Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F2E29D2E6C011EABA409D3CF8AEA228.roa
File: 1F2E29D2E6C011EABA409D3CF8AEA228.roa (raw, json)
Hash identifier: S9dOfzD2q1shTDupmhwqMjsJ/ZydFEDB2GZQmt4wM2c=
Subject key identifier: 52:83:5B:15:FC:E3:45:27:DD:EB:06:CE:03:78:5B:0B:AF:37:57:29
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 022C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F2E29D2E6C011EABA409D3CF8AEA228.roa
Signing time: Tue 25 Aug 2020 10:45:44 +0000
ROA not before: Tue 25 Aug 2020 10:45:34 +0000
ROA not after: Thu 25 Aug 2022 10:45:34 +0000
asID: 61317
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 25 10:45:34 2020 GMT
Not After : Aug 25 10:45:34 2022 GMT
Subject: CN=5f44ebd7-618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:6b:94:55:47:39:6a:a8:27:49:47:a5:fe:
2b:d2:1c:19:09:7d:4b:a5:8d:7b:d5:e1:2b:b0:97:
b7:00:d5:52:59:ce:fd:bb:1d:d3:0e:0e:7e:5c:06:
8d:8a:89:2f:a5:22:d5:ad:f7:96:51:df:76:12:c5:
c1:f6:40:6c:4b:ca:a8:f5:70:b0:70:fa:c6:ea:ce:
10:92:07:20:84:89:bc:4a:d2:25:30:84:6e:2a:dc:
ef:fe:2d:c6:ba:0c:1d:1f:40:74:6d:76:38:1c:a1:
3e:3b:50:4c:90:20:92:05:4d:83:bb:c6:64:9c:83:
3a:3f:4f:25:2a:63:3f:7c:1c:4e:da:20:08:6a:41:
e3:cc:94:7c:79:4b:70:c8:ce:28:49:85:33:9e:cb:
14:28:9a:a6:70:d4:8d:68:46:a1:e7:57:c3:c2:30:
ca:4a:41:a9:78:1c:a3:5f:fb:4e:36:8c:a8:4e:a8:
6f:65:d4:94:38:45:d5:9f:90:b2:06:c4:f5:2e:f4:
8d:75:aa:e4:27:ad:83:7e:4c:54:70:61:b8:b1:3e:
af:6f:4e:dc:03:2d:4b:6d:ca:c1:1d:97:50:50:fe:
f2:dc:2c:d6:5d:84:ae:6d:48:ec:62:79:f0:9b:a4:
c1:0b:fd:03:27:f7:33:47:a2:ef:b2:f6:2d:0b:d4:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:5B:15:FC:E3:45:27:DD:EB:06:CE:03:78:5B:0B:AF:37:57:29
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1F2E29D2E6C011EABA409D3CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2b:85:4e:36:ce:54:e4:a0:37:71:02:20:a6:a9:8f:e3:d9:
b5:21:4c:6a:7e:50:3e:06:89:b0:70:61:93:31:00:cb:64:bc:
83:8c:a8:42:ef:27:79:e6:89:52:2f:cf:af:64:18:63:a4:d0:
5a:dc:86:a6:c9:29:c8:27:8e:ba:d9:b8:06:b0:b1:ee:83:b9:
de:ee:fa:21:18:8e:11:ed:5f:8e:86:ec:a3:45:7e:2c:0c:c1:
04:84:8b:b7:d9:a0:9c:a5:86:e2:27:a6:31:4c:39:bd:ed:1f:
a5:0e:44:b7:e8:58:7c:f1:2b:1b:0e:70:36:da:8a:bc:d2:c1:
af:a2:7f:27:64:14:91:5b:3c:fc:35:34:b5:32:b4:25:d6:14:
c4:ee:ac:94:04:8d:58:f4:19:99:66:08:a0:2f:6a:fe:81:f2:
e8:09:d8:90:7c:89:5a:b6:14:b6:6b:81:d2:33:cf:2f:68:15:
51:44:e7:98:6d:74:4d:19:b2:80:d0:6e:d8:5c:60:e0:e2:ec:
89:de:2a:39:73:5c:1a:c1:4e:47:80:5e:21:1c:ce:14:c5:c0:
65:7c:2d:b7:2d:13:9c:29:35:00:00:cc:80:78:c0:84:c3:c5:
b9:de:92:d6:3a:b1:36:e3:7b:23:59:f9:c1:00:ed:61:e7:60:
cf:0b:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org