Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDA4BDB6778E11EC8F2150955A40D577.roa
File: EDA4BDB6778E11EC8F2150955A40D577.roa (raw, json)
Hash identifier: bLtK+0xtdXJ4RIh+l1MlWhncurQx+tKDF0FoFvOj8CA=
Subject key identifier: AE:FA:88:51:55:CE:B4:0A:93:75:D7:68:40:57:37:DC:2E:BD:50:A7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05B9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDA4BDB6778E11EC8F2150955A40D577.roa
Signing time: Mon 17 Jan 2022 12:13:50 +0000
ROA not before: Mon 17 Jan 2022 12:13:46 +0000
ROA not after: Tue 17 Jan 2023 12:13:46 +0000
asID: 212238
IP address blocks: 102.165.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1465 (0x5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 17 12:13:46 2022 GMT
Not After : Jan 17 12:13:46 2023 GMT
Subject: CN=61e55d7e-7a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:6a:37:ef:2b:70:04:18:35:db:16:17:34:
d7:44:9d:ff:ef:a1:09:16:ba:ba:f1:08:25:a9:1e:
f7:5e:d1:b5:f2:02:8a:dd:17:51:e1:07:e6:a9:49:
1a:0e:a0:ba:5e:70:df:7e:35:b9:9c:13:89:3a:33:
f8:e0:a4:75:6c:53:93:13:3b:bd:e6:e4:70:c2:8e:
d0:e4:55:a9:b5:27:13:ae:d5:46:99:40:f9:5b:37:
f0:da:41:8b:93:73:a7:d1:4e:16:1e:5b:01:61:25:
48:59:92:34:d7:b3:f9:36:65:33:06:a3:3a:e8:67:
26:34:49:2b:10:5f:7d:ae:c5:d4:87:d7:ed:b7:0d:
e4:2a:c0:29:60:8f:b3:44:c1:d5:3b:a6:cd:19:3c:
31:8b:ed:5f:c1:cf:76:b8:22:a6:f4:dc:1f:71:8d:
61:93:ad:35:e7:49:a6:2c:8a:71:28:7b:b3:f9:1c:
7d:61:db:ce:f9:1b:9d:25:f9:f5:7d:3f:af:e3:90:
08:f3:cf:fd:92:cf:b7:7b:67:9a:99:8b:76:7f:da:
80:3c:6d:da:52:b4:0d:39:0a:0b:42:ad:3a:92:5c:
1c:6e:af:eb:cb:c6:2e:86:38:e3:f1:45:83:59:4f:
23:0f:47:88:8e:d4:b6:8f:0f:2d:17:2c:d4:ff:4e:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FA:88:51:55:CE:B4:0A:93:75:D7:68:40:57:37:DC:2E:BD:50:A7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDA4BDB6778E11EC8F2150955A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.36.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bd:8f:91:21:2f:e0:d7:e6:16:6a:91:5c:c7:0b:d1:c6:2f:
0f:89:3b:86:ee:42:8c:dd:c7:a1:90:fb:4f:60:39:06:80:07:
af:9c:b7:38:3c:59:75:02:11:e3:4c:2c:b0:1d:22:da:14:4f:
a6:d4:70:71:b1:c0:00:f0:cf:fe:38:78:b8:2d:f7:71:16:e1:
38:5a:25:a8:4a:71:f4:9a:64:8b:3d:64:65:69:16:ee:5c:6f:
09:44:07:8f:b7:7c:4b:74:5e:ae:00:05:61:b8:37:a9:b2:6d:
6f:ee:25:ed:41:05:fb:6d:f2:b7:c3:e9:26:d5:77:93:f4:fb:
b6:92:fa:9e:a2:16:b6:3d:61:db:c9:f6:67:76:d0:8c:66:57:
38:ac:8c:1b:5c:32:1d:fc:7b:47:0d:69:c5:66:e4:2f:e8:82:
d8:35:f4:62:d8:6a:e0:b5:a5:4e:c9:83:94:56:ce:80:ab:5f:
a3:49:31:08:d8:d4:fe:fb:fe:00:8c:44:a2:ca:cd:f1:fd:fd:
62:e4:99:67:3a:1f:14:2b:9e:39:27:85:49:bc:fe:b6:af:10:
10:b5:39:4c:df:de:d8:16:2f:79:a0:1d:a1:65:1b:42:f6:8a:
69:c0:15:f3:a5:cf:a4:84:c8:64:10:ce:c6:e6:d0:27:ef:80:
1c:65:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org