Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/06B4CCF2E32C11ECB10C3190F1222468.roa
File: 06B4CCF2E32C11ECB10C3190F1222468.roa (raw, json)
Hash identifier: asnUfg8iH545lDLKVYP9pY6AyGETq+PhtpMG1qUdt64=
Subject key identifier: F3:B7:8E:06:3B:7E:05:D8:C8:82:D8:9F:C0:F6:8C:C2:7C:29:BC:E7
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: B9
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/06B4CCF2E32C11ECB10C3190F1222468.roa
Signing time: Fri 03 Jun 2022 10:57:57 +0000
ROA not before: Fri 03 Jun 2022 10:57:54 +0000
ROA not after: Fri 02 Jun 2023 10:57:54 +0000
asID: 15399
IP address blocks: 102.215.160.0/22 maxlen: 22
102.216.60.0/22 maxlen: 22
102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Jun 3 10:57:54 2022 GMT
Not After : Jun 2 10:57:54 2023 GMT
Subject: CN=6299e935-bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:30:ff:3c:9e:d3:2f:53:5d:92:ef:db:1f:
ca:65:56:31:93:80:77:8a:88:f1:47:57:af:c8:ab:
73:12:f1:52:2e:25:90:69:06:79:ba:3c:63:60:09:
a1:c9:55:97:91:1b:23:da:cc:42:dc:b8:d7:55:fd:
53:4a:81:66:bc:71:ac:6c:7f:c5:80:e4:84:10:79:
60:80:75:42:a4:2e:49:c4:cc:ec:0b:6e:e4:d0:5d:
34:eb:f0:2b:2f:e7:a9:ec:09:d7:04:7c:0c:f7:a2:
ca:56:e4:88:e0:43:f5:22:ad:29:76:d5:d3:da:8e:
84:a2:29:e7:b4:77:07:06:4e:a4:df:92:ee:ad:ef:
a1:d0:d8:3b:dd:c1:87:e7:b9:5f:78:d5:9e:7c:e4:
56:94:c0:f3:bb:91:68:d3:12:4b:91:b7:c0:c8:71:
82:4d:9c:98:a1:a6:1c:49:3e:1b:c3:0e:8c:47:6b:
0c:4e:fe:f3:ea:6b:5e:26:cd:f0:86:11:4f:9e:94:
cb:ae:f6:b8:f7:47:16:15:e5:8a:17:51:d3:43:1b:
1c:c2:bc:2f:a2:7f:25:19:51:83:9d:99:13:af:6a:
3e:07:75:8c:5a:7c:89:1e:6d:7b:65:64:62:d7:c5:
a8:ad:d8:b7:66:71:f5:26:92:24:64:5b:9f:88:2d:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:8E:06:3B:7E:05:D8:C8:82:D8:9F:C0:F6:8C:C2:7C:29:BC:E7
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/06B4CCF2E32C11ECB10C3190F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.215.160.0/22
102.216.60.0/22
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:40:14:a5:91:cf:5c:cc:f0:2c:13:94:9e:0d:1d:a6:88:79:
df:d2:26:8a:ab:86:7e:4b:1c:6a:06:a0:ca:1d:d2:25:0a:41:
a6:f1:e9:e2:29:ad:c8:1f:8d:cf:bf:38:af:3e:e6:81:03:2c:
54:15:9f:64:1a:73:ed:00:d5:38:7b:54:11:90:a9:28:43:3d:
9f:04:bf:0a:c3:84:68:cc:d0:e3:e0:4d:bb:5a:56:69:31:6b:
46:77:8d:8d:11:d4:86:3a:a1:0e:9d:a9:a7:71:0f:52:38:82:
07:a0:67:a6:de:cd:a3:8d:77:50:5d:5a:fd:ca:89:69:18:e4:
f5:16:90:ad:70:33:b9:d5:67:29:8b:b7:40:15:ff:c0:1c:69:
ae:06:41:3e:a8:9c:2c:94:30:6d:30:bf:71:e7:eb:f0:19:1e:
9c:49:67:42:60:c8:38:a3:c7:10:80:ca:88:f8:47:1b:0f:f9:
9a:73:bb:57:72:d2:fb:90:12:aa:35:96:fe:3a:0b:70:11:b7:
12:6f:45:cf:e1:51:62:22:0b:e2:c0:18:7a:91:75:4e:1b:d1:
90:be:4e:82:eb:b6:ac:91:3b:f1:05:a5:b7:ee:ce:92:7a:40:
2e:1e:58:ca:08:d1:df:1d:6c:50:2d:b5:51:18:28:b8:7b:85:
0a:6c:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org