Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11C69298AB3211EB88E67785F8AEA228.roa
File: 11C69298AB3211EB88E67785F8AEA228.roa (raw, json)
Hash identifier: wDmg3X+Au402tGtnpoSCFqpHY5kCo6EDuBvGnVTHNdY=
Subject key identifier: 71:0D:43:25:D7:AC:7E:21:93:E6:09:DE:88:4B:B0:1B:5E:4B:4A:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03D7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11C69298AB3211EB88E67785F8AEA228.roa
Signing time: Sun 02 May 2021 10:35:11 +0000
ROA not before: Sun 02 May 2021 10:35:04 +0000
ROA not after: Mon 02 May 2022 10:35:04 +0000
asID: 1239
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 2 10:35:04 2021 GMT
Not After : May 2 10:35:04 2022 GMT
Subject: CN=608e805e-314d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:06:d3:61:2d:58:a4:3c:49:35:84:bd:c5:
de:eb:94:f9:b6:6a:ac:31:79:5a:cf:7f:4c:80:f0:
07:bb:b5:6a:a9:37:20:2c:65:91:fb:e8:c1:3c:89:
8b:ee:36:7a:a8:ae:9f:da:8b:5b:cc:17:13:2b:ed:
a5:c8:49:34:7e:54:26:7d:72:d4:79:d0:66:f6:44:
9e:93:a5:82:11:56:d1:3d:be:67:fb:53:7c:e8:15:
4d:aa:11:0c:01:01:74:c3:62:24:05:78:91:80:8d:
a8:40:29:2d:87:64:69:01:91:d3:10:21:91:aa:b0:
2a:17:7f:f5:17:f3:87:72:3e:46:fd:0a:d2:31:8e:
3c:6d:d5:a4:2b:49:75:44:02:ea:aa:ce:8d:d5:35:
14:08:b8:6d:61:1e:82:0a:29:0a:5e:6b:e3:f7:85:
17:70:fa:c8:f6:9c:29:a1:f2:38:5c:b0:0f:17:b1:
72:5e:70:8b:d4:7f:80:8e:e8:c2:ed:39:c4:d8:cc:
7f:dc:41:63:7b:c1:a0:24:24:d0:c5:a0:d0:26:99:
86:f1:a7:8c:9a:71:66:d6:4e:76:88:e7:75:f7:16:
62:84:cb:59:5d:b2:d2:6a:75:c4:30:09:b1:b2:8a:
71:37:97:93:f9:7f:81:92:69:db:b9:dd:a7:65:b5:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:43:25:D7:AC:7E:21:93:E6:09:DE:88:4B:B0:1B:5E:4B:4A:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/11C69298AB3211EB88E67785F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
91:99:fb:a0:ae:8b:e0:80:7a:a1:66:ea:93:73:25:da:0d:7d:
85:3e:e8:b9:8f:fb:82:8c:00:a1:4f:2f:34:30:be:8b:a6:0a:
6f:a7:20:c4:f8:ab:5f:49:4f:c2:a6:50:32:94:34:a0:18:22:
ff:53:9e:26:f2:a3:ef:58:60:71:a8:a7:f4:73:4e:a2:5d:fd:
6f:70:f5:57:90:74:ec:34:4c:48:6e:5b:2a:2b:24:6e:99:b1:
4f:35:07:7f:c0:5a:65:19:6a:32:58:91:8b:3a:75:21:8a:52:
70:14:6d:0f:d6:cc:50:ba:5e:73:ff:56:c8:44:b0:dd:7d:be:
97:53:79:39:72:3d:16:cc:68:9c:39:e2:57:a3:a1:16:08:e9:
95:41:48:0d:d8:50:72:5a:4e:09:be:ae:f2:f9:d3:d6:71:73:
cd:ee:2c:6e:35:71:19:6b:89:a9:d9:c4:4a:ff:ec:ce:05:71:
cf:d3:59:3e:eb:4f:c0:a7:30:55:92:55:f8:9f:64:f7:d3:1a:
34:87:5a:9f:cd:2a:bf:3a:89:cb:ff:78:b0:f9:f5:40:8a:1c:
07:d2:9f:7a:63:17:6e:3e:8a:f8:9b:02:00:15:1c:f3:aa:27:
83:5a:e2:b2:3b:a0:ab:b7:63:f7:b4:f4:09:18:06:08:b7:a8:
4b:83:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org