Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
File: 0FC6AF48E56711ED866DC90B4AD9E6FC.roa (raw, json)
Hash identifier: eFrv5fWbVOOlmZw1vBdemjbgqogBqtLKeoJaecUXYMk=
Subject key identifier: 80:CE:01:0D:19:19:8C:89:97:94:1C:D1:DE:9F:9A:BA:63:40:86:03
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B3F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
Signing time: Fri 28 Apr 2023 01:50:33 +0000
ROA not before: Fri 28 Apr 2023 01:50:27 +0000
ROA not after: Mon 29 Apr 2024 01:50:27 +0000
asID: 61138
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 28 01:50:27 2023 GMT
Not After : Apr 29 01:50:27 2024 GMT
Subject: CN=644b2669-ae6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:34:8e:b9:44:b3:bb:b0:f7:03:3a:f5:ee:5f:
02:75:bb:7f:58:62:c2:33:a1:cb:61:ce:7b:23:23:
c3:b0:d4:4e:31:3d:1f:d1:4e:a6:7a:d2:f8:c2:8f:
c8:a3:97:8f:56:71:83:67:27:0b:1e:16:d5:d3:fd:
30:07:19:5f:9e:a6:86:2e:be:3e:97:94:e3:fd:f9:
6c:bd:10:2c:19:c3:b6:fb:d2:c7:d0:47:e6:5a:ba:
22:03:74:06:2c:f8:b1:45:38:25:f1:38:79:4f:e1:
46:74:e5:e4:f2:a4:02:c3:a8:18:35:c3:14:d9:e6:
f1:ae:ae:ad:41:1f:42:37:a5:fa:83:1c:e6:c2:0b:
77:3b:54:10:33:4c:4c:8b:82:a6:6e:af:f8:aa:fa:
d8:a9:64:e2:bb:ea:93:04:46:f1:37:b5:27:99:cc:
ec:61:a4:55:81:fd:6b:e2:1a:bf:f2:d7:9e:a2:16:
7a:ad:7a:49:2b:55:68:b3:0c:39:de:7b:b6:0e:3e:
cf:9d:72:df:ac:cd:06:12:f3:3d:4f:b0:cc:05:a6:
56:f1:78:43:2d:87:95:58:f8:95:35:1f:f3:28:41:
bb:70:93:d3:1e:87:5b:c8:41:a2:e0:f7:80:3f:52:
be:bc:ad:49:1f:d1:9e:8f:31:af:0f:99:0c:28:aa:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:01:0D:19:19:8C:89:97:94:1C:D1:DE:9F:9A:BA:63:40:86:03
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0FC6AF48E56711ED866DC90B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f5:77:78:5d:aa:de:7e:d5:bf:83:7e:0d:56:47:3f:1e:98:
78:20:07:b7:4a:46:46:c9:06:b1:cb:6b:04:cf:e5:f6:73:c9:
76:f0:8c:22:60:3a:66:5c:bd:15:9c:51:fb:54:f9:8f:b5:43:
71:cf:e9:40:1c:15:20:e7:99:91:d1:fb:33:3e:8f:f0:54:83:
01:15:59:6f:23:84:11:15:56:46:ec:59:01:04:70:77:aa:51:
91:bd:3c:e4:70:78:7e:56:76:22:69:ce:55:5d:27:e2:dd:98:
81:9d:2f:9e:9f:1d:ed:1f:d3:06:b8:64:1b:f9:3d:a7:e0:38:
df:a7:4f:b4:a6:5f:17:a3:b1:69:62:81:26:de:dd:75:dd:ca:
98:ec:6d:a9:9f:7b:4f:30:a2:ad:2f:fb:4f:c3:b5:5b:52:15:
81:e3:a2:2f:59:06:f4:8b:53:04:11:ce:b2:47:6a:6a:51:0e:
49:0f:3a:03:57:01:84:82:5f:ac:54:55:3f:a7:b6:6d:19:39:
ac:47:a6:b0:e3:a1:a8:12:73:61:a7:59:20:19:f0:6a:b9:5b:
17:30:22:ef:22:2e:15:60:d4:6c:33:db:85:71:59:d8:c3:d1:
d7:04:0a:f6:75:12:ee:0b:0d:25:a4:cc:2e:f5:63:4d:04:8a:
ad:92:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org