Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/94F3C15AB20011ED9602FBC1F1222468.roa
File: 94F3C15AB20011ED9602FBC1F1222468.roa (raw, json)
Hash identifier: ll7UDsiN+lkwU5fXkdoknMCNL5rCg1NW914s0Rz5d8w=
Subject key identifier: 63:83:67:53:50:AF:75:8D:4A:2E:9D:B6:4C:93:D5:85:8A:D7:BC:AE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A40
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/94F3C15AB20011ED9602FBC1F1222468.roa
Signing time: Tue 21 Feb 2023 15:58:29 +0000
ROA not before: Tue 21 Feb 2023 15:58:25 +0000
ROA not after: Wed 21 Feb 2024 15:58:25 +0000
asID: 61317
IP address blocks: 102.165.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2624 (0xa40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:58:25 2023 GMT
Not After : Feb 21 15:58:25 2024 GMT
Subject: CN=63f4ea25-fe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:88:43:1a:47:57:f9:c2:c0:09:4a:fb:39:
f1:74:53:ce:28:4a:2b:52:34:26:62:80:1a:5b:51:
05:65:ab:d6:11:be:11:86:57:9c:7e:39:dc:0b:19:
ab:be:3f:1c:f5:53:5e:54:11:a4:1c:29:c4:67:da:
43:27:1e:b6:23:9e:be:25:82:34:d5:14:6f:4f:a0:
18:b3:e2:23:8b:e1:5d:b2:88:bf:ad:68:85:67:29:
0e:d3:a9:91:6e:68:6f:d7:aa:95:81:d0:81:13:52:
1e:c5:8d:fe:86:60:b7:55:18:e0:32:a3:1b:ce:1b:
dc:e2:a7:51:c2:47:93:9c:a1:aa:83:4d:e8:00:2d:
82:19:31:f2:62:ca:d0:44:62:1b:41:73:ff:03:e9:
61:9a:b7:33:a2:c3:c0:e5:5a:6c:e0:4d:fa:7d:4a:
1f:da:a8:fb:60:4b:17:60:70:21:b7:e8:a9:9f:9b:
4b:f7:be:2d:13:ff:0f:3e:99:8a:d1:2d:12:6d:e5:
38:17:3a:38:3f:8c:96:c9:3a:63:bd:23:93:f0:13:
36:8b:a2:9e:61:9c:77:ea:47:4f:b0:2a:b8:a3:7c:
84:05:b3:1f:98:ba:3c:c4:ae:1a:fe:98:1c:61:73:
90:51:09:7d:f3:5c:04:cb:3b:7d:ea:d9:13:8f:d0:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:67:53:50:AF:75:8D:4A:2E:9D:B6:4C:93:D5:85:8A:D7:BC:AE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/94F3C15AB20011ED9602FBC1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.2.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1d:bb:27:b1:52:4e:a4:7b:09:2e:8a:0a:82:d0:68:86:78:
64:d7:bb:4c:0e:a3:cf:5d:a3:a4:3b:d1:76:28:ed:40:54:26:
50:16:c9:9e:97:e2:d9:47:66:a4:f8:e3:81:e1:d3:46:6e:8d:
18:93:f4:2f:c1:be:59:e4:51:e2:bc:78:d7:b4:ab:ed:fc:53:
09:67:ef:2e:2d:28:1a:36:46:b3:21:60:a2:da:14:24:1d:3e:
95:a8:01:29:63:ed:13:bf:e4:96:08:6a:b0:0f:f3:2b:01:de:
17:bf:ac:d8:94:e8:f6:56:2b:51:f5:7e:3f:12:c5:86:b8:78:
7e:a5:21:28:b5:56:24:cd:b5:4f:e9:02:bc:eb:34:98:fa:34:
c4:0c:87:cf:65:ba:df:a0:76:d8:66:48:bc:ab:a6:c9:ff:b0:
5d:e1:27:92:6e:90:33:50:70:8f:d7:d2:9f:0d:6a:0e:fb:ac:
b1:5c:d1:a0:d9:bb:d0:18:6b:5c:1c:d2:d1:b2:1f:80:84:fe:
33:6b:e1:88:4f:f3:61:0d:b3:42:a6:0f:b7:d4:1b:c8:eb:24:
0b:7b:5e:e0:08:8a:5a:00:68:76:18:15:07:6f:ed:be:43:ae:
f9:96:fe:ec:2f:0e:e3:fc:18:07:36:e5:5f:5a:6f:a5:ba:12:
f2:51:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org