Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5CBFEFE9CD011EB8E58F33DF8AEA228.roa
File: E5CBFEFE9CD011EB8E58F33DF8AEA228.roa (raw, json)
Hash identifier: ipC8wwIrfI5XvoqjsYNnl/gzfzqbY0OkI5c7e1k1xe4=
Subject key identifier: 6D:52:20:1A:64:D0:5D:61:A3:EF:FC:2D:57:22:95:2C:5B:A0:40:33
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03B7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5CBFEFE9CD011EB8E58F33DF8AEA228.roa
Signing time: Wed 14 Apr 2021 03:24:19 +0000
ROA not before: Wed 14 Apr 2021 03:24:12 +0000
ROA not after: Thu 14 Apr 2022 03:24:12 +0000
asID: 207787
IP address blocks: 102.165.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 14 03:24:12 2021 GMT
Not After : Apr 14 03:24:12 2022 GMT
Subject: CN=60766063-6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:1f:ba:3d:ea:2b:c5:1c:7d:00:bf:3a:0a:
df:e1:70:20:09:a8:6a:81:d3:07:1d:9a:f7:f4:2d:
e4:a6:a8:2c:9f:21:b5:c9:1c:55:39:61:17:69:9c:
c2:0d:8e:39:57:11:fd:36:e0:de:3a:86:a9:c9:14:
a9:44:c1:37:db:80:5d:87:a8:9e:68:a7:c7:9b:ad:
89:8c:7e:a0:a9:06:0b:e3:46:53:04:a4:ac:87:17:
2a:8a:3b:c4:58:78:db:1e:e1:03:87:15:3b:4a:f8:
13:26:21:50:7a:37:5e:10:82:41:15:4d:96:f4:f0:
80:80:31:48:ef:43:9c:a7:7a:bf:48:9c:d4:37:d1:
98:c1:9f:fa:42:62:87:43:1d:1c:f6:8c:ff:53:22:
75:00:df:fe:5a:90:8f:12:53:42:97:aa:7e:20:0e:
8c:9c:ce:59:e7:6f:90:5a:37:33:e3:7e:51:f4:29:
40:b2:7f:31:20:9a:51:f0:6c:c2:0b:9f:12:07:22:
11:aa:27:02:e4:1e:99:30:e3:31:94:f5:df:10:05:
b7:b5:18:cc:05:7f:f1:6a:e3:77:ef:ed:55:ce:b1:
dc:db:82:0e:79:7f:fb:a7:5d:35:af:17:c8:5d:72:
72:89:2d:84:df:f3:0c:21:cb:54:15:f1:70:19:51:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:20:1A:64:D0:5D:61:A3:EF:FC:2D:57:22:95:2C:5B:A0:40:33
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E5CBFEFE9CD011EB8E58F33DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4c:a3:6a:49:dc:11:e4:23:92:9b:69:c2:e0:6f:e9:ce:ec:
00:e0:e0:d3:dc:c8:02:e9:62:a9:5b:fa:d6:2a:3d:c2:65:08:
bf:08:46:89:ed:29:d3:28:3c:98:3a:f7:1b:3e:65:0f:d3:f4:
ca:bd:19:de:e2:e2:28:57:f6:15:20:bc:d1:ff:ba:06:4f:6f:
9a:c4:87:ee:91:43:1c:1d:fa:f2:e7:e6:53:d2:f4:6e:d4:9f:
0f:1b:73:f7:4b:b1:53:ab:53:55:1f:cd:22:2a:63:03:b1:00:
72:81:64:c8:be:2d:2c:25:f6:0c:98:2a:73:0d:cf:77:1b:d9:
89:d5:df:8c:e9:ca:6b:f8:24:82:10:f8:44:17:9c:e3:15:52:
d0:80:88:6f:77:82:f4:0f:61:2a:1a:b1:3e:ef:da:d7:db:2a:
58:6f:97:11:b6:13:28:4d:5e:d3:c0:37:4f:29:32:f7:23:eb:
06:56:13:69:f9:bb:57:31:26:6e:7c:f2:b7:cd:8d:d6:84:29:
b9:e2:e3:23:b4:d5:a0:d6:a3:d6:55:ab:87:7d:6b:93:da:b8:
1f:c2:0f:54:39:a7:70:62:62:c1:25:b8:c9:41:be:0b:2e:3a:
da:13:7b:38:6f:f5:07:53:2a:2e:0c:99:d5:47:50:5c:22:e2:
a9:35:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org