Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BF4D518F09811EBB2A9BB1BD8A014CE.roa
File: 0BF4D518F09811EBB2A9BB1BD8A014CE.roa (raw, json)
Hash identifier: 3L6iO79zSqf5aSV6HcDQBfyf8gAEN6PCrEb4Gy80SuM=
Subject key identifier: 93:7B:AC:69:E5:67:21:A7:16:45:E0:2F:0C:3E:75:81:AC:B9:FA:88
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0485
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BF4D518F09811EBB2A9BB1BD8A014CE.roa
Signing time: Thu 29 Jul 2021 18:09:21 +0000
ROA not before: Thu 29 Jul 2021 18:09:17 +0000
ROA not after: Fri 29 Jul 2022 18:09:17 +0000
asID: 22773
IP address blocks: 102.129.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 29 18:09:17 2021 GMT
Not After : Jul 29 18:09:17 2022 GMT
Subject: CN=6102eed1-cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:14:81:f1:aa:72:0b:54:67:f4:b4:eb:41:
0c:75:32:1b:24:62:71:5c:05:5f:9e:24:95:28:81:
9f:b5:1b:f9:d3:06:e9:0a:1d:ee:25:dd:94:f2:d3:
fd:00:c5:b9:a3:3b:d0:bd:55:8e:0f:db:5b:4b:f8:
41:ea:8d:dd:76:ef:65:58:35:54:d9:c2:48:99:12:
80:c4:37:c5:73:cd:96:f8:5a:14:9f:42:38:ab:25:
37:27:d4:7d:0f:67:f1:1c:c8:c3:a7:8c:2f:60:c4:
80:fc:75:24:25:8e:9c:f6:23:ff:72:75:4c:b7:bf:
46:64:95:0c:c1:92:bd:5c:93:12:c7:61:33:4b:84:
5f:f4:ae:55:8d:e5:dd:5f:42:54:58:d5:8e:27:11:
c3:b0:e8:1a:41:d8:6b:c8:1c:75:f5:bf:b0:59:69:
ff:94:99:6b:95:e0:e9:ba:73:d5:49:af:7d:e5:c4:
c8:d9:76:d1:6f:97:b9:40:9f:76:38:c6:eb:f4:be:
d9:41:d8:9d:2a:aa:c0:33:f9:55:8c:1b:9e:bc:3e:
c1:66:ae:3c:94:6c:70:bd:58:90:7f:9c:19:4a:92:
ce:2d:c0:e4:f6:3b:41:a1:06:ed:4c:a9:3a:2e:32:
22:43:c1:b6:55:78:a0:90:2d:a9:84:5c:ad:be:76:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7B:AC:69:E5:67:21:A7:16:45:E0:2F:0C:3E:75:81:AC:B9:FA:88
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0BF4D518F09811EBB2A9BB1BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/22
Signature Algorithm: sha256WithRSAEncryption
97:15:3a:70:ff:c5:97:20:00:c0:df:ef:70:e4:d2:73:a5:30:
ca:1f:45:e1:8d:04:b7:77:e1:7c:bc:b1:10:ce:8e:11:3c:bc:
83:1f:88:61:57:db:b1:3d:c6:e4:4c:b8:a9:0e:6e:0e:fe:5f:
46:b9:cc:7a:2c:ab:d2:95:34:cf:c9:82:7e:b4:24:ab:1b:3a:
18:aa:19:db:8f:ed:e7:79:90:1e:f8:57:31:9f:50:41:8a:e2:
87:c3:ba:9b:4d:70:73:91:01:90:06:75:e6:c6:02:26:6a:50:
c3:12:a3:c8:ca:e3:5a:7d:bd:8e:f7:1a:f5:b7:cd:2e:49:57:
65:7b:74:eb:e5:b1:dc:b4:a4:18:c7:1d:4d:b5:05:7b:cf:17:
85:71:c6:04:e1:eb:02:00:f4:d6:9d:38:f7:71:4b:93:82:af:
af:1c:59:dc:e6:15:f5:5e:d5:05:a0:3e:ae:06:fb:ec:59:08:
6d:78:01:93:f0:91:c5:63:b9:11:73:07:20:a2:38:78:14:dd:
7b:77:fd:e2:c8:58:1d:e1:fb:61:67:81:13:15:ed:8f:74:6b:
84:24:81:44:c6:bf:5f:02:ba:0e:bf:65:fe:af:05:f7:ca:26:
52:c6:6a:94:97:c3:9f:48:09:89:33:ee:f2:71:13:d2:68:c6:
db:30:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org