Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/847F9680AD8611EB9F7CC72DF8AEA228.roa
File: 847F9680AD8611EB9F7CC72DF8AEA228.roa (raw, json)
Hash identifier: 8q7i2Lb2te7960TjPn44nUVVRa4vksmcLEKSrWxIU2o=
Subject key identifier: 30:08:FF:9D:2E:E0:B5:1C:1F:AB:DD:E3:51:C6:1D:91:A3:63:12:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03E2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/847F9680AD8611EB9F7CC72DF8AEA228.roa
Signing time: Wed 05 May 2021 09:44:43 +0000
ROA not before: Wed 05 May 2021 09:44:37 +0000
ROA not after: Thu 05 May 2022 09:44:37 +0000
asID: 174
IP address blocks: 102.165.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 09:44:37 2021 GMT
Not After : May 5 09:44:37 2022 GMT
Subject: CN=6092690a-e04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:32:8f:ef:c0:22:6f:5f:28:c1:1a:f9:09:
88:f3:df:c4:ff:b5:a7:ed:8c:0c:cc:2c:d2:5f:da:
89:1c:e2:43:4f:10:9d:9c:84:b2:1e:64:8a:ca:4a:
18:44:10:b1:e8:7a:e6:d2:26:f3:1c:f4:d3:3c:7f:
0e:16:05:2c:c5:e2:04:29:e2:6a:56:ab:3f:27:ac:
e3:b8:fb:7a:4d:0d:a0:2a:d5:40:9d:70:a0:5e:24:
cd:e7:27:97:18:32:6c:c2:00:a8:17:9c:ea:d5:59:
1c:31:af:b6:a8:20:aa:58:d1:55:4f:6e:f4:03:3d:
1e:c9:95:3e:95:bf:21:9d:de:a5:eb:c3:74:20:72:
c0:5d:af:66:d0:85:ae:58:8c:92:05:8c:38:97:29:
96:f2:bc:c2:55:8a:21:72:33:ea:bc:d9:6e:c1:d6:
2d:cb:2a:fa:22:59:1a:6f:b9:9e:23:d7:bb:e4:a3:
4d:35:7b:88:e5:9f:1c:f8:57:09:1c:23:a4:72:12:
5f:09:42:b8:72:a1:c4:8d:da:1c:9e:4d:90:69:18:
fc:b8:fd:cf:b0:0c:bd:49:2d:53:68:6e:e5:f9:d7:
83:1b:fd:86:e6:4d:b4:30:0c:10:5e:2f:4d:d3:89:
5b:60:bb:27:2f:20:af:22:96:37:54:6b:b1:7e:1f:
3d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:FF:9D:2E:E0:B5:1C:1F:AB:DD:E3:51:C6:1D:91:A3:63:12:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/847F9680AD8611EB9F7CC72DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4b:a2:6d:2f:8f:71:6c:b4:98:61:47:79:ca:2c:9d:c1:f8:
78:b7:49:bc:81:67:8d:8b:e4:25:fd:1d:6b:90:40:cc:95:de:
5e:75:e9:f4:75:4f:32:3c:78:cc:db:2f:00:6c:02:e5:dc:83:
98:5f:7e:32:a4:c1:6f:84:41:0d:23:c5:41:a4:2e:de:ce:8e:
fe:6a:72:73:3a:c2:f4:7d:9c:26:d5:8d:cf:40:1d:d0:6c:1d:
cf:5f:0d:2f:f9:52:50:d1:82:cf:49:ad:e3:35:8a:c9:a5:bb:
47:8a:82:d6:e3:1c:8a:24:da:99:38:53:03:22:0b:53:e7:44:
a7:16:c6:2d:2e:ac:3f:c6:00:ae:c2:3b:14:ec:37:b0:a2:25:
f6:3e:92:fe:a8:87:00:2c:64:b3:5d:62:2b:b5:8e:96:df:63:
3d:f8:d4:26:01:1e:79:e0:fe:cb:43:fe:fc:8c:a7:f4:d6:93:
da:0e:11:54:21:6c:84:6d:71:94:cf:e0:ab:7e:77:e6:b5:16:
50:c7:f6:9e:b5:37:bb:68:75:7b:af:3f:73:05:0a:8a:77:e6:
3f:b5:5e:34:64:46:71:cb:50:60:25:d7:10:43:64:dd:11:a1:
e4:26:cd:f3:86:67:f1:02:23:82:29:c6:53:4d:09:73:db:0c:
89:30:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org