Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/511027D2F3BE11EBB4619004D8A014CE.roa
File: 511027D2F3BE11EBB4619004D8A014CE.roa (raw, json)
Hash identifier: H+OJz8emgnqmyDZHV6GqII2kXiU6HyDo6UTO3hv8MRc=
Subject key identifier: CA:2B:05:73:43:BD:29:DB:99:83:04:A7:E0:33:35:6F:59:0F:E1:7A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 048B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/511027D2F3BE11EBB4619004D8A014CE.roa
Signing time: Mon 02 Aug 2021 18:20:57 +0000
ROA not before: Mon 02 Aug 2021 18:20:50 +0000
ROA not after: Tue 02 Aug 2022 18:20:50 +0000
asID: 212238
IP address blocks: 102.165.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1163 (0x48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 2 18:20:50 2021 GMT
Not After : Aug 2 18:20:50 2022 GMT
Subject: CN=61083789-4b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:e7:8a:89:1a:55:72:e4:73:01:90:7f:d0:
7f:42:12:62:ae:06:51:1a:48:60:a4:c4:f1:17:01:
d4:12:c1:19:62:4d:18:7f:11:70:2c:00:d2:73:1b:
7b:3a:7d:c6:a6:b7:db:a2:30:6e:59:f6:f7:c8:28:
97:b7:84:53:04:0e:71:97:94:fb:39:4e:a5:03:b2:
8c:c2:ac:25:81:30:7d:94:67:08:c2:24:d7:55:9d:
8a:66:8a:3b:bb:cf:c1:ec:4f:fa:f3:7a:67:cb:13:
57:4e:38:fe:a5:24:d9:2c:26:53:f3:6b:ca:46:c9:
13:58:22:1a:4c:34:58:31:6b:70:64:60:4a:81:09:
6d:e4:55:f6:21:28:da:19:65:d1:6e:bd:93:a6:ae:
04:79:72:f1:e7:8f:f4:7b:fa:2c:d0:11:61:1d:e9:
5f:f1:84:d8:fd:a6:d3:6b:7a:9c:93:70:ec:db:fc:
96:0e:67:35:c4:07:2b:ec:e9:54:c8:54:4d:e0:03:
52:a9:ae:d3:f3:40:9c:ba:e8:d0:24:7d:59:a3:d7:
19:e0:87:90:bc:f5:e1:3b:e2:36:a4:2d:ab:c7:db:
57:72:1f:27:60:16:b6:17:c2:eb:d1:8c:39:59:ae:
13:79:62:24:2b:51:ac:10:a9:cd:d6:90:a8:80:a6:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:05:73:43:BD:29:DB:99:83:04:A7:E0:33:35:6F:59:0F:E1:7A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/511027D2F3BE11EBB4619004D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:89:20:0f:9b:47:74:ab:df:cb:aa:1d:66:a3:85:c2:86:df:
19:11:63:53:fe:4c:39:98:d9:47:b4:fa:e1:76:01:03:15:0a:
02:3c:c7:6b:be:4d:dd:83:d8:04:fe:5e:bb:32:0c:48:76:6e:
cc:45:62:57:62:2b:1f:83:b1:ac:04:6b:2a:9a:cd:d4:3f:d6:
99:0f:31:7c:4d:79:30:23:2d:10:55:8e:46:7a:ae:4e:1d:49:
75:38:3f:c7:32:e1:c2:14:d1:ef:81:a6:ae:cb:b5:5e:c2:41:
1e:4f:f0:cb:71:7a:39:40:db:cb:d2:3d:ec:04:e5:e3:e5:2e:
c2:75:5a:94:4b:a7:bf:65:71:c6:ff:3f:a4:be:51:77:c2:3a:
6a:d4:a3:fe:a5:f6:a5:7c:e8:6e:14:0b:ac:96:24:0e:32:08:
f3:52:04:6c:18:21:8d:23:dc:b3:2b:e0:02:34:a7:cb:27:89:
7e:6c:ac:02:a2:30:6c:fc:9f:bd:1d:ef:e9:13:d1:83:c7:95:
78:2f:26:36:bf:b3:bb:82:90:e7:2e:b5:48:9c:e9:81:7b:ea:
0a:04:c6:fb:22:96:72:65:ea:a9:5a:46:ed:ff:43:e7:7b:b9:
78:06:35:ce:f7:26:45:11:e8:e5:f2:71:64:49:e5:3a:1e:7c:
b3:ce:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org