Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12E9E488184911EDBB9DF8D4F1222468.roa
File: 12E9E488184911EDBB9DF8D4F1222468.roa (raw, json)
Hash identifier: H59oPCDHtlZOHFisUgSZ43YWuqphqfJiAXmEwoDVG2M=
Subject key identifier: 2F:A3:2B:F8:B6:03:4D:B7:DB:4D:23:FC:A5:73:18:34:1D:02:13:8E
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 076E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12E9E488184911EDBB9DF8D4F1222468.roa
Signing time: Wed 10 Aug 2022 01:09:25 +0000
ROA not before: Wed 10 Aug 2022 01:09:19 +0000
ROA not after: Thu 10 Aug 2023 01:09:19 +0000
asID: 46573
IP address blocks: 102.129.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 10 01:09:19 2022 GMT
Not After : Aug 10 01:09:19 2023 GMT
Subject: CN=62f30545-a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:47:be:17:20:67:7d:a7:a1:11:24:80:99:
ef:ff:66:89:ee:ce:68:8e:33:bf:fb:6a:d2:de:fb:
34:fa:40:79:78:16:80:2a:05:9b:41:a6:0e:c9:ba:
5a:06:8a:a1:f8:10:d5:50:9d:5d:49:c2:b0:45:45:
96:6d:c3:48:9d:5c:e4:b2:91:2a:14:7d:21:bd:60:
ba:10:86:12:2d:d1:c6:3c:91:b1:a8:db:2d:77:4e:
35:d6:88:38:65:d3:33:b5:31:b5:e6:34:33:59:f4:
a6:64:f5:79:da:34:28:15:c6:a7:27:ad:9f:9d:4a:
6a:13:47:e6:34:cb:6c:6d:5c:52:a6:b2:b7:14:30:
f3:ab:7b:20:fc:89:e8:43:d0:82:19:b0:8d:99:4a:
66:81:0f:fc:08:a6:54:20:be:02:be:04:3c:e2:ed:
3d:c9:5f:59:f6:9e:83:55:2f:98:b8:2a:b2:bd:1a:
13:87:6a:cd:a2:38:59:51:94:2d:f3:22:de:60:17:
fa:1d:f9:fd:48:c1:15:0a:d5:d7:b5:6f:76:29:c6:
47:4a:6b:2a:5a:fa:f1:76:ff:15:ea:33:c8:73:47:
67:9b:f5:a6:80:40:36:66:a0:f5:b5:6f:51:cc:83:
87:81:82:5f:70:5c:9a:c2:32:9b:06:ed:6c:0e:91:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:2B:F8:B6:03:4D:B7:DB:4D:23:FC:A5:73:18:34:1D:02:13:8E
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/12E9E488184911EDBB9DF8D4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.181.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f7:e4:be:85:67:d1:ad:d6:eb:1c:a9:66:bb:ae:d3:1d:cf:
c3:9e:96:b0:76:25:20:ff:23:68:8e:e7:98:78:dc:82:1b:fe:
55:8a:a7:b0:bb:cd:a8:79:6e:98:63:b2:d7:79:82:35:a6:48:
f5:01:6a:61:d8:11:a6:89:8b:af:a2:bf:e5:a1:51:10:9d:51:
f7:1a:c2:8d:c7:c0:1b:8f:e4:2e:d5:f5:83:5f:7c:4f:ca:a1:
e2:f7:ca:8f:68:ff:c7:fe:c8:9a:76:09:99:83:2e:46:b6:99:
2d:92:1b:d6:0a:98:b8:68:d4:13:73:23:d0:41:b0:57:75:85:
55:98:9a:48:45:ce:ff:e7:d0:e3:df:b7:46:33:79:48:b6:19:
54:9e:77:2e:76:cc:22:21:3b:10:19:56:16:13:cb:64:d3:c2:
31:03:56:c3:b8:6c:9b:68:ce:9e:bb:aa:ea:1c:78:52:c1:0f:
0f:63:e1:ab:f0:74:23:9d:b4:1b:83:da:b8:80:9c:ef:21:a4:
04:12:88:66:e4:4b:12:03:89:3a:29:da:8d:66:3e:a7:51:bd:
e4:05:71:31:b2:c6:17:e1:53:87:ea:88:29:25:cd:bc:8d:90:
f5:f8:80:ef:2e:34:fb:76:37:53:91:81:46:45:53:2e:3b:46:
ea:b9:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 07:43:53 2023 by rpki-client on console-ams.rpki-client.org