Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F73143B2D19811EDB60022A4F1222468.roa
File: F73143B2D19811EDB60022A4F1222468.roa (raw, json)
Hash identifier: 6j2zl4gftX4F6DHqe0UKGMjklYqySnJUA4PZU0oLGEA=
Subject key identifier: 0F:4F:18:1E:8C:C6:49:55:19:12:66:68:BF:8D:72:90:4A:1D:DE:AE
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AEE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F73143B2D19811EDB60022A4F1222468.roa
Signing time: Sun 02 Apr 2023 20:57:23 +0000
ROA not before: Sun 02 Apr 2023 20:57:17 +0000
ROA not after: Tue 02 Apr 2024 20:57:17 +0000
asID: 200131
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 2 20:57:17 2023 GMT
Not After : Apr 2 20:57:17 2024 GMT
Subject: CN=6429ec33-a8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:72:9a:09:56:fe:74:de:91:09:b0:04:8a:
c1:d5:9b:e7:38:a2:88:3b:2a:e5:e5:5e:2e:5f:2b:
bb:8c:1c:18:83:16:5e:82:56:a2:62:e4:5b:fc:ef:
50:68:a8:b5:f8:17:37:14:f7:7d:71:88:94:9e:8b:
9d:4c:aa:fd:d3:77:c8:d1:d4:cd:ec:07:5e:57:59:
78:65:8a:71:79:26:e2:fe:e6:32:4e:01:77:54:22:
76:e2:dc:6c:69:6d:53:a6:a5:3d:8b:d4:e0:9c:63:
7a:bb:1c:00:3f:ab:64:be:03:c6:90:57:be:dd:3d:
93:8b:7c:dd:12:71:eb:1b:ef:f6:48:ee:6b:d0:15:
71:de:9c:30:00:40:04:b4:52:17:7a:98:af:9e:c7:
66:b6:c2:1d:a3:f1:49:72:82:d7:17:77:be:71:67:
fb:c4:94:a0:e8:9d:e8:37:1f:1c:d1:72:55:92:cc:
ec:fe:98:1f:83:be:3e:64:e0:39:58:cc:2e:e7:c5:
69:6a:cc:d4:db:30:57:40:a3:bf:f3:a6:52:08:1e:
5a:ba:44:e3:7d:4f:ec:2f:08:f3:7c:27:fd:53:79:
ae:5a:97:65:54:65:d1:c6:a5:51:fd:64:1a:cd:e8:
e3:28:dc:2c:00:7e:c7:46:00:df:d6:d2:06:39:60:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:18:1E:8C:C6:49:55:19:12:66:68:BF:8D:72:90:4A:1D:DE:AE
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F73143B2D19811EDB60022A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:58:4a:bf:15:bd:47:b6:24:74:7d:00:fa:c4:68:2f:65:d3:
6b:b7:d0:8a:78:b5:ba:e7:1d:75:4d:e5:61:95:11:68:7b:3f:
ab:5d:1f:a4:49:3b:a3:7d:de:eb:6d:2b:1d:ed:f4:36:9e:8e:
8b:0b:a3:46:6c:b6:a7:b0:73:92:e1:3e:ce:b6:2a:b1:de:3d:
7d:16:43:c4:a1:be:c1:c0:34:ae:7d:80:21:23:8e:fa:f5:eb:
31:31:fd:4a:5f:d3:d7:ba:4a:07:b1:01:15:d7:ee:2a:82:b3:
68:cc:a1:43:69:11:ed:1f:66:93:ee:06:c8:bf:97:f0:6c:ee:
3d:dd:95:61:ee:94:77:c5:21:8e:73:2e:52:7a:ae:90:3e:30:
28:ef:5c:ae:ee:9f:9d:a1:20:61:6c:66:57:2c:ef:57:05:f4:
dc:a8:2c:78:2a:5e:fa:c5:a9:84:56:74:0c:82:9a:31:4c:68:
f4:88:71:c1:5f:76:b1:d3:72:f9:48:5c:91:9d:df:1a:e1:a6:
99:e4:b6:f9:b1:7c:bd:4d:9d:6d:58:f1:08:b9:42:8c:38:ed:
cd:99:7c:89:30:97:a8:2c:ef:55:ab:3e:9f:75:6f:40:48:79:
e0:1c:85:54:1c:38:20:f3:f2:35:14:70:19:77:b4:23:d3:a0:
57:50:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 03:45:03 2024 by rpki-client on console-fra.rpki-client.org