Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5B833D0B20111EDB257DDC5F1222468.roa
File: F5B833D0B20111EDB257DDC5F1222468.roa (raw, json)
Hash identifier: QXBkzF115h67mAYFXDWiSbLiZ+n7y/9e7ssiMRmWdH4=
Subject key identifier: FB:52:28:C4:A0:C4:B8:21:38:5E:E2:D7:76:E1:58:2E:41:C2:77:58
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A4C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5B833D0B20111EDB257DDC5F1222468.roa
Signing time: Tue 21 Feb 2023 16:08:21 +0000
ROA not before: Tue 21 Feb 2023 16:08:17 +0000
ROA not after: Wed 21 Feb 2024 16:08:17 +0000
asID: 61317
IP address blocks: 102.165.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2636 (0xa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:08:17 2023 GMT
Not After : Feb 21 16:08:17 2024 GMT
Subject: CN=63f4ec75-a99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:92:89:da:ed:fd:29:94:9d:82:2f:86:bd:
8b:12:03:16:4d:88:37:a2:13:46:0c:b2:71:f3:0d:
e4:b8:0e:a8:c0:a8:d7:11:5b:19:f6:9e:f9:cd:47:
28:0f:b8:7c:2b:45:b0:c8:84:fe:05:b9:1d:08:18:
c0:c0:3e:d9:62:95:e6:9e:86:21:51:d0:0e:70:e8:
f3:5d:a5:25:36:9e:47:5b:93:91:3c:1c:29:95:bf:
5d:d4:48:8b:4d:eb:50:60:c5:33:ce:62:8e:d4:28:
24:41:4e:cb:ba:ac:10:bf:ba:f9:99:96:48:8b:c9:
d1:a4:29:0b:b7:95:fd:bf:2b:72:99:16:6d:71:7c:
9e:cf:a0:f2:70:b9:a4:37:0e:98:7f:55:6c:6b:d9:
e7:83:09:a2:18:7a:61:1f:17:a7:3b:cc:69:05:fb:
f7:55:19:b1:d9:80:e6:2d:e2:0c:69:d4:e8:b8:9e:
8d:d0:6d:47:90:80:5d:26:b1:2b:a7:18:a3:e2:54:
2d:fe:60:8f:05:63:94:d3:39:4e:3f:d2:ac:8b:7a:
81:33:f0:45:f6:06:21:51:1c:1f:a1:1b:ce:90:b1:
53:38:c6:96:02:74:c7:d9:37:fc:73:5c:56:aa:50:
d1:31:37:f6:a2:01:5c:6d:fc:84:c9:56:61:5a:b5:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:28:C4:A0:C4:B8:21:38:5E:E2:D7:76:E1:58:2E:41:C2:77:58
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F5B833D0B20111EDB257DDC5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.19.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6e:94:af:69:3f:18:37:c2:4c:bb:15:4c:df:8a:9f:c2:cf:
13:47:1b:d6:a5:4a:68:b4:1f:67:14:e7:52:a7:00:e9:f1:01:
04:d3:76:30:78:0a:77:27:a4:af:40:83:45:5b:48:e6:5b:6b:
ee:93:57:57:55:ab:fd:f2:ac:41:73:a2:b7:14:ae:e5:9b:2d:
b7:4c:be:f3:80:fe:8a:f7:85:52:c1:86:92:e2:59:42:1f:20:
b9:8a:e4:ad:9a:a7:4e:85:d8:32:db:69:6a:f2:d8:d3:14:6c:
c8:60:fc:ef:eb:32:b7:a9:e0:7e:57:9d:91:76:3e:c9:46:0c:
8b:09:5f:06:40:eb:3e:a3:d6:fc:9e:a8:2b:a6:c3:1b:76:83:
fe:8a:64:5a:76:ab:6b:a6:4d:4a:33:f4:96:e1:f5:9d:fb:0c:
26:82:8f:69:f3:c5:bf:35:b6:9f:de:5e:a4:ca:f8:ea:10:4f:
5a:f1:b6:8d:cd:9b:ce:2a:38:74:f4:4b:b9:e0:24:01:e9:34:
c9:a5:fc:29:c6:f2:a8:81:42:9b:06:79:0e:7c:bc:d9:05:4a:
e0:45:6b:d1:5d:81:c9:a9:91:8a:6d:d7:3b:fd:09:f6:4e:3d:
f9:81:96:a7:eb:af:0d:22:ec:82:0b:3c:54:4e:ea:61:5d:03:
7e:3b:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 03:37:37 2024 by rpki-client on console-fra.rpki-client.org