Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
File: D7E882465F3711EDAB91D2CFF1222468.roa (raw, json)
Hash identifier: 98E/wMG3UgUb2FVnxXN26DVGtEmY+PQWwotXFY9wGuo=
Subject key identifier: 3F:9A:C7:91:6B:20:0E:11:12:67:35:D3:5C:89:3F:00:89:E4:E7:59
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 08C5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
Signing time: Tue 08 Nov 2022 07:34:57 +0000
ROA not before: Tue 08 Nov 2022 07:34:53 +0000
ROA not after: Fri 08 Nov 2024 07:34:53 +0000
asID: 212238
IP address blocks: 102.165.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 8 07:34:53 2022 GMT
Not After : Nov 8 07:34:53 2024 GMT
Subject: CN=636a06a1-9196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:30:50:77:46:37:59:1d:3a:0e:b1:f7:91:
ed:b7:be:55:9f:1f:2b:38:6e:f5:bf:bd:ce:e4:6c:
80:6c:b9:a1:82:5f:40:31:68:c8:f0:10:be:57:84:
30:9b:f6:2f:5f:78:b1:79:77:8e:d5:ef:17:82:ab:
66:60:51:5d:a0:b5:52:cd:f3:f7:ab:99:51:f9:4f:
13:c0:91:66:05:19:09:4e:8b:6c:ea:d4:4e:d3:0e:
65:d6:27:04:8b:3a:37:4c:9b:cf:c6:bb:af:c9:6a:
87:d6:8e:2b:72:0f:fc:51:3f:e6:ef:1f:11:39:93:
4c:82:4e:fe:9a:6c:2d:cc:09:b8:d4:30:3b:1d:83:
44:da:3c:86:08:4a:a9:06:50:2b:ac:90:db:38:3a:
d9:69:73:0e:04:30:71:7a:08:d9:65:38:1a:87:a5:
23:23:53:1e:b3:c9:16:22:47:97:7e:82:28:40:ca:
68:0f:75:db:a8:05:b0:b0:90:ce:b7:94:b4:f6:4c:
ab:4e:52:87:49:20:bc:25:6b:c5:11:58:51:f0:95:
22:3b:70:a7:1e:03:d3:a2:ae:0c:31:7c:32:c3:79:
d1:41:36:b4:52:1a:58:00:b5:c3:5b:78:6a:f8:95:
9b:45:49:76:36:1d:e7:ce:3b:5d:0e:67:53:f0:c7:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:C7:91:6B:20:0E:11:12:67:35:D3:5C:89:3F:00:89:E4:E7:59
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7E882465F3711EDAB91D2CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f2:e5:b9:84:42:6f:e4:e7:c1:29:c7:8a:22:5f:27:d0:4d:
c7:57:16:2c:91:0f:36:05:ed:de:3a:b1:cb:8d:31:8d:86:4d:
e9:65:6d:d2:f6:91:fc:6a:6a:14:d9:fd:76:5e:8c:53:06:6b:
94:13:d6:22:88:b5:24:fc:69:c8:56:05:a5:06:af:b3:9a:11:
4b:32:09:51:37:fc:c5:3b:03:9c:93:64:58:c3:0d:d5:41:30:
ed:5b:4a:5a:82:b5:eb:81:5c:59:46:3c:05:03:da:0f:7c:6f:
44:c3:46:3e:56:68:8e:31:2d:32:3c:e9:66:61:95:ca:27:4f:
4e:38:34:15:cc:41:56:8e:e4:f7:6d:bf:dc:ec:33:0a:a9:d7:
62:6d:af:07:f3:48:cf:c1:7d:57:16:a7:30:31:5a:a7:9a:36:
12:10:7b:b4:02:3d:91:94:89:4d:01:0f:b0:01:6d:50:1b:6d:
b2:fb:f8:98:25:15:6c:b9:70:3f:84:f3:80:04:7f:e8:b9:87:
6a:f8:8a:67:2a:ac:cd:6e:9c:d7:ea:91:e6:8e:6a:da:67:64:
c5:ae:db:c3:5b:0a:32:8a:ff:30:71:50:72:b8:a1:f2:19:f1:
a8:b7:4b:9d:d0:ea:33:05:c1:b4:3e:56:63:e8:43:20:5a:25:
6c:7c:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:43 2024 by rpki-client on console-fra.rpki-client.org