Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E9EA8EB1F311EDBDDBBD9EF1222468.roa
File: F3E9EA8EB1F311EDBDDBBD9EF1222468.roa (raw, json)
Hash identifier: BVG2qBAddUBkAfoPIC94g0+MLqF7X1eBkVNhjJBW2Ck=
Subject key identifier: F8:35:16:0C:25:99:AC:5F:12:45:E9:1A:36:B4:01:DA:84:21:C4:D4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A34
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E9EA8EB1F311EDBDDBBD9EF1222468.roa
Signing time: Tue 21 Feb 2023 14:28:05 +0000
ROA not before: Tue 21 Feb 2023 14:27:59 +0000
ROA not after: Wed 21 Feb 2024 14:27:59 +0000
asID: 834
IP address blocks: 102.165.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 14:27:59 2023 GMT
Not After : Feb 21 14:27:59 2024 GMT
Subject: CN=63f4d4f5-5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:9e:b9:c2:66:c0:d9:6c:4c:c6:0b:03:ce:
ee:4e:17:d8:87:6b:28:0f:5b:6c:71:6d:7f:28:54:
3b:f3:63:b8:bd:5d:f4:1c:48:5e:0c:aa:6f:56:1d:
2c:aa:80:82:0b:81:83:1f:ca:a2:9a:4c:a4:d8:dd:
a3:eb:80:1f:02:7c:18:f3:31:18:2d:db:bd:a0:aa:
88:e6:c7:b9:64:21:7b:33:df:31:9b:ca:5b:16:b7:
8e:82:4e:a9:fd:f0:b7:ae:8a:93:6a:9d:dc:9f:77:
cb:48:58:01:72:5d:32:82:91:a2:ae:33:09:b5:1e:
69:53:81:db:b6:fb:6e:18:2c:6f:ee:7f:cf:fe:9b:
fd:6f:d6:af:e0:d4:e2:6c:92:b9:98:75:a2:75:a7:
6e:79:97:32:df:71:4d:54:9e:00:95:65:7a:f7:d7:
6a:57:a5:95:b0:53:b4:4f:95:33:95:27:c6:07:ec:
7f:7c:f8:6b:69:ea:81:e8:ce:27:ad:23:47:7b:78:
6a:49:43:2b:db:f7:27:7b:22:3b:25:8a:e5:48:9f:
75:ff:b7:2e:4d:91:3a:61:34:6a:94:eb:db:c6:57:
2f:89:9c:15:c1:df:91:f3:fb:6b:70:a3:08:9e:d7:
18:ac:d7:17:21:01:3c:1b:2b:6f:9d:a0:2a:a8:6b:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:16:0C:25:99:AC:5F:12:45:E9:1A:36:B4:01:DA:84:21:C4:D4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F3E9EA8EB1F311EDBDDBBD9EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:df:76:5b:57:8d:65:fc:cf:35:17:0f:01:b3:c0:3b:ef:35:
b1:5b:f0:03:c3:e5:be:43:a7:a1:89:f7:d9:2b:8e:27:95:29:
f1:0c:c1:5e:f8:96:06:52:23:b3:69:60:5f:ea:6d:c1:fe:0d:
ff:80:e7:05:8e:7a:9b:94:aa:7e:04:3f:73:b6:e4:40:b1:51:
72:d7:77:7b:4b:0d:37:ff:8c:ac:03:da:f0:61:1f:f7:f9:6f:
aa:0c:2d:71:1a:4c:bc:85:57:f0:60:2d:43:11:d3:e3:0e:3c:
91:0f:1a:49:36:cf:51:71:59:de:14:97:74:66:08:8d:e7:04:
fd:3d:fc:16:ed:2e:6d:89:e1:da:c7:16:6a:0e:9b:53:bf:62:
02:16:27:fb:45:8d:12:80:da:e0:3a:2a:c6:e7:b7:5a:e7:60:
a2:fe:3d:8a:fa:e6:af:1f:a5:67:1c:91:92:5a:da:73:d0:84:
32:04:ee:96:bd:63:0c:1d:a2:ce:36:f5:7d:8f:00:81:7e:e9:
78:2a:59:4b:73:c9:4e:c2:99:d7:f8:45:50:17:dc:73:92:38:
38:d0:d6:8b:fa:c7:89:ea:70:18:a4:a6:f2:5c:36:2f:20:43:
49:17:d4:a9:e2:92:69:86:f6:a6:26:98:a9:ce:9a:fc:03:a0:
24:98:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org