Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F71EDA68A1511EABE531482F8AEA228.roa
File: 0F71EDA68A1511EABE531482F8AEA228.roa (raw, json)
Hash identifier: mYMuUDEwrK9H3Ulhj7uNcg1+BBnu19gOosFv+KqRjrk=
Subject key identifier: 1A:3E:DF:25:F9:8B:FA:05:29:D2:8B:52:F2:19:09:39:9B:17:A0:AD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0185
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F71EDA68A1511EABE531482F8AEA228.roa
Signing time: Wed 29 Apr 2020 12:29:25 +0000
ROA not before: Wed 29 Apr 2020 12:29:19 +0000
ROA not after: Fri 29 Apr 2022 12:29:19 +0000
asID: 61317
IP address blocks: 102.129.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 29 12:29:19 2020 GMT
Not After : Apr 29 12:29:19 2022 GMT
Subject: CN=5ea97325-96fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:25:80:e7:e9:ac:dc:a8:e8:79:5c:7b:93:
33:11:71:00:68:e8:26:55:4f:15:88:8d:e7:0e:e1:
ec:a3:cc:b2:66:42:43:32:62:32:81:6a:c7:6c:33:
19:9f:a3:64:b8:b5:9c:fe:9c:79:f4:62:bd:fc:8c:
57:69:2d:ef:70:a2:d0:60:ca:54:4c:e5:1e:54:c0:
9a:bb:2b:76:cf:13:2b:83:d6:d3:c5:f6:b6:f3:f4:
b4:40:6d:c8:90:cb:a8:c4:90:3f:4d:31:30:2d:41:
44:90:de:6f:c9:f9:e1:33:41:42:be:0c:a9:32:7c:
ff:10:bd:19:1f:bf:6b:d6:ac:4b:7b:ac:87:fc:5c:
21:6a:61:a1:69:90:ed:69:7e:e2:c0:0f:30:ac:8c:
a2:67:ab:d1:6f:3a:0c:c7:b2:7e:ce:d5:74:1d:b9:
80:e2:cb:1f:fa:38:a5:e6:dd:64:ae:3a:9f:63:46:
2c:1d:13:05:fd:04:30:16:84:af:2a:2d:4a:6e:7e:
b3:39:7f:f3:f8:61:7f:e6:81:ed:0f:f8:5f:f6:3f:
1f:52:2e:53:3c:69:1b:22:a9:21:8d:3f:d4:bd:6c:
57:9b:96:b4:01:41:08:f4:a0:3f:43:57:71:08:c9:
6b:c5:ee:1d:ba:ee:7f:6c:64:f7:ea:9e:8e:3c:57:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:DF:25:F9:8B:FA:05:29:D2:8B:52:F2:19:09:39:9B:17:A0:AD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0F71EDA68A1511EABE531482F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:08:19:28:1f:a0:17:d4:9e:67:55:bd:43:12:18:4f:3d:4b:
53:03:bd:54:29:5a:ec:70:49:ac:84:a1:c8:61:5b:82:48:1b:
27:63:b0:64:66:fe:13:a3:2e:29:fe:c7:df:67:79:6f:20:fe:
88:8e:8d:a0:52:b3:c9:20:f3:49:26:eb:69:c3:5a:61:a7:02:
7d:99:c2:a4:8e:4a:e3:d6:d1:6d:e2:58:49:bf:2f:7f:0f:38:
78:eb:d6:f9:7d:a8:55:7b:ea:6a:74:14:fc:74:b3:35:66:b3:
68:69:7a:6c:16:38:70:7b:01:7c:35:ac:27:2a:50:2b:bb:ec:
05:b6:22:fc:ec:d0:8a:41:70:31:0e:c2:74:f3:e5:e0:4d:ad:
88:fc:12:f9:6e:34:04:08:e3:28:fd:29:12:c8:0f:72:88:fb:
5f:83:fb:10:6f:f4:cd:05:52:4f:1e:72:92:d5:0c:33:35:d1:
96:fe:86:13:3c:da:bb:43:54:84:86:77:0d:54:1a:e2:64:f3:
8d:6e:56:80:ee:4b:ab:f4:6d:90:61:f7:4c:0c:4b:db:d7:b8:
cf:76:ea:65:9e:e9:f3:46:51:3d:14:43:d4:e6:77:5d:de:c7:
2b:46:a7:00:97:ee:eb:bb:d3:d5:a8:89:78:6a:26:84:83:4e:
d8:9a:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org