Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2AFDCBE90E811ED8E21F3EDF1222468.roa
File: E2AFDCBE90E811ED8E21F3EDF1222468.roa (raw, json)
Hash identifier: U+PEbrg/cW08FgNDyyRzkuBJdEuo8o5xgpuKcIJwb1A=
Subject key identifier: 55:CF:39:2B:0F:7A:36:03:97:C5:7F:64:F8:72:E3:FF:9E:A5:27:BC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09C8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2AFDCBE90E811ED8E21F3EDF1222468.roa
Signing time: Tue 10 Jan 2023 13:15:43 +0000
ROA not before: Tue 10 Jan 2023 13:15:39 +0000
ROA not after: Wed 10 Jan 2024 13:15:39 +0000
asID: 35913
IP address blocks: 102.165.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 10 13:15:39 2023 GMT
Not After : Jan 10 13:15:39 2024 GMT
Subject: CN=63bd64ff-9462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:42:e6:5a:ae:d8:36:8e:96:4f:26:89:0e:5b:
d5:c8:81:57:ad:05:07:65:80:8a:f4:de:3a:19:17:
8e:0b:5e:22:90:f9:12:14:a6:53:cb:72:58:82:f0:
17:ff:41:b3:9c:8c:c6:62:8d:1c:67:70:07:df:29:
2a:97:1c:d1:1b:39:91:26:bd:e7:c9:c7:54:0f:cb:
50:27:b4:76:69:40:d4:ab:0a:ad:37:f6:86:cb:56:
e0:fd:6b:44:4b:0e:4c:35:1f:96:3e:ed:1e:db:b6:
1f:0b:c6:a0:e4:c7:2b:0f:74:43:14:21:2f:5a:f1:
60:37:49:ad:80:c5:06:9d:3c:d2:a0:0f:f5:58:af:
b4:6a:d0:41:c8:80:ba:7c:bf:11:87:bc:4c:22:90:
4b:9d:84:64:b2:7a:23:ad:dd:5f:22:9f:e1:36:89:
77:40:b9:a3:fe:d2:de:fc:7c:ce:8f:56:88:10:78:
d9:6c:31:2c:4c:30:c2:34:81:ce:22:89:fe:25:77:
98:8d:45:f9:62:92:2b:77:11:80:cf:69:9f:ae:e0:
ed:56:5b:0b:08:ec:c8:4e:12:5c:33:65:5d:62:39:
98:e1:f0:e5:15:47:93:10:ef:37:09:bd:21:a3:1a:
2b:2d:50:b3:2e:a5:91:96:fb:7d:a7:2c:6d:1c:ed:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CF:39:2B:0F:7A:36:03:97:C5:7F:64:F8:72:E3:FF:9E:A5:27:BC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E2AFDCBE90E811ED8E21F3EDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c9:0d:b5:65:b6:36:96:a3:4c:c5:5c:dd:a8:da:f4:cf:04:
3e:d9:1b:4e:7a:01:09:e7:7b:b9:9f:f3:7f:35:d6:01:a1:fc:
c7:00:19:2a:ae:ef:7a:19:da:0b:6a:20:e9:28:50:ba:3c:09:
bc:ee:1e:43:34:60:34:8a:d8:c2:0c:94:c3:2d:42:ba:a9:c0:
93:f9:f4:ce:a0:18:c1:2f:c4:01:df:29:74:b2:4a:27:91:a6:
05:4d:4d:a0:8e:b8:d5:67:c3:c4:3b:59:98:29:08:72:57:e0:
75:dd:09:90:79:78:d0:e7:a0:6c:d1:1a:71:5f:46:a6:25:7b:
75:b5:44:a1:11:09:69:ce:7c:c1:dd:6e:1c:1d:80:ac:7a:ac:
95:3c:1d:5e:4d:d7:27:b8:be:ac:15:af:a6:ae:ad:30:38:25:
62:21:c4:f2:8f:94:36:e0:39:d9:82:c6:e1:15:43:27:47:49:
d9:a8:50:72:64:90:9d:b7:4a:dd:da:d9:88:7c:6b:e3:b7:cc:
f5:1f:4b:40:cc:08:06:f2:5e:45:63:33:76:9c:9e:ca:b1:73:
70:ea:5d:c9:31:8a:74:58:3f:fb:eb:7d:31:8f:73:bf:1a:2c:
26:f9:51:fe:25:a1:0b:35:ba:02:28:17:00:fe:e6:b6:83:4c:
3a:32:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org