Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BB85F638A311EB87E2E16BF8AEA228.roa
File: 72BB85F638A311EB87E2E16BF8AEA228.roa (raw, json)
Hash identifier: nwyfGr7G7LIx4MepUg6iJlhjR4RHj6pwMV67Mx9WCxk=
Subject key identifier: A9:30:30:6F:D4:EC:4B:B4:26:58:62:BC:60:BA:72:D6:7A:E4:54:4A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 02DF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BB85F638A311EB87E2E16BF8AEA228.roa
Signing time: Mon 07 Dec 2020 15:47:02 +0000
ROA not before: Mon 07 Dec 2020 15:46:57 +0000
ROA not after: Wed 07 Dec 2022 15:46:57 +0000
asID: 212238
IP address blocks: 102.165.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 7 15:46:57 2020 GMT
Not After : Dec 7 15:46:57 2022 GMT
Subject: CN=5fce4e76-b137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:47:ad:94:81:69:ff:ee:51:12:2a:6c:ac:
66:68:84:ac:20:f8:30:c0:ef:ab:0c:c9:85:76:28:
d2:60:10:ed:b5:c1:bd:3f:cf:f2:7c:56:da:10:18:
ec:28:5f:10:f4:bf:69:04:7a:89:12:c7:52:5f:5d:
66:db:20:24:30:6d:9a:ef:ea:d4:94:bb:d0:b1:46:
6d:76:02:8d:98:94:55:16:8b:58:66:f1:52:44:3e:
03:1c:c5:d7:65:d2:52:27:cf:60:8a:74:13:72:8f:
35:6a:d3:52:9c:42:8a:aa:30:b1:24:1a:ea:45:18:
ea:09:d4:d9:ec:f9:d4:b8:47:c8:4e:1e:85:7c:01:
42:ba:49:d8:bc:1f:51:00:92:40:9b:1d:ac:80:df:
8f:3f:c5:2b:e2:ec:8d:59:e8:43:e8:56:7e:c2:4a:
c6:45:e0:82:0a:8f:1a:9d:bc:89:35:8f:95:7f:bf:
4c:8b:89:2d:cf:d5:a9:23:77:9d:a6:a5:33:05:ac:
97:3d:7a:d4:48:e0:21:74:94:76:4f:d1:32:59:1a:
9a:88:41:1c:7f:7e:64:78:66:ad:6e:7a:e5:ee:cc:
f4:0b:94:22:69:93:64:aa:f1:0b:56:4c:1b:93:c8:
5e:69:d1:02:39:b8:ce:e7:38:f3:57:de:c3:e6:2c:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:30:6F:D4:EC:4B:B4:26:58:62:BC:60:BA:72:D6:7A:E4:54:4A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/72BB85F638A311EB87E2E16BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:9c:2d:d9:03:72:52:ad:6c:d8:67:79:39:bb:17:74:0b:21:
fb:74:1b:ed:33:ed:b8:c6:64:33:77:d4:39:db:c1:20:a0:24:
e9:11:f9:ab:51:20:7f:6d:b7:41:46:9b:b5:38:1c:3d:10:c2:
9b:11:ab:c4:5f:f4:1d:80:0c:89:4b:b6:5c:4c:b8:6a:e1:37:
8b:ee:ea:cc:53:10:82:1a:b5:3e:8e:52:21:0d:e1:c8:16:f8:
7e:e7:83:ac:e5:2b:44:35:16:07:09:68:5b:43:10:4d:7a:89:
63:5f:09:7d:79:74:9d:1e:a3:1d:e7:f4:e4:cd:68:1d:2a:62:
08:a3:c2:bc:be:56:3b:ce:2f:2e:8a:86:1c:72:5c:ef:95:be:
6c:45:96:16:06:5d:57:10:53:31:03:de:4e:aa:df:0b:8d:b1:
f7:3e:4f:21:da:84:d5:d0:fd:18:87:74:27:ca:d5:1b:84:6b:
b2:88:6c:55:b6:37:57:4e:f0:02:55:f4:fd:e7:90:98:a7:a9:
c0:82:fc:91:e5:d6:90:29:2e:87:e5:ad:9b:88:16:21:a0:9d:
5f:a3:f1:b0:f4:46:d8:49:15:35:3c:bd:a1:1a:18:44:6d:24:
8b:d7:8e:54:2a:eb:8e:77:86:f7:14:c2:ff:b2:69:90:33:50:
d0:6d:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org