Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B871F08666EC11EBA667A184F8AEA228.roa
File: B871F08666EC11EBA667A184F8AEA228.roa (raw, json)
Hash identifier: QkORXACanUidaEZ7iREXDn/njj4WI9TAx7ECpzdCVHk=
Subject key identifier: 77:D6:03:12:7A:C7:AA:04:DF:B1:B8:95:D3:4D:1E:74:C2:02:50:AC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0348
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B871F08666EC11EBA667A184F8AEA228.roa
Signing time: Thu 04 Feb 2021 13:27:26 +0000
ROA not before: Thu 04 Feb 2021 13:27:21 +0000
ROA not after: Fri 04 Feb 2022 13:27:21 +0000
asID: 209181
IP address blocks: 102.129.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 4 13:27:21 2021 GMT
Not After : Feb 4 13:27:21 2022 GMT
Subject: CN=601bf63e-87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:62:f1:c6:2b:ae:81:05:8a:58:f0:aa:a2:
1d:c5:89:6d:bf:ea:a2:13:c0:5e:4b:04:ce:f8:54:
e0:fd:d6:f9:dd:93:f7:f6:09:f1:1a:a1:f9:32:10:
79:5a:e8:30:3c:4f:bb:00:e2:b9:20:0f:ab:d1:5f:
cd:ee:d6:e0:10:dc:cb:ec:c5:86:cf:ea:56:86:49:
7b:ee:99:41:e8:2f:f9:15:a1:1f:22:b4:ed:aa:27:
a3:6d:c1:97:6a:97:16:0b:73:ee:08:59:21:f2:71:
d3:85:94:46:d6:ff:d1:08:89:4e:1f:7e:47:0f:09:
44:a9:ae:ed:ef:5b:97:a2:c6:34:d2:a2:21:75:4a:
64:e6:20:88:4c:0a:03:6e:71:3b:89:0a:4e:a7:7a:
fd:13:ea:fe:cd:5f:e6:d6:3c:2e:af:7b:59:3a:86:
9a:ee:3d:33:4b:7c:bb:be:29:d1:d3:ad:60:ab:2c:
9a:ee:39:04:0a:fe:3a:c9:7f:34:7e:af:1e:69:3a:
56:a7:98:09:c8:7c:0f:b9:9a:a8:85:b1:fa:83:b2:
09:87:e8:10:fb:c7:07:f1:a5:4c:b6:e2:77:3f:8c:
b8:0d:cc:8d:98:91:45:80:ec:cf:64:2a:21:1d:7e:
30:a6:c7:52:17:9d:46:25:b3:16:92:60:12:ea:c1:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:03:12:7A:C7:AA:04:DF:B1:B8:95:D3:4D:1E:74:C2:02:50:AC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B871F08666EC11EBA667A184F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.253.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:14:9d:ce:cc:70:8b:00:e5:38:9c:1e:b0:59:79:b5:5f:09:
62:89:8d:b9:5a:90:48:a1:86:3c:23:8f:62:6f:fb:c8:e5:48:
2e:a7:bf:96:de:f6:91:ec:da:4d:4f:0a:4a:3e:48:dd:e1:04:
25:60:a7:eb:d2:db:2b:92:13:83:74:41:df:67:56:63:32:8a:
11:34:68:83:df:fd:fd:b3:96:a6:3f:c4:29:85:05:a5:3f:60:
77:89:c7:2a:4b:db:71:a6:74:64:c4:5d:e5:e2:0c:f6:99:2a:
70:22:9c:31:ca:b5:63:f6:9a:b6:53:f0:05:e3:c4:55:81:40:
80:2a:f2:99:a0:80:d0:10:cc:ab:0a:49:12:af:c6:44:23:42:
8c:35:1d:75:db:9d:f3:14:52:eb:20:57:bc:31:41:c0:cb:31:
70:04:90:b8:5b:f0:85:8e:fc:5b:ac:cf:3e:d5:dd:7e:02:b4:
51:c9:a9:89:b0:87:d7:d7:81:47:c2:f5:da:54:7d:25:c3:16:
5e:9e:07:58:c1:46:fb:08:23:4c:d0:6a:59:b6:62:17:d1:f8:
6f:be:59:58:f6:5a:0b:52:1b:5b:8d:89:c9:1c:ca:a8:58:68:
ac:fe:23:d5:13:24:10:78:5c:27:2b:00:40:95:5a:3c:32:12:
09:f1:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org