Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDAB340CB63C11EB883C6F70F8AEA228.roa
File: EDAB340CB63C11EB883C6F70F8AEA228.roa (raw, json)
Hash identifier: 7z9FRyPDiRg3xOfk8qkrL+Uezkw8QWyyc0qnJNqFFWc=
Subject key identifier: 45:D7:57:D6:D1:B2:59:AE:1E:C5:4C:FF:BE:09:A0:5D:FB:10:00:94
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03F6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDAB340CB63C11EB883C6F70F8AEA228.roa
Signing time: Sun 16 May 2021 11:50:37 +0000
ROA not before: Sun 16 May 2021 11:50:31 +0000
ROA not after: Mon 16 May 2022 11:50:31 +0000
asID: 270353
IP address blocks: 102.165.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 16 11:50:31 2021 GMT
Not After : May 16 11:50:31 2022 GMT
Subject: CN=60a1070d-fa84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:0f:3a:43:1a:a8:8b:a3:b3:a8:a3:b5:e8:
ba:b6:bb:f5:e4:78:50:1c:a7:3f:84:a4:a8:d5:c2:
75:34:1e:ad:8d:86:7b:56:d1:e8:f2:79:47:90:4b:
a8:34:4b:ff:f2:48:e3:26:f7:fe:8f:cd:05:1a:2b:
a5:1d:07:4a:ac:6f:ae:a9:3d:1c:b7:1f:d7:c6:de:
ca:77:69:8c:9d:23:cc:a3:5c:2e:be:7e:68:ef:c9:
ac:56:1d:f5:fa:97:fe:5c:39:30:21:38:71:4d:54:
f9:78:fc:47:b9:8b:d5:96:cd:db:37:73:ba:ea:4a:
b3:36:c1:f4:60:26:3a:4c:e7:bd:86:60:82:a7:2c:
1e:38:4b:e3:28:a6:86:e7:24:68:ab:dc:5d:23:7b:
78:61:bf:ac:1c:5e:83:20:ef:44:3b:5f:d2:51:c5:
82:10:eb:20:29:d9:24:a7:50:80:37:9a:46:eb:5a:
95:c7:b8:51:fd:7b:6b:dd:3f:c2:fd:0d:ab:98:98:
ac:f2:37:72:7f:48:22:25:bd:6f:5c:eb:86:0e:cf:
45:8b:80:a5:d7:62:bf:77:e0:8f:24:6a:77:0e:82:
e3:68:45:92:4f:8f:85:97:56:c0:81:8d:c3:a1:7d:
f6:b4:73:79:84:dd:d1:65:bd:73:dd:ed:33:3f:e2:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:57:D6:D1:B2:59:AE:1E:C5:4C:FF:BE:09:A0:5D:FB:10:00:94
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EDAB340CB63C11EB883C6F70F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:df:49:85:75:44:73:0d:e5:62:f2:35:a3:a0:1f:1d:f3:85:
5d:b7:cd:ea:6e:bf:5e:db:75:39:cb:ea:ab:1a:ca:a0:c0:d1:
59:83:bd:a7:3c:23:8a:ea:7a:2f:ff:fb:61:1d:f8:97:4f:7b:
e8:1e:3e:6a:d7:93:22:c4:5e:14:09:1e:78:fd:00:04:1a:ed:
c2:47:86:03:d4:00:48:a0:3a:86:9e:8d:f2:85:4a:20:69:a5:
44:aa:d6:71:90:06:a6:89:cd:7c:af:d9:73:d3:1f:66:63:c6:
76:11:67:cd:d8:32:25:66:fd:12:d4:cf:68:f5:d4:1d:50:a3:
a3:6e:c9:a4:78:e5:cd:69:88:71:a4:e8:1b:45:9b:44:44:cc:
69:28:32:30:c5:0e:19:a1:86:3d:de:1f:35:f4:22:01:a3:ed:
45:52:cc:90:4a:43:8f:5e:3f:4d:5b:73:9e:17:75:a3:9d:f9:
3d:32:b6:85:91:58:5a:5a:03:6a:fa:a4:54:c3:51:d3:14:b2:
92:a4:f0:78:1f:08:80:b3:11:2f:29:d3:8a:b3:ff:54:a6:9f:
1c:22:0d:e8:fb:43:84:4d:ac:fb:8e:ea:21:c1:4f:77:70:aa:
c0:8e:ba:a0:4f:b9:60:71:6f:fa:a8:fd:61:44:3e:c0:05:db:
82:2a:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org