Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
File: C0891E8CE8CF11ECBA4F3FF9F1222468.roa (raw, json)
Hash identifier: Z0zR5sz5Y3h9QmDt0/eLdCpXToqs0iWGo//1xIcHfUQ=
Subject key identifier: 5B:57:B7:BE:92:B2:A1:AC:F2:F3:1F:E0:B9:F4:9A:62:58:F6:8D:C1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0693
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
Signing time: Fri 10 Jun 2022 15:12:33 +0000
ROA not before: Fri 10 Jun 2022 15:12:27 +0000
ROA not after: Mon 10 Jun 2024 15:12:27 +0000
asID: 46562
IP address blocks: 102.165.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 10 15:12:27 2022 GMT
Not After : Jun 10 15:12:27 2024 GMT
Subject: CN=62a35f61-6104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:27:bc:31:9d:3b:e1:7e:a6:24:39:a2:c6:
15:22:94:31:4a:30:51:24:71:27:13:08:73:ed:90:
f5:03:6e:79:ee:72:18:26:48:c8:0c:72:e5:8b:20:
d5:5c:a3:0b:ff:19:24:da:0d:4c:bb:5e:8d:34:ef:
45:f8:dc:0a:45:b1:8f:28:a3:b4:6b:be:6d:09:44:
42:75:2e:72:b2:8d:32:0d:04:26:57:e2:57:ab:c4:
a9:94:27:a2:80:d2:83:1d:30:de:da:60:bb:35:ac:
71:e6:e6:e8:7a:80:ee:1e:2c:0f:12:a1:65:88:29:
a6:db:94:f0:40:fd:f5:88:91:be:7e:57:46:0a:2e:
94:cb:49:b2:af:94:c7:0e:47:cb:b1:06:83:08:ca:
22:ae:bf:5f:40:43:bb:e1:51:c7:93:6c:e3:88:4e:
40:9f:e5:7f:95:20:fe:fd:4e:2b:ad:74:b5:db:82:
dd:ff:5a:15:6e:6a:a6:96:57:42:fb:c6:8b:f0:4b:
18:3f:3e:ed:53:cc:cc:fa:46:07:e6:de:bc:2d:1d:
ef:18:42:78:9a:13:86:70:43:74:71:29:d3:48:22:
21:a0:c4:ff:b4:60:59:6d:8c:e2:c7:e8:e0:88:d0:
88:c7:76:51:cf:09:c9:d1:8d:bb:f9:f6:7e:5a:53:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:57:B7:BE:92:B2:A1:AC:F2:F3:1F:E0:B9:F4:9A:62:58:F6:8D:C1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C0891E8CE8CF11ECBA4F3FF9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.42.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:91:70:82:8c:93:05:80:13:f6:63:84:c0:db:4c:4a:a7:f0:
f6:74:92:f6:ab:a5:b8:7a:fd:ad:84:14:e0:c3:19:cf:82:35:
3b:ec:0f:14:df:90:50:b2:c7:33:94:47:82:6c:34:72:95:e5:
b0:59:c9:86:2a:dd:a1:96:2c:fd:77:ce:a2:a1:b9:d1:8e:d7:
ca:32:d8:51:a6:ba:0d:15:11:13:9a:7c:02:bf:fb:28:64:7e:
46:7a:ed:c3:1f:9b:1d:79:c7:96:7b:24:ad:6f:21:59:a5:f9:
08:3e:5d:f1:f1:b6:3e:84:fa:a5:d4:d1:52:e7:f2:e7:86:05:
af:92:a1:ee:6b:fb:24:45:5d:29:a6:7a:f0:b8:5e:e6:44:29:
ab:a7:c4:24:89:19:e9:7e:76:5b:78:ad:fa:2c:0f:71:c4:af:
cf:90:24:9d:34:ae:ad:b1:9b:f6:15:5c:08:4c:8c:c5:8f:ac:
43:9b:d4:61:ae:c1:29:d7:d2:da:4a:04:95:91:61:db:e9:69:
3c:a0:c3:53:5d:90:24:8f:a1:50:26:8b:f1:f1:80:a9:c7:d8:
fa:ab:b8:2c:4d:92:90:6c:06:e3:73:37:aa:12:3c:0f:8c:29:
d9:91:b0:32:ed:6d:b0:8f:18:f7:82:bb:9d:c8:7e:e9:0e:67:
6a:c0:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 02:24:13 2024 by rpki-client on console-fra.rpki-client.org