Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA4FB864492C11EBA3876351F8AEA228.roa
File: EA4FB864492C11EBA3876351F8AEA228.roa (raw, json)
Hash identifier: VJOOeUtozMM4W2f8wh+T+odEKJXWEAG5xVdfNCRZs7Y=
Subject key identifier: E8:66:C9:2E:A6:BF:67:FA:4D:F2:0A:F4:39:C1:6A:35:97:10:D7:8F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 030B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA4FB864492C11EBA3876351F8AEA228.roa
Signing time: Mon 28 Dec 2020 16:51:23 +0000
ROA not before: Mon 28 Dec 2020 16:51:17 +0000
ROA not after: Wed 28 Dec 2022 16:51:17 +0000
asID: 32181
IP address blocks: 102.165.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 28 16:51:17 2020 GMT
Not After : Dec 28 16:51:17 2022 GMT
Subject: CN=5fea0d0a-3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:40:2b:3a:fb:bf:f0:0a:04:fc:e2:8a:d0:
96:7a:b3:e9:c9:df:4e:ca:8a:76:a3:cc:7b:f1:b0:
9b:20:1a:b5:fd:e0:a1:2e:a4:47:fd:f2:a2:a4:32:
e6:43:64:f6:56:fd:e5:71:ad:a7:55:bd:b4:e2:ba:
a6:99:6a:db:6c:cd:3a:d6:63:56:81:c2:92:d8:62:
ad:50:ec:c2:4b:8e:4c:b3:01:58:7b:4f:07:05:83:
d5:54:a2:77:7f:bb:f1:07:cf:54:ba:48:15:92:a6:
eb:1c:90:a5:0f:16:fb:4f:29:04:88:be:08:bb:0c:
14:00:22:88:83:e2:ea:5f:a9:94:59:22:02:f0:4e:
23:b3:63:50:af:20:c8:ac:f8:09:d3:b8:42:f0:97:
6e:77:43:c2:a6:04:8a:bb:27:29:82:97:9a:d0:1f:
2b:34:fa:58:a5:f3:f6:37:86:17:72:be:46:33:41:
3b:3f:4c:9b:8a:b5:42:8f:cb:af:f4:8a:df:28:76:
ac:ec:d4:15:28:72:8f:f9:81:51:ea:51:ad:06:27:
93:cd:61:d2:1b:c0:62:93:02:4a:51:f7:e8:f2:68:
ca:75:4d:35:0b:d4:cf:9c:1f:b0:34:4e:66:ff:b9:
7b:07:f7:16:16:ad:a0:e7:de:ae:88:7d:6c:ff:4f:
43:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:66:C9:2E:A6:BF:67:FA:4D:F2:0A:F4:39:C1:6A:35:97:10:D7:8F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EA4FB864492C11EBA3876351F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.34.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5c:b7:88:1b:d4:41:19:33:ae:6a:7b:a7:78:e5:20:d5:ac:
1d:69:79:9d:cc:58:f2:1b:5f:d2:a5:1d:9e:4c:7a:3e:c2:2c:
64:d7:28:3c:56:1b:74:1b:38:e5:eb:05:3b:39:f2:14:11:45:
6d:26:1e:24:d3:9c:25:c7:23:af:d8:93:5f:ca:20:59:10:7f:
dc:28:f7:1d:05:44:2c:00:5f:e5:c5:0d:7b:6c:b7:2b:27:29:
92:60:86:ac:09:56:36:c3:03:ee:fe:b5:df:b3:9b:58:02:d3:
7e:6f:4a:a2:86:7a:92:b6:ec:f1:25:36:a4:a8:12:63:6f:c3:
20:45:7e:fc:a2:fc:85:b4:4e:13:7d:d9:ad:b2:58:32:ab:e4:
57:09:4f:84:38:ce:91:a8:45:0f:77:1d:55:d9:d7:4e:fb:da:
f1:54:7d:70:95:26:9b:20:a2:7a:cb:06:f1:c5:8d:4c:9e:ac:
46:21:5d:78:86:3b:fb:29:bc:51:49:85:34:c4:15:e7:ed:ef:
22:89:7e:da:4b:db:87:a5:b4:6b:9b:85:62:cc:40:c5:69:1e:
55:22:5d:58:a2:d8:06:f7:fe:77:49:f6:1e:34:10:15:af:50:
3a:fe:34:40:d6:a1:a7:ab:70:63:43:84:37:d9:a6:29:7b:eb:
6d:aa:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org