Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFF5DE3AB20011EDAB16FFC2F1222468.roa
File: EFF5DE3AB20011EDAB16FFC2F1222468.roa (raw, json)
Hash identifier: FQ6/x4NpETys4j2FxadoM7Ut/wQiIgwGAfESRbha1cc=
Subject key identifier: 86:5D:9D:AB:CA:C4:C4:36:DE:2E:A9:61:DA:81:D0:EF:25:DB:CE:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A44
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFF5DE3AB20011EDAB16FFC2F1222468.roa
Signing time: Tue 21 Feb 2023 16:01:02 +0000
ROA not before: Tue 21 Feb 2023 16:00:58 +0000
ROA not after: Wed 21 Feb 2024 16:00:58 +0000
asID: 61317
IP address blocks: 102.165.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:00:58 2023 GMT
Not After : Feb 21 16:00:58 2024 GMT
Subject: CN=63f4eabd-b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:d3:9a:08:20:0f:40:d3:5c:b8:98:8d:88:
4b:ca:49:19:fe:c0:58:bc:8d:9b:9e:20:85:d4:0c:
05:c8:84:59:8a:cf:97:fa:86:7f:fc:52:1a:37:bb:
87:27:8d:26:fd:fc:1a:7a:3f:04:b6:81:a2:85:5f:
25:ec:26:2b:e7:ea:9a:f7:b5:cc:d7:1e:89:8f:5f:
d8:62:d7:d2:fa:5c:0f:2a:22:2e:17:a6:85:2e:f8:
3f:fd:62:6d:d5:16:4c:de:48:57:f6:c8:a8:61:16:
37:71:df:f6:71:84:ef:61:f1:da:cd:a0:62:7f:8c:
bf:92:40:b0:7c:0e:25:62:d8:58:95:78:97:5c:f3:
b1:01:a7:22:a8:c2:e8:d0:e2:31:3f:32:cb:34:69:
88:f0:eb:65:54:f8:3f:da:e6:c0:e6:35:59:0e:e3:
f3:11:d8:c2:e4:d5:e4:55:87:f2:d8:5e:8a:76:d5:
7b:63:33:27:1c:e0:81:ba:60:33:51:84:2f:40:a5:
d6:77:33:7c:2d:98:43:32:6e:c9:46:30:9a:77:b8:
40:4d:6f:19:dc:5d:ad:14:29:1b:0e:92:f3:08:2f:
3d:49:73:40:1d:1a:4e:d6:ef:2e:1a:f7:b5:5c:93:
0d:e5:66:8e:9a:fc:a7:7c:63:c3:c3:db:72:c1:f2:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:9D:AB:CA:C4:C4:36:DE:2E:A9:61:DA:81:D0:EF:25:DB:CE:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFF5DE3AB20011EDAB16FFC2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.6.0/24
Signature Algorithm: sha256WithRSAEncryption
be:56:1b:72:00:b4:01:77:04:25:e7:a3:75:64:f1:0b:c8:78:
b0:73:7e:8e:df:e9:fd:cf:44:b8:fb:27:80:dd:30:69:58:90:
70:8d:eb:0a:06:1e:b6:95:f3:ad:a4:cd:0a:61:29:b7:b0:5b:
81:43:9c:16:90:bb:ef:05:63:a4:ff:29:4e:6e:02:2c:da:af:
5a:3b:bf:df:d6:7a:a4:38:a8:fb:e2:65:25:53:5c:c6:80:ff:
f9:54:de:ee:20:ee:6d:20:12:2c:c7:d1:79:18:9a:aa:99:5f:
97:f8:b9:00:60:10:6b:d1:0d:2b:9b:8f:99:02:6d:8f:c8:60:
a7:3b:30:53:31:b6:37:8f:c4:2b:aa:8b:31:ce:52:c1:82:14:
c7:1d:a0:ba:41:99:c9:22:17:e6:7f:c7:42:df:5a:df:88:25:
d3:d5:28:0d:49:87:7e:b7:29:b9:85:da:44:a5:25:97:26:94:
3b:00:1d:e0:f4:02:35:6b:5d:e5:1b:97:2d:6b:0f:13:0f:6e:
3c:55:fb:66:3e:c2:6a:10:e7:c8:b2:bd:9a:24:fe:34:46:10:
54:dc:97:1b:db:d2:85:0f:dd:cc:e0:34:6f:ea:4e:b7:6d:9d:
69:30:cd:e4:9a:ad:96:93:02:e9:dd:98:83:c7:60:36:e4:5e:
09:81:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org