Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B36498A6B20211ED9347E9C7F1222468.roa
File: B36498A6B20211ED9347E9C7F1222468.roa (raw, json)
Hash identifier: ou41iKW/hmJxbQyhSMEHFdxbmMIhmSoA24ijNoETjwI=
Subject key identifier: 4E:4C:DA:12:71:BD:DC:DE:0F:22:A8:BB:5D:68:40:4E:D7:EA:D8:A8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A53
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B36498A6B20211ED9347E9C7F1222468.roa
Signing time: Tue 21 Feb 2023 16:13:39 +0000
ROA not before: Tue 21 Feb 2023 16:13:35 +0000
ROA not after: Wed 21 Feb 2024 16:13:35 +0000
asID: 61317
IP address blocks: 102.165.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643 (0xa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:13:35 2023 GMT
Not After : Feb 21 16:13:35 2024 GMT
Subject: CN=63f4edb3-d54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:ec:2a:75:2f:49:a4:46:11:1a:91:19:17:
c8:66:49:f4:41:8f:39:f3:55:a3:5d:d3:d2:1f:2d:
a7:2d:7d:33:1c:f7:c1:37:46:6d:1d:72:bc:ea:08:
46:41:b5:fd:4b:3a:9f:17:42:81:e0:22:d0:14:c8:
4c:b2:ec:01:1e:3a:88:01:0f:d1:44:0f:08:9d:81:
a1:85:29:26:8f:48:86:e4:79:a3:64:7c:68:95:11:
33:81:28:90:fa:ee:a8:a0:3f:92:b9:2b:1c:dc:86:
5c:4c:d2:8d:cc:07:ef:ee:4a:24:d2:70:e0:76:b2:
0a:bb:8b:a1:0c:7b:7b:19:4b:f6:3d:46:c4:e1:45:
fb:61:37:76:3d:fa:fc:ba:b1:fd:d6:29:a0:35:8a:
3f:51:a9:de:43:36:af:8a:2d:0c:4d:55:54:cf:1c:
cf:9a:c4:b4:8d:fd:8c:7c:38:40:6c:18:58:40:aa:
e6:01:01:f6:93:67:cd:e8:a1:19:5d:e5:08:6c:3a:
2e:fd:1b:1a:74:b2:2f:38:03:c8:01:06:26:55:a1:
52:90:f0:9c:4e:7f:44:be:20:3f:a5:c3:d8:2d:24:
b0:ae:14:03:bc:ef:e2:1b:2b:50:26:4d:5a:84:34:
3d:7d:91:e0:d0:39:5d:fe:f7:c3:7f:ff:13:c6:39:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:DA:12:71:BD:DC:DE:0F:22:A8:BB:5D:68:40:4E:D7:EA:D8:A8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B36498A6B20211ED9347E9C7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
13:39:db:15:cf:f3:8c:a0:7c:19:98:d4:fb:46:cd:be:8b:f1:
b2:de:47:36:5a:2f:5e:34:81:f0:ff:e8:a9:3f:d5:06:79:0a:
05:ff:bb:2f:9b:d4:3c:0b:5c:98:41:0f:a7:35:1b:b5:c9:6f:
25:cb:d1:bf:0a:66:f4:0d:8e:ba:23:0c:1d:62:c6:08:4e:fd:
f7:5f:81:a1:f4:72:7c:e7:c3:df:69:da:6e:a1:8f:11:29:16:
8d:8a:ce:e8:2a:8d:52:75:12:cf:87:3d:7f:8c:99:66:9e:d8:
78:08:85:aa:4c:6b:28:72:43:71:b8:08:93:54:b3:f3:0c:18:
59:24:1b:85:e1:10:9a:7a:2d:9d:81:15:f7:a5:6e:17:b1:35:
d1:55:39:e4:bc:2b:aa:5f:34:2c:11:57:65:f7:93:a2:4f:c8:
85:fb:7e:70:e5:9a:29:5b:8c:3b:f1:54:cc:3e:dd:74:52:c4:
e3:d0:ec:a2:25:fd:fb:8c:07:2a:c0:83:d5:f0:f7:f0:b1:ad:
4b:0f:8d:1e:41:9e:ca:19:74:8f:a3:23:c8:74:fe:15:6e:b0:
bf:a5:c5:af:4e:42:aa:29:41:7e:37:e5:30:58:dc:57:6f:20:
09:ba:fe:cf:bb:8d:a3:87:dd:cd:7e:73:bd:cd:e7:18:5d:1a:
3e:6b:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org