Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
File: DDF5A8843E7311EC91E6DE53D8A014CE.roa (raw, json)
Hash identifier: S7xk8Oh+xmJ6vUhaNkzFXkL8WaPZ+BbuJjlqmalAv0w=
Subject key identifier: 6A:4C:1B:35:E1:59:95:AD:BC:4B:A7:56:AF:BC:63:0F:14:08:26:D8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0540
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
Signing time: Fri 05 Nov 2021 20:06:31 +0000
ROA not before: Fri 05 Nov 2021 20:06:26 +0000
ROA not after: Sat 05 Nov 2022 20:06:26 +0000
asID: 397423
IP address blocks: 102.165.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 5 20:06:26 2021 GMT
Not After : Nov 5 20:06:26 2022 GMT
Subject: CN=61858ec7-8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:51:0d:87:41:33:28:45:93:da:a6:59:f4:
7c:17:92:17:e2:13:e9:7e:45:68:0b:a8:56:a0:c7:
a8:5d:13:2c:10:86:34:2a:cd:70:76:28:f4:1b:96:
2c:45:2d:26:87:d9:52:c7:90:c3:36:2b:76:4e:6c:
cc:f1:8f:79:a1:43:0d:5e:24:4e:94:1a:e0:80:21:
e9:5b:3c:a2:c7:be:76:56:46:9d:0c:25:f7:72:9f:
8d:4b:53:fe:2f:ea:52:9b:7d:50:de:e2:95:f2:8d:
c3:dc:70:4e:a7:f9:01:62:54:4a:cc:67:76:4f:5f:
82:02:31:ec:94:36:5f:9b:7f:df:28:b8:21:0f:9d:
8c:ff:92:bc:0c:8d:e4:23:ae:bf:1a:a2:24:44:6f:
aa:1c:f2:46:53:4a:67:2e:2e:3e:93:01:f9:a6:77:
16:9e:f7:02:be:4d:15:df:48:53:b9:64:e5:36:3f:
b6:e3:5e:d1:0c:59:ba:0b:1d:87:90:58:34:f8:a0:
ce:0c:ed:a8:0b:a3:d0:b0:22:8d:99:16:b3:4d:80:
96:66:bf:14:89:02:41:cb:78:3a:27:09:55:06:71:
a3:1d:cb:fa:c8:c4:e4:07:c3:fc:a5:39:85:aa:fc:
28:18:15:b6:57:80:b5:6e:ca:c0:5f:2f:1d:b9:e6:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:1B:35:E1:59:95:AD:BC:4B:A7:56:AF:BC:63:0F:14:08:26:D8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DDF5A8843E7311EC91E6DE53D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.4.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6f:b5:65:e0:e3:05:eb:a4:06:b0:3e:89:f4:b2:57:fd:b1:
86:25:1b:77:d3:36:3c:7a:cd:36:2c:17:44:54:82:44:6e:db:
c5:65:a3:f8:9b:9f:2f:89:04:4a:56:8d:c8:92:b6:ae:fe:54:
a1:48:fb:59:7d:e9:90:e4:ba:07:f1:82:a4:37:76:4b:22:57:
3b:87:0a:36:4f:ae:d8:90:fb:cd:bf:42:88:d3:5b:83:83:18:
6c:4e:34:bf:ea:aa:32:95:3b:1d:21:26:ed:99:00:f0:0e:2a:
df:ff:15:13:1d:dd:11:9f:a9:1c:cf:bd:6d:58:2e:3f:8f:40:
25:c1:8c:74:0f:b6:f6:9b:29:03:c7:a9:8b:28:95:48:47:e2:
b8:2f:7c:46:84:27:a4:14:2f:bd:f9:8d:a7:89:7d:c1:19:94:
31:4f:eb:1e:5f:b0:7d:d0:01:6c:39:35:3f:74:27:48:a5:f5:
35:38:b8:29:f5:a1:d2:af:20:0f:a7:81:95:cf:ec:2a:b0:98:
ce:25:6e:fd:a8:40:81:d0:2f:9e:d6:45:1f:2e:2c:bc:2d:e9:
da:74:8a:c0:da:27:53:45:62:01:e5:1c:30:d8:e3:16:47:d6:
39:0a:b1:a0:65:80:ad:c6:e2:de:cc:b7:1d:fc:2c:46:57:a0:
af:ab:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org