Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E831BA6AF42411EC96FFDAF8F1222468.roa
File: E831BA6AF42411EC96FFDAF8F1222468.roa (raw, json)
Hash identifier: ngZ6ZBsOVo3Wj6ZTsYXB9ybkWTgaqp/l6UZ67fR2UBM=
Subject key identifier: BD:81:64:ED:8C:63:EC:2D:E0:6B:5A:30:3C:3E:01:86:1C:99:24:8B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06B8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E831BA6AF42411EC96FFDAF8F1222468.roa
Signing time: Sat 25 Jun 2022 01:19:50 +0000
ROA not before: Sat 25 Jun 2022 01:19:46 +0000
ROA not after: Sun 25 Jun 2023 01:19:46 +0000
asID: 40676
IP address blocks: 102.165.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 25 01:19:46 2022 GMT
Not After : Jun 25 01:19:46 2023 GMT
Subject: CN=62b662b5-a1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:3e:c4:be:b1:e5:67:44:88:75:2a:69:fb:
1d:6c:cf:51:7a:c4:79:a1:ea:79:6a:a9:85:b8:09:
a7:c0:a0:3f:e5:b9:29:2d:80:67:0f:3c:cc:c1:19:
64:55:b8:4d:95:3a:89:15:8b:cb:ff:9f:48:27:2b:
d4:ed:c1:bd:77:9d:76:36:66:c7:f8:dc:dc:06:6f:
03:26:ec:e0:8b:2f:d8:ea:d5:c4:ed:c4:84:be:0c:
d3:73:ed:28:85:eb:b0:67:4b:3f:1f:a2:d7:0a:ed:
d8:b0:4d:b0:c0:94:6f:df:49:94:bf:54:06:24:01:
48:54:0c:a1:9b:fc:e6:57:50:a5:6b:84:d0:34:55:
dd:9b:f4:f0:d0:89:1c:c3:57:0f:2f:1c:3f:d6:0f:
c0:60:ed:6f:dc:34:8a:04:41:91:be:ca:dd:80:f3:
52:44:45:59:a9:d8:95:49:0e:b7:83:c6:4a:83:d0:
55:57:29:61:f5:c8:4e:9c:15:f4:f6:92:a0:a3:0d:
fe:04:48:11:18:13:f8:4b:5a:22:c5:6f:f8:42:c8:
cc:6d:2c:a0:15:70:70:76:41:7e:9c:48:39:0a:db:
24:99:5f:aa:cb:75:b6:25:43:ed:29:ed:57:f7:12:
79:10:83:10:3b:04:d6:2b:7a:0e:cc:c6:f1:20:42:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:64:ED:8C:63:EC:2D:E0:6B:5A:30:3C:3E:01:86:1C:99:24:8B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E831BA6AF42411EC96FFDAF8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8b:3c:c7:a6:e6:57:96:c4:86:fa:5b:c9:5e:0c:b2:b2:f4:
5b:8f:e0:20:4e:3f:51:05:f6:15:5c:9d:a0:b4:68:3f:c0:90:
fd:b8:cb:48:43:2d:d4:eb:8a:cd:c3:3b:2c:89:3a:49:17:d9:
4f:40:2e:c2:e4:1f:28:6c:5f:87:d7:6f:c1:b1:e7:cc:78:14:
be:ae:15:c1:d9:cc:e8:31:fb:f8:c3:56:4c:3a:9f:68:2b:52:
21:1a:77:a6:a7:ed:ce:26:81:8d:72:43:e8:a2:0e:72:55:79:
3e:11:e8:67:27:b0:7c:78:07:dc:3a:8b:48:65:bf:9c:1a:d6:
bf:94:37:6c:7f:d3:0f:e0:70:1a:34:2a:7e:08:f9:47:7d:bd:
90:70:48:c5:57:c8:5c:60:d8:4b:af:a3:cb:49:da:d6:2e:34:
33:4d:25:a0:18:33:0b:4c:8a:ea:5c:95:4b:92:4e:22:7b:9d:
55:d5:84:aa:60:76:a5:0b:b8:c2:ec:55:77:e8:eb:dd:08:c6:
e0:bc:3e:9f:63:90:6a:a7:02:7b:68:3b:ba:c4:5b:55:5b:e2:
a6:22:6f:47:2d:56:dc:a7:71:d7:fc:4e:f5:62:73:9b:fa:85:
ac:9d:c7:53:33:57:e4:9e:a0:84:fc:af:1e:ad:79:1a:35:7a:
d9:5c:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org