Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E77A4E6AB20211EDBD5699C8F1222468.roa
File: E77A4E6AB20211EDBD5699C8F1222468.roa (raw, json)
Hash identifier: Jx6P2qXPlrU2qtjj5X/ffmYt5GJfKl/Be/gS5pLfxtQ=
Subject key identifier: 26:2A:7F:0E:8F:93:73:04:3B:9B:12:C6:70:1A:8A:CD:56:47:FC:A0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A55
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E77A4E6AB20211EDBD5699C8F1222468.roa
Signing time: Tue 21 Feb 2023 16:15:06 +0000
ROA not before: Tue 21 Feb 2023 16:15:02 +0000
ROA not after: Wed 21 Feb 2024 16:15:02 +0000
asID: 61317
IP address blocks: 102.165.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:15:02 2023 GMT
Not After : Feb 21 16:15:02 2024 GMT
Subject: CN=63f4ee0a-71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:0e:1f:f2:3f:a1:0f:2d:8f:39:ee:5b:c0:
67:e8:05:b0:ab:63:dc:64:78:49:cc:9e:14:08:73:
99:02:9e:aa:eb:d0:ec:d4:eb:3a:53:d9:05:75:74:
c9:dd:9a:1d:4f:74:a9:0a:78:91:11:66:31:1f:40:
70:12:34:c0:47:8f:c4:09:73:16:83:aa:bf:27:b6:
e8:42:d2:82:0b:89:c6:38:9b:20:fb:e3:7c:ac:8c:
a1:17:e0:10:62:f0:e8:e7:4a:46:f2:e4:2c:21:83:
72:ff:4d:c2:a2:f0:1a:e1:e0:a0:2b:34:4e:cb:5f:
c7:f3:5e:f8:46:55:7a:79:1f:30:c7:e6:56:5b:8c:
ea:05:88:0d:41:ff:0e:b8:ea:0a:f2:61:99:06:b0:
16:ae:7a:27:ff:b2:e6:ec:9b:66:62:f9:e9:dc:57:
b7:14:fd:cd:f7:2d:a7:d3:ed:1b:5b:70:b7:88:a4:
e2:cb:d9:f7:d9:4d:f4:d7:1a:76:25:d9:7d:46:7c:
4f:e4:ee:7b:60:03:da:19:05:be:3b:42:6b:8f:8f:
2d:f7:9c:2e:9c:50:5b:25:cf:73:7d:81:5b:79:6c:
f6:f7:93:7f:e9:6f:df:a3:a5:44:1f:97:62:78:63:
27:db:96:25:79:a5:e6:99:14:bc:f9:f4:e8:b8:6e:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:7F:0E:8F:93:73:04:3B:9B:12:C6:70:1A:8A:CD:56:47:FC:A0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E77A4E6AB20211EDBD5699C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2f:c8:63:f0:84:05:69:37:48:3a:76:4f:7a:f6:31:72:e6:
3c:d3:79:7e:c6:dd:30:c6:96:83:f3:76:a6:ad:fd:87:60:63:
45:29:7f:11:f7:32:d7:6e:a1:49:3e:09:90:b4:da:de:fb:99:
bb:bb:72:11:12:fb:b3:cb:5b:84:a0:c1:99:a1:95:a3:2b:ea:
09:3e:75:fa:84:eb:ef:a6:92:1a:77:5a:a0:b1:c0:79:61:2c:
c3:06:77:81:3f:e4:eb:2c:6c:35:c6:bd:6f:bf:fa:3a:d1:b4:
ae:53:28:57:81:c2:4d:c8:21:b6:c5:02:c9:47:ce:c3:8e:b6:
4f:e2:98:26:03:53:f6:67:e5:5e:89:7e:3f:f5:23:ee:f1:c5:
6c:bb:90:47:a3:f3:d9:fe:bf:c9:23:33:ab:86:ae:7f:55:f0:
26:b7:c7:bf:1e:e4:d1:03:f2:f4:22:01:f8:00:34:10:2d:6b:
4e:1b:d7:8a:db:d2:12:69:a4:a4:35:77:c4:7a:c4:5a:57:1d:
6d:df:57:61:65:52:e5:5e:38:89:0e:c3:2f:69:44:bc:a3:ba:
0a:fe:ce:9c:69:18:5a:66:b9:ff:46:25:da:de:77:ec:42:21:
7a:bd:2a:88:6b:4e:bd:e0:48:7a:88:24:59:69:60:74:a8:c6:
d4:e2:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org