Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/993AE5129AF111ECB7F8ED6C5A40D577.roa
File: 993AE5129AF111ECB7F8ED6C5A40D577.roa (raw, json)
Hash identifier: c4fC8uwav7SVY2HNnUcCKJBr9DrIwmAd6ljdu5+Nqbc=
Subject key identifier: 82:9C:B8:09:61:D0:ED:DD:F8:F3:1D:0E:31:8B:A3:29:BE:BD:25:E2
Certificate issuer: /CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Certificate serial: 59
Authority key identifier: 3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/993AE5129AF111ECB7F8ED6C5A40D577.roa
Signing time: Thu 03 Mar 2022 12:58:19 +0000
ROA not before: Thu 03 Mar 2022 12:58:15 +0000
ROA not after: Wed 01 Mar 2023 12:58:15 +0000
asID: 15399
IP address blocks: 102.216.244.0/22 maxlen: 22
102.217.80.0/22 maxlen: 22
102.218.28.0/22 maxlen: 22
102.219.120.0/22 maxlen: 22
102.219.216.0/22 maxlen: 22
102.221.20.0/22 maxlen: 22
102.222.84.0/22 maxlen: 22
2c0f:e958::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA3E9AF/serialNumber=3D2C034F851F3715B2BA4C9C95E5285DAF2EE923
Validity
Not Before: Mar 3 12:58:15 2022 GMT
Not After : Mar 1 12:58:15 2023 GMT
Subject: CN=6220bb6b-3188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:f0:52:b9:e3:ee:ed:5e:6d:d0:ba:33:14:
46:1e:2b:14:e1:d7:70:4c:f3:01:21:af:54:db:4b:
52:2b:c9:f9:5f:85:f0:42:24:dc:21:5f:c8:b4:b0:
4c:c1:26:b1:1c:41:cb:04:d0:ec:a4:16:c4:c3:bb:
c8:f9:fa:95:2e:71:f4:00:26:c0:07:90:d4:5d:3d:
4e:b8:99:60:62:8a:dd:bd:50:bf:77:56:04:4e:a3:
83:bf:6d:1c:8b:63:cf:a7:19:de:df:61:04:16:66:
e6:5b:9d:b4:b3:8a:b9:ff:c7:94:50:51:b5:92:ce:
c1:c0:7b:73:16:ff:8f:40:8a:86:f5:00:af:39:57:
3f:5f:86:0f:a0:6e:1f:a3:b1:7f:81:c6:64:f2:8f:
2e:70:8e:49:70:be:4a:07:52:fe:9d:b9:cc:72:0e:
85:a5:06:74:8a:73:91:4e:1c:f1:96:fa:74:90:74:
77:59:a7:79:ca:d6:1a:ae:12:b3:45:b2:a1:77:4e:
7a:2f:12:71:e2:73:72:21:50:f8:57:80:a3:ff:38:
77:b8:1e:5d:4a:77:9d:19:c3:4f:4c:ac:d7:25:f4:
f4:d1:ce:d1:de:0c:bb:5b:fb:2b:7f:bf:50:35:95:
a8:20:fa:ad:20:5d:15:35:0a:ba:14:95:3f:99:78:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:B8:09:61:D0:ED:DD:F8:F3:1D:0E:31:8B:A3:29:BE:BD:25:E2
X509v3 Authority Key Identifier:
keyid:3D:2C:03:4F:85:1F:37:15:B2:BA:4C:9C:95:E5:28:5D:AF:2E:E9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/PSwDT4UfNxWyukycleUoXa8u6SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSwDT4UfNxWyukycleUoXa8u6SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA3E9/3CBCB97259C011EC9B4364725A40D577/993AE5129AF111ECB7F8ED6C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.216.244.0/22
102.217.80.0/22
102.218.28.0/22
102.219.120.0/22
102.219.216.0/22
102.221.20.0/22
102.222.84.0/22
IPv6:
2c0f:e958::/32
Signature Algorithm: sha256WithRSAEncryption
0d:83:53:be:bb:7d:6e:73:d9:12:3d:7f:84:3b:ea:4a:8d:99:
5e:4e:b0:1a:52:89:bf:c2:8d:6f:6b:72:ae:9c:0d:59:af:31:
8d:2b:62:e3:7e:47:c0:ed:9a:5f:49:44:aa:72:0a:10:ad:71:
ed:49:f9:01:fa:97:cc:c2:e6:58:d3:f4:9a:16:a5:0d:b6:28:
7f:84:30:72:1f:9d:36:30:b7:53:3f:38:03:71:96:e0:87:5d:
00:0d:1a:96:0f:e6:7b:16:39:99:af:0e:c4:8e:17:6e:ae:ef:
bd:f9:7c:5b:c9:6b:39:35:7f:0a:7c:5c:39:32:44:41:3f:01:
97:2b:89:89:e3:19:0f:3a:c6:21:ee:5a:92:db:06:65:54:e8:
a2:88:b0:30:b1:91:e1:22:c4:2d:54:3e:5f:64:86:49:7a:3f:
8e:21:c1:98:24:2c:30:d5:ae:6c:27:15:4f:55:04:f9:e9:d5:
24:15:41:c3:13:1e:f3:1f:27:4b:9f:6c:cf:3f:c4:6f:1c:f1:
67:63:cd:c1:28:ba:ed:12:51:c2:4b:92:98:d0:44:51:cc:a4:
b0:45:14:59:96:d8:50:12:dc:dd:10:0c:2b:b8:5f:2c:e5:a8:
08:4b:5c:8a:c1:c5:33:e3:90:be:af:23:33:b2:76:74:d5:5d:
52:ce:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org