Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BD05800786B11ECAB8D4E9B5A40D577.roa
File: 4BD05800786B11ECAB8D4E9B5A40D577.roa (raw, json)
Hash identifier: aAQum3fEcDtmZLdolLyVw6OGaOYK+fXGVzkRAPEih3g=
Subject key identifier: 46:57:63:68:9E:DB:38:38:FD:24:1E:02:C5:D9:5D:74:2A:5D:C6:43
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05BC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BD05800786B11ECAB8D4E9B5A40D577.roa
Signing time: Tue 18 Jan 2022 14:31:17 +0000
ROA not before: Tue 18 Jan 2022 14:31:13 +0000
ROA not after: Wed 18 Jan 2023 14:31:13 +0000
asID: 57423
IP address blocks: 102.165.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 18 14:31:13 2022 GMT
Not After : Jan 18 14:31:13 2023 GMT
Subject: CN=61e6cf35-0dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:80:92:74:86:ca:c2:d7:88:c6:12:32:a6:
95:13:00:12:25:fe:fc:71:bb:08:e0:ef:4e:66:11:
93:79:48:85:30:af:7a:79:b9:55:be:6c:ca:be:02:
18:1f:f6:8e:55:02:01:64:64:c6:be:35:29:11:ae:
2b:34:12:ae:e2:45:28:a0:7d:3a:e5:32:4b:8c:0e:
fc:bf:ef:fc:f4:f1:53:01:0f:f2:91:98:f9:1e:4c:
ef:31:40:18:70:fd:f9:83:fa:71:87:e1:0a:bc:21:
78:26:b5:7c:ea:3b:4f:55:cd:e7:58:19:bd:1a:c2:
7b:a9:b5:f5:06:c8:a2:a4:4e:ed:bc:04:4f:e4:5d:
b8:8e:a9:0a:a4:c6:da:b4:ed:ef:2f:b4:5d:2a:67:
e0:e1:b8:e1:74:42:ba:46:2a:7c:68:62:cf:b5:71:
e2:d8:6d:5b:e7:e9:4e:6e:78:ed:2e:37:72:c8:98:
48:71:ff:46:79:36:f6:38:81:73:a3:db:cb:3a:03:
ae:ab:60:b4:ab:43:55:93:e8:b6:de:57:33:24:cc:
b7:3c:87:6b:4d:de:8c:c5:35:f8:a7:25:2f:8f:e9:
18:32:e3:ec:59:ed:f3:fd:e0:75:f5:5b:98:18:5d:
9f:2f:ab:6a:8b:45:70:ce:86:8c:af:ed:cc:c0:ab:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:63:68:9E:DB:38:38:FD:24:1E:02:C5:D9:5D:74:2A:5D:C6:43
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BD05800786B11ECAB8D4E9B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b4:e2:5f:a7:95:0b:40:38:e8:1a:55:e3:6b:e7:1e:8a:53:
8e:61:97:85:0a:da:78:3f:a6:06:6c:67:7e:2b:77:09:c2:02:
9c:c9:82:35:bf:70:a9:d3:6d:de:5c:5b:69:be:a8:5f:5b:42:
bb:4b:81:0c:3d:b9:d1:65:5b:42:97:bb:f9:f0:be:f3:78:ac:
2f:17:26:2d:26:56:9d:d0:f6:1b:9a:69:0e:d7:bb:cc:14:26:
29:da:96:f1:c0:cf:69:5d:12:ee:2a:15:c4:b3:43:fe:7a:bb:
f2:1c:5a:06:c7:52:5a:73:d3:ae:60:c7:00:80:92:4f:c2:bb:
be:9b:50:99:b9:3c:fb:73:77:7e:a1:eb:1c:06:7b:ff:27:97:
51:1c:c7:76:3b:c1:60:39:6d:29:0a:72:6b:16:01:69:18:03:
b4:87:1f:09:8d:5e:21:41:cf:7b:0c:a7:9d:8e:79:c3:b6:1a:
62:29:c4:1c:89:82:2e:f0:f4:6c:da:b4:ee:51:6a:4b:88:7e:
01:a1:f4:b1:8e:5d:f0:3d:51:3f:c4:5e:84:ac:8a:27:09:a6:
86:d5:35:e2:1a:a0:db:b4:f8:a3:42:e3:a0:0f:24:c2:3e:e1:
b5:43:f5:9d:86:1d:0d:ea:1b:bb:58:1c:e4:da:c2:64:f6:98:
ed:07:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org