Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/853248CEB20311EDB56F42CAF1222468.roa
File: 853248CEB20311EDB56F42CAF1222468.roa (raw, json)
Hash identifier: riz7B4G750AZfi3eQNtr1utIKdx9vbR6mS5p4OXRmvg=
Subject key identifier: 6E:A3:3D:06:97:05:E5:99:BE:4D:23:01:92:C3:E0:03:20:E5:B9:00
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A5B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/853248CEB20311EDB56F42CAF1222468.roa
Signing time: Tue 21 Feb 2023 16:19:31 +0000
ROA not before: Tue 21 Feb 2023 16:19:27 +0000
ROA not after: Wed 21 Feb 2024 16:19:27 +0000
asID: 61317
IP address blocks: 102.165.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:19:27 2023 GMT
Not After : Feb 21 16:19:27 2024 GMT
Subject: CN=63f4ef13-d96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:ed:36:b1:88:35:09:56:4a:8a:f6:97:cd:
32:cb:ea:ad:28:5d:67:df:b2:f2:68:3e:f6:23:b7:
c7:f5:dc:cb:79:01:f5:07:7b:75:55:54:b1:c3:73:
a5:11:4f:52:9e:12:db:2d:d3:e1:12:70:0c:b4:20:
c2:27:59:da:1f:41:4c:3f:b7:95:fe:9c:66:8a:11:
c8:a2:19:d1:20:bd:fe:5e:1d:a3:5e:69:aa:12:0d:
5a:62:7b:52:15:3c:ba:b2:96:7c:fe:49:5b:3e:e4:
0f:ec:df:1b:25:d3:17:c4:3b:57:2b:74:06:6b:56:
40:5e:b3:3d:07:4e:f6:e0:20:26:63:42:62:3f:2f:
c4:a4:e5:64:aa:af:59:dc:dc:94:b0:71:1f:51:6b:
4d:fc:c8:c1:e5:de:2c:60:92:c6:fa:6b:c6:71:6d:
50:f5:ea:f4:65:dd:c6:fe:13:99:55:db:6f:81:e8:
ce:52:e8:69:bc:1a:98:ea:fd:d8:3f:f4:25:27:4d:
7a:cc:fa:f7:ac:a6:ae:5f:dc:57:f1:20:94:df:9d:
7e:6e:f2:bc:1a:fd:3b:61:7e:d2:8c:25:03:fa:f3:
5b:61:8d:9c:79:91:b3:f7:af:c8:3a:1d:f4:82:5e:
ee:f0:5c:a9:f0:d8:e0:09:ab:c7:d9:e3:d8:90:75:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:3D:06:97:05:E5:99:BE:4D:23:01:92:C3:E0:03:20:E5:B9:00
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/853248CEB20311EDB56F42CAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.62.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:93:90:b3:c9:fa:e4:3a:1c:90:88:15:d9:36:e4:c4:3a:ed:
8d:02:28:dc:35:b6:0a:ab:ae:c9:47:50:4e:e1:07:5b:e5:93:
9b:07:84:0e:83:e4:1e:97:e3:56:ad:0f:bc:54:92:70:51:a1:
59:11:30:0e:ff:9e:a7:c0:92:85:9a:8b:d0:03:de:e8:b7:73:
cb:5c:ef:75:c6:1a:49:c1:03:43:e0:35:06:41:bb:c2:8e:60:
69:1a:e1:1a:a8:c7:37:d6:bd:06:60:a8:df:8e:c6:2f:ef:42:
92:3f:f2:ba:cb:49:50:ec:96:ef:a6:28:ef:eb:c7:77:fb:ca:
f4:1e:37:06:99:22:6a:57:3e:8a:8d:b4:bb:3a:60:ab:05:08:
b7:0d:26:51:47:23:8a:9c:71:89:90:2e:ac:9f:4a:43:0f:ef:
84:ae:ee:48:e8:e9:96:a2:72:f5:ff:16:2a:80:f6:fe:71:ed:
81:6e:53:42:24:4a:d0:1e:e1:d8:7d:29:02:4c:6b:49:c6:d7:
ab:e8:4b:d3:ab:e8:da:38:f5:99:5d:ab:42:84:25:5b:08:6e:
4d:3a:fc:1d:c1:07:6b:02:d2:4b:bb:09:fb:3f:90:c6:c8:a3:
33:36:54:3f:8c:75:2e:57:de:9c:fc:1d:10:bb:7a:0c:18:99:
f6:fc:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org