Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ACE063ECB20311ED893CB7CAF1222468.roa
File: ACE063ECB20311ED893CB7CAF1222468.roa (raw, json)
Hash identifier: Q2mKz9pECOzA6tWJ91x74nxKflDHu7cWY5Ussf7384s=
Subject key identifier: E9:43:3D:D8:FB:31:F7:38:85:3F:0A:60:25:08:10:42:B0:A9:4B:82
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A5D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ACE063ECB20311ED893CB7CAF1222468.roa
Signing time: Tue 21 Feb 2023 16:20:38 +0000
ROA not before: Tue 21 Feb 2023 16:20:33 +0000
ROA not after: Wed 21 Feb 2024 16:20:33 +0000
asID: 61317
IP address blocks: 102.165.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2653 (0xa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:20:33 2023 GMT
Not After : Feb 21 16:20:33 2024 GMT
Subject: CN=63f4ef55-eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:73:f1:0b:74:ad:79:28:0e:95:fe:d7:65:
e6:4a:bc:96:3d:7d:20:63:d3:32:03:41:0c:27:ad:
38:b3:fe:7d:fe:d8:ea:db:7f:43:35:5c:75:37:f0:
0d:90:6a:d7:b5:0b:f8:87:a5:e2:8c:b1:d4:98:f2:
8d:8b:a4:7e:cc:4d:96:03:4e:eb:ce:00:9d:6b:f6:
54:71:1d:47:af:39:df:c2:32:cc:02:1c:62:16:43:
1b:0f:91:4f:f7:9d:af:a7:e2:75:18:d6:f0:6a:86:
d7:30:1f:3b:65:78:35:d7:b3:5b:73:67:9d:5c:de:
99:2e:56:44:0d:d2:9f:90:c6:44:40:31:63:03:44:
8f:5a:d8:59:c1:32:e6:3f:f2:28:60:4b:46:3a:b7:
3e:15:93:5d:54:7f:3a:00:a8:04:66:dc:96:a6:15:
b6:0f:66:49:db:1c:9a:fb:ef:27:06:6d:71:d6:5a:
7a:9f:0c:93:69:1a:88:c9:55:d2:3a:af:da:95:61:
d1:4b:3e:27:70:73:6b:f6:12:01:fc:bb:d6:c1:e0:
02:e8:ca:c6:cf:5b:f7:75:d4:e1:b6:55:b1:f5:02:
89:7e:c1:c7:d2:12:ef:31:f6:9b:a8:44:96:2a:42:
6e:03:54:b2:b2:59:3d:07:a1:9a:27:1c:72:6e:32:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:43:3D:D8:FB:31:F7:38:85:3F:0A:60:25:08:10:42:B0:A9:4B:82
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ACE063ECB20311ED893CB7CAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:38:58:46:99:58:06:68:83:99:21:b3:5e:37:d1:64:6d:e0:
83:26:6c:73:64:c8:5e:fd:ca:7c:87:da:ea:86:89:b1:f8:a2:
ca:51:b2:3a:fc:0c:1b:11:64:01:3a:67:21:1b:68:09:34:b9:
69:b6:ca:ed:22:20:99:30:94:1f:5e:c0:37:de:31:94:ed:70:
6d:be:be:28:e9:94:fe:83:ab:32:ff:a1:bc:31:58:05:eb:d7:
07:2c:6a:27:cf:c9:18:46:0e:5a:0c:ef:dc:74:8b:5c:c6:d4:
20:b9:82:50:41:be:db:25:f8:8f:f2:be:74:72:3e:86:1d:59:
99:a9:70:fa:dc:e3:55:0e:aa:52:bb:fa:40:2b:b1:80:35:8c:
fc:3d:68:62:3c:1b:ab:cb:f6:95:7a:b2:a7:a4:7b:ad:99:56:
06:9d:ec:ce:c9:56:ee:c7:a0:b3:64:1b:15:98:39:9e:82:63:
a0:62:18:0b:d3:c7:03:8d:8b:4d:30:82:0a:e4:bc:93:cb:07:
de:79:89:0b:66:78:df:54:41:bf:97:c8:ff:24:da:b7:0f:46:
2c:a4:fc:8f:1d:ed:f9:ab:a6:f0:38:55:e1:f9:93:89:2d:51:
c2:1c:a7:82:ca:58:f4:d5:4a:ba:9f:f1:b4:a7:94:49:e9:22:
3c:1c:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org