76:4f:a7:a2:d2:02:72:9b:2e:4a:1f:
bf:d1:73:f1:0a:15:33:a7:86:c0:9e:2c:18:cc:ff:88:71:00:
7a:7e:11:f0:18:40:84:31:2d:d9:0e:ab:e3:71:da:11:95:d0:
3d:fa:c0:0e:7a:0f:9b:04:f7:54:12:2e:b9:3b:2c:eb:6d:ef:
44:fb:fe:cb:db:7f:e7:03:ae:d6:08:dc:94:e6:df:9f:aa:eb:
52:c8:23:0e:7d:02:73:b5:d5:9b:2e:51:fa:5b:c5:e0:b1:ed:
c7:af:f4:f1:18:8d:34:43:9c:e5:51:d7:b3:2a:f0:ee:b5:ad:
70:2c:d3:4e:24:07:f5:48:b0:90:8c:41:df:09:29:94:89:c7:
3d:e6:c0:4c:cf:9a:25:53:22:52:92:ee:29:86:00:64:61:11:
4c:c3:af:57:45:b7:65:5f:0c:dc:26:01:9a:09:c0:08:12:ec:
4e:77:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org