Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/06A88CBE641311ECB9FB4DE55A40D577.roa
File: 06A88CBE641311ECB9FB4DE55A40D577.roa (raw, json)
Hash identifier: NMNPSCLXZlm7mknHnNCw5pJeWrbYM8MsSpd00SvpzkQ=
Subject key identifier: 36:74:8A:83:E8:32:54:CF:CE:AF:5E:AE:1E:6E:3B:9B:50:E2:9F:1A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0594
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/06A88CBE641311ECB9FB4DE55A40D577.roa
Signing time: Thu 23 Dec 2021 17:09:02 +0000
ROA not before: Thu 23 Dec 2021 17:08:57 +0000
ROA not after: Fri 23 Dec 2022 17:08:57 +0000
asID: 139660
IP address blocks: 102.129.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 23 17:08:57 2021 GMT
Not After : Dec 23 17:08:57 2022 GMT
Subject: CN=61c4ad2e-1f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:43:7e:22:cb:b7:cd:3f:e8:03:21:97:fc:
72:64:ba:65:7c:3a:f9:56:90:3f:af:79:9c:4d:44:
62:00:c8:0b:40:fb:01:73:3c:9d:4f:85:c8:6b:0d:
eb:06:e6:08:6d:06:6b:1d:46:f7:63:55:ce:51:26:
fa:8a:2b:1d:81:49:6e:c5:e7:9c:e7:ee:2c:45:db:
bf:15:72:8b:ea:14:06:61:21:f8:46:0a:f2:11:e2:
53:8b:10:9f:25:d9:55:65:01:db:8b:e9:fc:80:ea:
6d:2d:34:ed:4b:62:f9:2e:b3:24:2a:e6:92:22:84:
ec:66:66:a1:d7:9c:ae:4c:ed:63:0c:7a:29:c7:40:
b5:70:fc:e9:54:54:d1:4f:a5:e3:37:83:c7:aa:a9:
c9:50:4d:4c:e9:41:31:9a:ef:5f:e7:94:fc:10:db:
6d:a5:e2:a5:27:49:2c:29:5b:84:80:1e:95:03:4e:
d1:90:e3:57:83:6f:dc:ae:5b:eb:7d:dc:16:0d:a8:
c6:ef:e9:38:fb:b9:c9:c3:a1:01:c2:23:57:dd:8e:
50:12:ad:c4:1f:a8:db:6b:b6:9d:80:a0:b1:0d:f5:
fa:d1:ec:7e:7e:2a:9b:17:10:30:19:46:6a:4f:67:
c9:50:3d:76:71:a2:64:71:7e:3f:65:1e:a2:bd:da:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:8A:83:E8:32:54:CF:CE:AF:5E:AE:1E:6E:3B:9B:50:E2:9F:1A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/06A88CBE641311ECB9FB4DE55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:99:83:3f:04:19:a3:d0:d9:a9:71:e0:e9:26:e9:ea:19:f2:
f8:47:07:06:7f:54:86:2e:33:a3:bd:16:87:a1:c2:11:81:a9:
2a:5f:cf:ab:28:12:48:d0:1b:a3:ce:40:5e:f1:19:0b:36:97:
29:d8:c3:4c:ff:c0:e5:0b:b3:03:d1:2c:0b:21:49:9d:ef:6d:
45:4a:77:33:80:f8:34:c8:49:d9:fd:e9:4c:b1:77:46:b2:24:
1c:fa:09:2f:f4:fc:09:bc:81:52:22:41:2a:22:70:31:cc:da:
6d:58:f8:35:cf:70:81:9f:22:48:a4:d7:11:9e:1b:83:74:5c:
34:97:ab:88:c4:d3:94:27:b5:7e:26:33:17:d4:ec:c7:a1:c8:
ef:78:38:67:05:c5:19:d7:c8:dc:b9:33:63:e1:5e:02:db:ac:
d0:75:65:57:11:ef:d8:9d:cf:f1:ea:ba:dd:c2:90:2a:8b:6a:
0c:91:27:2a:ad:65:00:39:59:bc:86:da:01:12:4d:13:a1:e5:
70:99:ed:fc:b8:68:a2:39:52:08:cc:d4:dd:16:65:95:cd:54:
bf:fb:1b:c5:c4:b6:85:5f:8a:2b:18:d3:3b:67:72:fb:64:13:
e6:a5:40:0d:2a:86:4f:87:c2:e7:cf:75:12:49:59:50:59:bb:
df:61:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org