Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D99D932CB1FF11EDBD90F5BFF1222468.roa
File: D99D932CB1FF11EDBD90F5BFF1222468.roa (raw, json)
Hash identifier: sYonusBva296tpqEu0PQnA10JhyNHCIN4t/D79nhXLQ=
Subject key identifier: 94:F0:93:21:63:B3:89:FD:F2:1A:E9:34:87:50:38:6F:1F:44:4E:A5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A3A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D99D932CB1FF11EDBD90F5BFF1222468.roa
Signing time: Tue 21 Feb 2023 15:53:15 +0000
ROA not before: Tue 21 Feb 2023 15:53:08 +0000
ROA not after: Wed 21 Feb 2024 15:53:08 +0000
asID: 61317
IP address blocks: 102.165.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2618 (0xa3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 15:53:08 2023 GMT
Not After : Feb 21 15:53:08 2024 GMT
Subject: CN=63f4e8eb-66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:43:8a:51:69:07:07:04:05:05:3d:df:be:
83:92:9e:4b:58:18:4e:55:47:b3:cf:4b:37:b7:12:
14:99:53:9d:51:dd:79:c4:8a:f9:da:01:3b:a6:eb:
89:e3:e2:06:9a:ca:93:3b:b2:a7:0f:48:99:89:3e:
5a:d8:0d:ad:39:96:73:3d:ca:d7:5b:13:f8:55:ea:
19:ff:6f:85:32:ae:57:7d:72:24:53:71:d9:1b:e5:
30:6f:76:45:14:dc:57:5b:04:f4:4f:ac:93:db:6e:
ac:f7:bd:30:14:a6:8d:5c:1a:37:54:e7:1f:83:81:
a3:54:c0:bf:34:85:a7:08:1e:a9:f5:e8:62:f3:73:
ac:b4:ce:1b:ed:28:0b:ca:2e:f8:a8:de:b7:99:98:
4e:2f:e7:8f:21:4b:e4:ea:6a:c3:fb:1f:4e:1f:db:
97:5b:51:33:9d:7e:da:f1:86:a8:f9:9a:70:5f:9b:
3f:8b:8d:76:81:36:48:e6:16:5d:0e:d5:c3:39:9a:
20:68:18:f0:ef:08:36:23:09:03:ab:af:47:e1:a4:
9d:7c:8a:f0:07:8a:7e:80:fe:96:28:1a:7f:77:7a:
eb:4d:64:56:18:f8:9a:d0:87:8a:b7:45:29:9a:de:
5f:fc:6c:b2:5b:62:bd:fc:2f:63:1e:37:b0:53:ae:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:93:21:63:B3:89:FD:F2:1A:E9:34:87:50:38:6F:1F:44:4E:A5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D99D932CB1FF11EDBD90F5BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d1:c3:d6:3e:f4:da:b1:50:4b:cd:39:30:3a:d2:6f:76:0f:
98:93:67:16:5c:56:78:fe:3e:19:3c:ce:96:99:31:c0:c2:7e:
93:ae:72:a2:d3:56:46:8a:72:73:b2:45:b2:3b:da:d0:b8:8a:
46:ff:64:e9:65:b2:dc:83:eb:29:a1:01:7a:15:2a:34:e3:11:
e1:34:22:0b:20:99:b5:10:0a:db:fb:6b:14:0b:da:16:a6:76:
e7:80:3e:e5:bf:5b:1d:20:6b:ca:82:d9:18:94:2c:d8:1e:9d:
06:2d:91:7c:52:fa:fd:76:13:89:66:11:bd:c9:8b:4c:e8:c5:
0a:62:5a:44:c8:8b:d5:1a:26:05:6e:66:ab:ad:26:47:f0:52:
57:ad:57:31:6d:4f:ef:ed:5c:40:48:d7:a2:ae:cf:c0:03:18:
d2:5b:1e:fb:6e:e0:83:66:4f:fc:3f:1e:25:c8:e1:8c:dc:b2:
68:62:93:b8:64:46:e9:79:88:5e:73:2b:de:b4:0d:cc:34:73:
01:83:36:1f:be:fa:2b:02:01:35:bc:92:44:36:b1:0b:a2:36:
51:4c:6d:cf:af:5a:4b:98:85:f1:22:14:2e:25:a4:c9:e3:aa:
ec:bd:5a:75:2f:9f:b9:9e:37:20:0e:30:9e:0a:9d:74:55:41:
d2:39:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org