Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/2F177AB848DE11EF87C4AA4B762E951A.roa
File: 2F177AB848DE11EF87C4AA4B762E951A.roa (raw, json)
Hash identifier: wETVbNIwdK8r2hSZkN/Aabae2SCcPqgo5T6TjrweN78=
Subject key identifier: 5C:E3:A0:91:24:63:7E:88:A9:0D:AD:42:8B:25:0A:EC:18:73:64:36
Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial: 01F0
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/2F177AB848DE11EF87C4AA4B762E951A.roa
Signing time: Tue 23 Jul 2024 10:27:38 +0000
ROA not before: Tue 23 Jul 2024 10:27:35 +0000
ROA not after: Tue 23 Jul 2030 10:27:35 +0000
asID: 398465
IP address blocks: 102.211.234.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Validity
Not Before: Jul 23 10:27:35 2024 GMT
Not After : Jul 23 10:27:35 2030 GMT
Subject: CN=669f859a-f4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:d0:f4:0d:0e:24:7d:17:70:76:b1:e1:3a:
1b:0d:67:64:c7:42:2e:6f:1a:fe:b4:a8:13:93:56:
cf:95:ea:6e:cd:f6:e1:5c:cf:c9:99:94:c3:6e:b7:
06:71:d5:6a:40:81:7a:2b:5f:61:d9:a7:7c:92:04:
57:0c:48:7d:ee:c9:47:f1:5d:67:47:09:fe:ff:82:
e4:b4:7f:c1:5a:b7:46:b7:9e:93:c2:91:5e:0a:a6:
31:b6:8a:06:62:8e:87:82:cf:bb:49:04:00:0f:83:
33:ba:a8:f9:fd:92:45:72:25:e3:19:3f:61:a2:d4:
c5:47:e2:2d:86:92:13:25:5f:d4:54:25:86:dc:86:
e5:c9:a8:77:2d:f3:0f:9a:f1:27:48:03:97:5c:68:
9e:16:63:78:f9:a3:42:74:27:ef:da:2d:e2:31:72:
7c:fe:84:db:da:fb:94:78:74:d9:8d:2a:3e:d0:46:
19:fb:ec:e8:e0:7c:ca:06:ba:d4:78:db:6f:b4:64:
aa:b5:62:fa:f1:6d:f2:a4:7f:31:96:88:b4:c3:55:
98:9a:da:dc:5f:14:34:f7:2e:d2:0c:9f:e4:be:7e:
e0:f4:c2:c7:61:eb:70:ec:b4:53:d1:78:82:91:50:
6f:f4:f4:d4:49:22:9b:44:ab:78:50:7b:00:8c:3d:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:A0:91:24:63:7E:88:A9:0D:AD:42:8B:25:0A:EC:18:73:64:36
X509v3 Authority Key Identifier:
keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/2F177AB848DE11EF87C4AA4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.211.234.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3f:75:33:8a:40:b4:2b:7e:65:81:47:bb:23:bb:3b:19:fd:
44:36:2b:f1:bd:51:57:2b:1c:be:2a:6f:a0:1e:d2:e8:1b:73:
1e:74:c9:06:3d:d1:69:5e:18:39:42:32:b0:8a:df:63:c8:70:
39:85:99:61:97:1d:17:74:64:83:27:af:1f:9f:13:e2:af:6f:
df:e1:cf:16:c6:7e:df:31:8a:4e:2c:6f:9e:c7:38:6f:c6:9c:
07:71:80:cc:ae:cc:4e:4d:ef:d8:19:10:6c:e7:5d:84:00:d6:
a7:4d:da:75:75:47:ec:a5:73:45:21:1c:1a:e5:59:54:f8:ab:
1e:b3:c1:94:00:bb:55:44:0f:ce:41:a1:25:66:33:73:dd:bd:
b8:80:3b:07:51:f8:ba:6d:8f:24:f8:56:26:92:ba:5e:26:ae:
31:5e:b2:6b:0f:0c:24:dc:24:fb:5a:45:f0:28:cd:22:5e:40:
8d:74:4e:23:16:67:c7:b4:ba:be:5e:77:d1:a3:44:b2:c5:24:
f7:4d:97:81:7e:e1:0b:e9:e2:71:dc:63:35:a3:a5:37:09:e6:
93:c0:08:ea:35:6b:7a:d1:0d:99:09:fd:c5:e4:46:95:04:ce:
98:14:23:3e:15:1d:dd:e5:d6:f4:5a:6d:80:8e:c8:52:3a:25:
b8:96:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:06:57 2024 by rpki-client on console.sobornost.net