Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/93F67184848211EFACCB14A1762E951A.roa
File: 93F67184848211EFACCB14A1762E951A.roa (raw, json)
Hash identifier: x1wblgrF17t0fCLhEOTC+slBIuN8ElKBwkKyFdT87Yg=
Subject key identifier: E3:02:ED:80:2E:61:7E:A5:1B:93:5B:18:57:25:04:03:22:B1:44:0A
Certificate issuer: /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial: 044E
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/93F67184848211EFACCB14A1762E951A.roa
Signing time: Mon 07 Oct 2024 08:03:04 +0000
ROA not before: Mon 07 Oct 2024 08:02:59 +0000
ROA not after: Thu 31 Oct 2024 08:02:59 +0000
asID: 328537
IP address blocks: 102.36.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Validity
Not Before: Oct 7 08:02:59 2024 GMT
Not After : Oct 31 08:02:59 2024 GMT
Subject: CN=670395b7-40cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:cc:8c:3c:fa:46:c0:4c:bf:44:25:a5:9c:
fc:58:58:74:98:0d:4f:79:bf:34:b2:62:ef:a1:43:
7f:76:41:e8:ea:1a:d0:00:e3:06:af:fe:60:05:1c:
1a:2b:ca:7f:d2:00:88:74:11:ed:ac:e1:a0:2d:24:
9d:03:b6:3f:3d:2f:72:2c:c3:cd:33:6b:b7:c2:14:
73:77:81:5f:c3:62:3e:6d:53:47:2e:0f:9c:af:a5:
bf:0e:2c:13:e4:fb:da:fa:fc:ee:97:36:d3:14:e4:
9b:61:d9:f3:ce:ca:c6:43:d4:4d:79:fd:36:6f:0c:
96:c3:04:76:ae:d2:82:99:13:02:5b:f7:60:92:f0:
fb:63:23:e4:01:ac:88:fe:d9:c4:df:87:75:d4:9e:
14:e5:c4:b1:d3:39:0b:81:c0:11:10:6a:ff:e5:42:
08:55:0b:1d:73:7d:20:31:6f:f1:73:3c:da:c8:d0:
2c:02:ca:04:57:fc:32:a4:25:86:3c:08:b0:e8:42:
3c:22:0a:f9:66:f2:ba:62:e6:54:ea:85:e8:34:dc:
e8:68:55:3a:26:9a:7f:d5:ab:51:d0:70:50:6b:83:
30:ae:79:a1:26:0a:d4:00:a7:8f:92:3b:ba:fd:6d:
a8:5f:06:42:00:3a:df:da:8c:35:b2:64:ff:1d:b3:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:ED:80:2E:61:7E:A5:1B:93:5B:18:57:25:04:03:22:B1:44:0A
X509v3 Authority Key Identifier:
keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/93F67184848211EFACCB14A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
20:10:c7:13:11:d4:f9:c6:67:d3:97:4a:ad:d6:32:f0:f6:ce:
d0:4e:a8:ff:e8:a6:c4:21:03:6f:b7:8b:ae:90:ee:da:0e:aa:
81:37:3d:77:18:ba:00:3a:cf:37:f0:29:cb:89:3f:50:8d:35:
2c:94:d8:cc:27:68:10:54:29:23:b2:0a:f9:e2:54:f3:93:22:
9b:7a:43:4f:49:b6:d2:0f:63:e8:7d:2f:b3:25:9a:f0:4e:95:
ba:cc:e6:0c:80:20:58:7c:9a:b9:6b:6c:1b:02:cf:cf:3e:f8:
b6:9a:3a:2d:ef:86:b0:6d:cb:73:e8:7f:cf:6f:2f:26:b0:48:
de:bd:d1:3f:b6:ae:34:12:98:fd:a8:cc:b7:8c:f1:2b:88:21:
b7:7a:21:5b:bc:f0:bf:62:34:12:e4:04:0e:56:a7:df:e0:ad:
a1:1e:f3:80:c1:89:18:ae:7e:c5:25:9e:aa:a0:65:9a:c3:22:
ee:7b:14:90:f5:18:3c:fa:98:5a:c7:bf:2a:9d:09:cc:46:f4:
12:e9:76:99:42:92:40:4b:d7:51:8f:43:3d:99:6d:91:e4:0b:
bf:83:be:a6:7a:cb:80:44:a9:d8:82:86:ac:bd:11:0d:34:18:
bb:7b:84:92:25:2b:46:48:38:06:53:8d:39:45:3e:65:30:46:
60:34:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 13:18:32 2024 by rpki-client on console-fra.rpki-client.org