Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8138D240179C11ECB4E8DA44D8A014CE.roa
File: 8138D240179C11ECB4E8DA44D8A014CE.roa (raw, json)
Hash identifier: o7qKwJdejIOZFJ/CIYyn7wKp/FuOZpiIMN0G6Pxt+sY=
Subject key identifier: B5:90:EF:B6:16:F2:2D:74:8F:D6:E2:3C:73:27:DB:48:3F:2D:73:2F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04E9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8138D240179C11ECB4E8DA44D8A014CE.roa
Signing time: Fri 17 Sep 2021 09:49:09 +0000
ROA not before: Fri 17 Sep 2021 09:49:01 +0000
ROA not after: Sat 17 Sep 2022 09:49:01 +0000
asID: 211112
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 17 09:49:01 2021 GMT
Not After : Sep 17 09:49:01 2022 GMT
Subject: CN=61446495-cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:30:17:12:62:e2:22:9c:f4:19:38:79:96:
49:55:2b:1f:a6:3c:6a:a1:87:c4:dc:ab:61:3f:3f:
47:f5:12:ee:f6:94:90:0b:98:ac:9a:6c:c7:74:73:
99:af:ad:d1:aa:85:b1:3a:44:8f:1f:9a:06:e2:52:
32:62:cb:10:c7:e9:7d:e2:c5:f5:8d:49:9d:d6:c7:
b8:eb:51:c6:8a:8c:d8:02:4f:3b:69:2c:07:d7:8a:
c0:6b:0b:5a:9a:ea:31:2b:44:83:a6:7b:d3:64:16:
89:ea:9e:71:9c:2d:17:f7:e9:87:0c:65:59:b4:ff:
c8:75:23:44:75:dc:ca:7e:1f:19:22:e1:59:bf:63:
c9:39:fa:78:93:e7:6b:77:14:f5:66:fa:18:8b:de:
2f:3c:74:af:63:ee:ab:93:f2:9a:ae:8a:a7:c5:a3:
7c:3f:a2:46:37:7b:37:ea:af:9f:9a:f7:6a:36:19:
02:d2:d8:40:58:62:13:f8:b4:a3:4a:1f:5d:9b:ab:
a6:fa:a9:6a:c5:8a:0e:67:7b:ec:1b:08:29:58:81:
9b:f3:91:9f:6a:6b:b5:8b:a6:91:0e:b9:84:d5:e0:
57:6e:4a:cb:33:2c:92:3b:51:6e:b2:55:eb:ff:04:
b9:99:df:a3:63:78:d3:02:4c:80:5f:ef:f6:d8:cb:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:EF:B6:16:F2:2D:74:8F:D6:E2:3C:73:27:DB:48:3F:2D:73:2F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8138D240179C11ECB4E8DA44D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2e:e4:d7:73:4c:34:bc:cf:a5:32:9c:8a:a5:45:32:74:c8:
a4:9e:77:6c:34:4a:b4:45:cb:0b:bb:a7:bb:9f:05:68:a8:22:
1e:df:2b:fa:cc:49:06:8b:de:35:ef:3a:18:d5:5a:63:61:e4:
d9:2e:df:df:7f:79:70:91:e8:b7:96:79:71:33:19:6a:60:15:
68:3d:b4:f2:3d:ef:ee:01:09:56:49:71:63:79:b4:44:a1:3b:
9d:c6:32:a6:fb:10:8d:b0:3b:09:05:6a:27:59:73:b5:ee:a4:
13:fc:63:a2:7a:7b:dc:ed:3b:ba:68:c9:2a:9c:2f:07:74:5f:
4a:d0:3d:58:35:b1:c1:8f:f2:9c:a3:01:5c:fb:07:39:21:48:
6d:ae:cd:ec:f0:e5:bf:65:45:34:a6:9b:55:74:fc:ea:ed:09:
1f:89:25:b9:bb:5a:bf:90:0a:9d:83:7a:9a:a0:ba:e1:bd:d1:
41:c4:4d:e7:02:35:e8:fe:bd:19:bb:76:e2:c4:70:a5:63:5d:
a8:d4:14:cb:5d:36:2d:04:3d:34:2a:26:56:65:af:71:14:3e:
71:de:f8:93:e6:d3:c9:8e:45:5f:39:1a:8e:c5:2e:e3:5c:77:
08:c1:9a:b4:4f:83:82:9a:01:8c:6f:96:07:93:06:34:ea:61:
2e:8a:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org