Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C576D54E16BE11EC9BF7A567D8A014CE.roa
File: C576D54E16BE11EC9BF7A567D8A014CE.roa (raw, json)
Hash identifier: /sp+jbiRYGldeAjDVZH9IdetR2PRw+KvZ1XvLLQALxs=
Subject key identifier: 3F:BA:C4:67:ED:7E:BE:A0:81:A5:80:D2:E2:43:E2:D4:76:F1:E2:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04E2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C576D54E16BE11EC9BF7A567D8A014CE.roa
Signing time: Thu 16 Sep 2021 07:21:55 +0000
ROA not before: Thu 16 Sep 2021 07:21:52 +0000
ROA not after: Fri 16 Sep 2022 07:21:52 +0000
asID: 1239
IP address blocks: 102.165.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 16 07:21:52 2021 GMT
Not After : Sep 16 07:21:52 2022 GMT
Subject: CN=6142f093-40a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:17:0f:54:9d:3b:36:bf:3f:6b:4c:4f:f5:
cc:d2:b5:4c:66:84:bd:d7:16:3c:84:3c:08:b7:a8:
89:1f:77:aa:2d:a7:c6:50:32:dc:f5:14:79:b3:5c:
50:22:f5:91:a9:02:e8:9a:7c:cf:0d:0d:f7:72:38:
70:32:17:5d:86:c9:20:1b:7e:78:31:ff:2e:37:d0:
b7:8a:16:64:9f:5b:98:1b:b7:98:d3:4a:24:16:05:
41:73:10:fd:3a:31:6e:e9:a8:f7:a0:c8:43:74:4f:
14:b6:7f:a4:89:1c:77:56:ba:ef:e5:be:79:ad:7e:
e7:af:a2:78:f1:01:5b:a5:20:f1:e3:07:a7:31:06:
63:72:56:ad:06:d3:fa:a4:14:a5:42:f8:77:33:17:
60:de:3b:00:31:32:5e:dc:a8:87:84:c6:cc:dd:4c:
cc:31:fd:19:bf:b3:34:30:6a:bf:25:c0:cf:11:b1:
84:82:23:70:a9:c5:41:53:fe:b6:8d:b9:0a:5e:f9:
0e:01:54:d9:9f:b4:3a:86:cf:37:97:b1:e4:45:b9:
f6:7f:4e:22:bd:d9:f6:b9:31:57:3b:13:6e:c1:2d:
67:86:e0:64:9f:06:92:b2:65:7c:23:70:66:6e:fb:
be:86:c1:25:f6:a6:04:5c:81:d0:0d:31:a1:19:4d:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:C4:67:ED:7E:BE:A0:81:A5:80:D2:E2:43:E2:D4:76:F1:E2:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C576D54E16BE11EC9BF7A567D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.50.0/23
Signature Algorithm: sha256WithRSAEncryption
88:4d:81:00:ae:92:a4:01:c5:fa:15:a2:dd:f1:21:21:be:89:
7f:d0:d1:f6:34:60:37:e9:63:e4:91:18:99:32:38:d7:31:94:
da:1a:4b:88:10:b9:59:66:35:b2:26:fb:f6:f5:c6:cd:71:0b:
27:c1:3c:0e:11:09:04:33:a6:67:6e:f7:44:56:8e:ee:e5:e4:
71:dd:26:c5:91:4d:b7:70:11:7b:f1:cf:77:c2:7c:a3:60:91:
86:87:8b:20:58:c6:5d:c8:de:fd:53:af:7c:50:b3:8a:56:e7:
f9:41:62:e7:09:1e:41:da:82:fe:e4:62:39:84:92:a0:74:94:
20:30:34:ba:68:af:3e:da:3b:9a:cd:96:57:d7:3f:79:26:71:
3f:cb:1f:25:a5:70:b7:64:88:e1:d7:19:3f:73:50:f6:c8:e2:
3a:41:4b:74:a3:17:fe:2b:b6:7d:e1:58:67:b2:8e:f3:52:9a:
88:e2:6f:cf:5b:b6:ef:cc:72:f9:37:88:9f:65:ed:1a:15:3d:
0f:4e:b9:67:87:e2:6a:3a:4d:e8:23:44:d0:48:21:e8:f2:08:
9d:ae:fd:d4:bc:fd:19:8e:1e:d6:a8:5f:5d:e9:30:f8:72:ce:
42:aa:f0:fe:91:c4:86:22:98:22:77:5e:6c:db:e3:90:24:14:
6e:ed:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org