Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/895A376890E811ED8E7138EDF1222468.roa
File: 895A376890E811ED8E7138EDF1222468.roa (raw, json)
Hash identifier: z/xGjblqil5J4bYGXWGomDNCF7R7BqVMtms/Db/AlPQ=
Subject key identifier: 06:5C:2E:D3:9F:1D:61:EA:7A:AC:91:D1:0C:51:B1:D1:7D:7D:7C:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09C6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/895A376890E811ED8E7138EDF1222468.roa
Signing time: Tue 10 Jan 2023 13:13:13 +0000
ROA not before: Tue 10 Jan 2023 13:13:09 +0000
ROA not after: Wed 10 Jan 2024 13:13:09 +0000
asID: 35913
IP address blocks: 102.165.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 10 13:13:09 2023 GMT
Not After : Jan 10 13:13:09 2024 GMT
Subject: CN=63bd6469-ae57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:8d:92:94:91:dc:69:cd:64:02:62:27:fd:
6c:06:52:38:4b:80:43:60:3c:38:34:42:b5:7f:fa:
5c:07:95:89:21:74:dc:65:9c:5d:b4:d9:70:38:4b:
5e:d9:d2:c3:19:66:6f:d2:7f:3a:0a:83:97:5b:df:
05:0d:84:c2:6c:f9:e3:28:0d:7a:b1:a3:a1:bd:5b:
d4:48:07:77:05:99:80:d8:46:2a:82:bb:b3:8d:df:
33:74:6e:5b:5f:1d:60:10:3f:a9:2c:ca:8d:62:72:
50:77:aa:92:c1:57:e9:2e:8a:21:b3:c0:24:a3:d6:
f6:63:20:27:08:06:80:2a:e9:79:b6:74:a1:8e:65:
e1:29:95:13:d2:bc:b1:b2:20:c6:a2:36:b2:b4:72:
66:aa:ab:6c:b7:8c:97:e8:c0:85:99:8d:a4:f2:03:
e6:62:81:67:69:dc:27:fc:7d:c3:4b:79:ca:ad:73:
28:7d:63:fd:b9:09:27:78:fb:ea:a6:3e:23:d5:b5:
54:1c:26:a6:4a:e6:b2:89:f9:cd:22:0d:6c:3e:50:
be:39:f1:87:37:87:07:3d:d8:e9:b7:32:2a:ab:86:
ee:f6:2d:14:d1:5a:42:ba:7b:09:69:5e:36:55:28:
0b:c0:9a:52:4e:8c:2c:fc:14:7f:03:a3:62:50:c7:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5C:2E:D3:9F:1D:61:EA:7A:AC:91:D1:0C:51:B1:D1:7D:7D:7C:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/895A376890E811ED8E7138EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:08:c2:6b:f9:d3:5e:56:85:b3:85:04:3e:ba:9c:8f:a5:06:
33:05:45:4b:18:20:cd:ab:48:62:43:3a:0d:d5:9a:21:3d:5e:
76:ff:15:b8:70:de:f8:1e:bc:c7:ee:02:2d:8e:a3:8d:85:88:
ac:8f:35:c9:b3:e0:56:b8:72:c9:f1:e1:2f:9b:99:18:dc:f3:
dd:c4:9f:96:4d:d0:1e:44:7f:37:a7:15:d5:0f:02:4c:de:ca:
33:11:1d:3b:e3:f9:8b:57:91:a5:4e:f8:b4:dc:ea:89:c2:66:
36:56:6b:2c:77:8c:a3:f8:bd:0c:f1:6f:ab:b4:2d:73:c7:fc:
9f:27:47:ab:81:dc:b9:94:1a:be:7c:37:9a:f4:e8:fd:0f:6f:
c1:94:68:9e:31:e5:4c:06:e6:ec:da:9b:95:80:b2:40:02:9a:
fe:d5:95:c0:e7:1c:bc:05:99:5c:f9:e0:5d:0f:fe:1f:d3:e1:
e5:cb:9d:ae:81:77:ef:ae:c3:f2:f6:c5:33:bf:b0:2d:a9:eb:
72:b0:6b:4e:83:52:67:c6:4f:2f:d6:b1:d2:b3:a8:24:16:20:
cb:f2:24:c4:8c:7c:0b:ba:21:35:ce:0f:f6:05:2f:34:a0:fb:
46:e3:61:3f:5d:16:86:e6:76:ae:10:b7:fd:e9:be:52:0e:53:
86:6a:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org