Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BFE155FECA7511EB92FBFD14F8AEA228.roa
File: BFE155FECA7511EB92FBFD14F8AEA228.roa (raw, json)
Hash identifier: 6jsaRWgGpXHD4VzNlaBN4uSOUXXGmbomo6Klzqmt1Xk=
Subject key identifier: 01:C3:6F:3B:9E:4C:40:69:7D:C2:F8:43:F9:D2:85:40:D1:10:1F:7F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 041A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BFE155FECA7511EB92FBFD14F8AEA228.roa
Signing time: Fri 11 Jun 2021 05:27:44 +0000
ROA not before: Fri 11 Jun 2021 05:27:38 +0000
ROA not after: Sat 11 Jun 2022 05:27:38 +0000
asID: 3356
IP address blocks: 102.165.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 11 05:27:38 2021 GMT
Not After : Jun 11 05:27:38 2022 GMT
Subject: CN=60c2f450-0c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:c5:ab:4c:8e:90:d2:4a:45:00:89:68:fc:
1c:a1:28:34:f6:22:bc:a8:27:51:9d:25:7b:d9:89:
65:2a:44:7c:62:18:72:40:09:5c:b3:01:2f:0b:50:
fe:b9:d0:4a:04:f6:8c:24:72:c3:61:2c:02:e2:e7:
7c:4e:db:e6:b3:0e:a4:81:78:24:00:db:46:61:36:
7d:6f:1b:78:b1:48:4b:23:49:91:50:c7:cd:09:41:
d9:7e:72:ad:91:5c:72:c5:4a:e7:7f:66:23:94:dd:
7c:bc:c0:44:d9:e5:b6:4d:08:e3:a2:f4:af:52:b8:
66:c4:d2:ed:ee:4b:5b:1e:99:a6:fe:99:4a:4b:64:
54:6f:3e:a2:41:8f:71:30:c5:17:9c:e0:8d:f9:9f:
01:fd:c1:87:4b:a9:5a:a8:65:21:8c:f5:a0:37:43:
d5:9d:a6:70:a2:c6:5c:c7:7f:1e:e7:60:9f:90:8e:
98:89:3d:0f:12:e8:db:a1:0d:c9:c1:f4:9a:23:53:
7f:9b:cd:61:02:c1:60:5b:ad:f0:ec:20:50:f9:97:
92:5e:8e:98:38:58:e8:35:47:e9:e7:89:71:a4:16:
f3:06:3a:c7:1a:df:a9:d0:a8:1c:7d:f5:41:18:c3:
46:da:5c:79:61:db:85:26:6a:51:1d:b3:ef:c0:e9:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:6F:3B:9E:4C:40:69:7D:C2:F8:43:F9:D2:85:40:D1:10:1F:7F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BFE155FECA7511EB92FBFD14F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.21.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:37:83:ca:5a:5f:5d:6a:ac:c5:41:bb:14:c6:67:27:10:
56:e7:a8:33:6c:11:43:cb:2d:03:72:66:fe:a1:52:6e:61:6b:
b1:c9:a5:53:fe:b7:64:ec:42:fe:d2:79:ec:39:4c:3e:4d:57:
8d:c1:c6:b8:0b:3f:89:54:7e:4b:8b:1b:4c:48:d7:1e:a4:2b:
28:cf:9b:a5:7e:0b:02:c7:72:8e:0b:9b:31:0e:8d:e7:45:af:
5b:1e:3c:9c:09:c1:ef:82:c9:15:15:f3:cb:e8:0b:36:27:e0:
55:01:e7:82:53:3e:df:b9:97:3f:98:7b:f1:00:12:b4:f1:6d:
87:93:50:8f:f6:21:2e:39:b3:ed:76:a3:65:cf:73:3c:51:66:
c7:b4:cd:10:7d:b6:42:1b:5a:a5:fb:5a:49:0d:47:ec:d7:f4:
2c:05:0d:e5:ad:bc:b3:8c:f1:ea:24:23:99:28:13:30:6a:98:
8e:68:4f:31:c6:a1:71:98:c9:e2:26:cf:d3:a9:47:a6:d7:0d:
dc:72:00:72:17:97:5a:ff:b2:99:f5:59:3c:82:c1:89:94:a3:
fe:97:c2:00:8b:7b:0b:66:57:31:46:bf:43:66:fd:9b:c6:e9:
cf:91:01:02:90:83:bf:ba:e1:07:b6:17:5a:48:73:e8:a3:60:
ec:88:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org