Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFDEE3FA8A1411EAB4A8CC81F8AEA228.roa
File: DFDEE3FA8A1411EAB4A8CC81F8AEA228.roa (raw, json)
Hash identifier: 6vSvH/2dD4El7Il5XbQrzwGtFoUFBZiiJEWwM04YaZU=
Subject key identifier: 13:32:A5:26:CA:DE:1C:85:57:D8:9A:EC:F8:55:08:0B:5F:FB:BB:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0183
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFDEE3FA8A1411EAB4A8CC81F8AEA228.roa
Signing time: Wed 29 Apr 2020 12:28:05 +0000
ROA not before: Wed 29 Apr 2020 12:27:59 +0000
ROA not after: Fri 29 Apr 2022 12:27:59 +0000
asID: 61317
IP address blocks: 102.129.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 29 12:27:59 2020 GMT
Not After : Apr 29 12:27:59 2022 GMT
Subject: CN=5ea972d5-e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:40:ae:5d:65:dc:69:b1:d0:bd:21:c9:98:
33:11:19:2d:10:3e:4d:ca:c4:ea:c8:b7:fd:99:42:
d1:b1:b0:24:48:18:bd:11:99:52:40:09:87:bd:d3:
3c:6a:d7:58:22:f2:90:f7:57:55:cd:9f:5e:a7:ea:
b8:4a:50:31:6b:50:43:f4:1d:de:3b:d0:30:ca:c9:
74:f8:82:63:fa:54:83:cc:1d:b2:b8:1e:de:5f:25:
ff:f2:48:e0:7e:1f:32:de:97:e5:e1:4b:58:9a:59:
9d:be:a4:97:31:c1:c5:38:37:e3:cc:07:67:e2:c4:
90:e2:01:65:2f:19:80:e7:88:dd:b4:c9:7a:fc:66:
68:e9:26:b4:e3:51:4a:e9:3e:8f:8a:36:3d:53:5b:
1f:a8:13:55:8d:f0:a3:38:99:02:80:a2:85:9a:a7:
01:27:3f:ea:65:d0:9b:0c:4e:91:e7:e4:09:2b:0b:
c8:d4:2f:50:38:3d:1e:ea:a1:28:e5:54:ad:77:cc:
bf:72:9f:75:8c:42:e5:18:84:31:19:6e:2a:cb:fb:
46:0c:27:55:fb:bb:5a:10:16:6b:9b:6a:d2:b0:11:
fa:c7:2c:27:5a:0a:32:fc:f0:19:7c:21:42:de:21:
9c:35:77:1f:7a:b3:36:24:77:e3:80:34:28:cd:c7:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:A5:26:CA:DE:1C:85:57:D8:9A:EC:F8:55:08:0B:5F:FB:BB:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/DFDEE3FA8A1411EAB4A8CC81F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.133.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7f:47:8d:cd:b5:97:2a:dd:01:db:71:3c:a7:14:3f:b2:67:
af:4a:b8:e3:96:2e:ac:54:e6:45:53:bd:27:10:00:84:bf:a0:
a9:0f:d8:13:72:c9:80:19:a1:45:a6:1b:9a:75:ce:2b:1e:41:
c5:eb:cf:89:d7:8f:df:0a:5c:1b:82:60:b8:4d:c7:61:80:04:
ab:3a:17:47:db:60:8a:20:a9:09:58:e6:a3:69:46:84:c1:bb:
1d:76:c1:ac:d9:80:18:c1:36:ac:9f:74:94:3d:af:d5:82:24:
a5:30:19:d2:7a:0f:0a:ad:a7:0c:59:bc:a9:14:fe:5d:89:3c:
d8:db:66:69:a7:1f:d9:dc:43:e1:7c:60:2c:9c:4b:1b:ef:ab:
6e:ca:77:e1:c4:b2:fa:48:79:09:c9:32:0e:06:9c:df:ef:b6:
f3:89:35:81:c9:e1:92:82:9f:e3:20:d0:2f:9f:36:ab:2b:c9:
d3:7c:53:b2:9a:e5:e5:9b:c7:b2:4c:e1:dc:80:78:90:22:64:
fe:f0:ef:15:4d:be:de:cd:7a:3b:af:06:b5:01:7e:dc:0f:8d:
1b:d9:ef:52:fe:7f:57:2a:02:a0:e3:ae:a1:d6:9a:6b:4a:0a:
77:94:3a:e1:04:2c:d1:77:93:8c:d2:63:76:45:f0:95:03:d8:
69:eb:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org