Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C24DBD0EB20011EDB27B86C2F1222468.roa
File: C24DBD0EB20011EDB27B86C2F1222468.roa (raw, json)
Hash identifier: 7W8zv0EBjzIHf7sOXDGlOUVEcTO0L8jY1QrGi8FmkzM=
Subject key identifier: 28:12:73:94:FD:A9:97:EE:78:B8:82:F4:66:FA:89:0B:1D:55:62:1C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A42
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C24DBD0EB20011EDB27B86C2F1222468.roa
Signing time: Tue 21 Feb 2023 15:59:45 +0000
ROA not before: Tue 21 Feb 2023 15:59:41 +0000
ROA not after: Wed 21 Feb 2024 15:59:41 +0000
asID: 61317
IP address blocks: 102.165.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:59:41 2023 GMT
Not After : Feb 21 15:59:41 2024 GMT
Subject: CN=63f4ea71-52ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:54:85:a8:38:60:6b:14:a7:6f:da:40:2b:
7e:49:3e:3c:69:77:a5:b5:2f:1f:94:1f:28:29:54:
b0:58:25:76:45:c6:ba:07:21:56:85:b4:6d:06:ad:
e7:c2:98:1c:d0:2d:52:8d:87:5e:85:64:8a:fb:46:
73:2d:8d:4d:92:c5:ad:53:b7:47:e4:21:ea:b7:a6:
5f:a1:d8:0a:8e:c7:48:62:52:5e:29:9d:b1:f7:c5:
bc:53:41:fb:cf:71:e7:27:27:4e:bb:f7:85:18:a9:
a0:fd:29:27:09:62:60:4a:16:61:83:fd:43:da:7f:
24:90:1c:dc:d5:80:fa:42:8c:49:87:96:4b:e6:28:
02:66:64:11:72:bd:f2:0b:28:ae:76:c1:dc:66:ba:
0d:e0:e0:94:9d:bc:49:60:53:d0:de:34:4d:2e:18:
a8:0b:ac:16:85:81:30:68:76:43:00:4d:6f:5c:e4:
1c:11:6d:99:b7:f0:ca:a0:71:44:57:68:f5:f2:95:
87:2a:e6:0b:6f:c4:37:84:e6:2e:99:7e:78:45:23:
49:12:e1:6b:2e:f4:29:a0:c8:9a:24:a7:8f:a4:87:
44:08:07:8c:2f:c3:e3:7c:5b:f3:ba:a7:34:7d:65:
de:43:1f:64:19:9e:a4:c1:f6:09:d7:83:90:de:0e:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:73:94:FD:A9:97:EE:78:B8:82:F4:66:FA:89:0B:1D:55:62:1C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C24DBD0EB20011EDB27B86C2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:dc:28:df:c2:86:23:2a:45:34:de:fe:82:88:1b:ac:46:62:
a5:75:72:36:15:a8:fc:7f:25:5c:08:a5:b9:09:73:b5:d7:40:
7f:37:4f:e8:ca:8d:af:92:c3:a9:7e:d1:4c:e8:1d:76:a0:8d:
16:71:01:dc:bb:7e:2d:1e:aa:ea:14:fa:15:ae:1a:58:6a:06:
7a:c6:e4:dc:72:36:d9:a1:21:9b:8f:35:7e:fe:c3:80:f5:3c:
06:25:00:14:0c:f3:22:7d:4d:1e:ec:21:bf:40:7a:a7:f0:ba:
d8:06:f7:21:3b:2c:17:46:fe:d5:f8:24:15:c2:5c:87:3f:02:
57:8e:1b:89:05:89:0f:f0:84:c7:2b:67:1f:cb:63:c3:8c:74:
27:7c:fb:af:b5:3d:b9:60:bd:d1:08:63:d0:b9:29:b8:41:f8:
6c:d4:60:30:94:d7:85:24:d0:bf:d1:d2:4e:a6:a4:05:cd:a6:
59:96:25:fd:7f:a6:84:f0:29:c0:5a:d4:8c:3f:02:16:92:9e:
af:df:a1:2f:06:2c:3a:2d:47:c6:40:41:f3:eb:cb:23:40:8b:
db:0b:fb:76:96:83:c6:e6:50:bf:58:3e:21:34:fe:5f:48:b6:
b0:81:a7:66:d6:fe:12:04:df:11:32:55:95:99:de:59:de:3d:
af:0c:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org