Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/155347C4F9CB11ECBB06ACF3F1222468.roa
File: 155347C4F9CB11ECBB06ACF3F1222468.roa (raw, json)
Hash identifier: aRfe8CXeGpcLn1CXBq1mXp+ZAIkgp7y4zUFIiiE3FK8=
Subject key identifier: 7B:CB:31:EC:AC:DB:92:6D:9A:F5:1D:A4:B5:69:F3:0A:45:02:6A:E2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06EA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/155347C4F9CB11ECBB06ACF3F1222468.roa
Signing time: Sat 02 Jul 2022 05:51:57 +0000
ROA not before: Sat 02 Jul 2022 05:51:54 +0000
ROA not after: Sun 02 Jul 2023 05:51:54 +0000
asID: 43676
IP address blocks: 102.129.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:51:54 2022 GMT
Not After : Jul 2 05:51:54 2023 GMT
Subject: CN=62bfdcfd-b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:6c:b6:78:10:5d:54:b4:83:dd:e5:44:7b:
e6:87:65:53:ee:b2:8f:1e:ab:c5:ca:86:00:c2:9e:
ef:2d:de:8c:e6:38:48:23:d0:18:cd:8c:2f:85:c0:
a6:b1:04:8f:49:ff:13:be:70:b7:c5:be:98:ff:be:
97:f9:5d:b9:b7:9d:b1:5a:91:a1:7d:30:3d:2c:75:
34:07:f5:81:a6:61:91:72:87:e4:c2:6d:5e:ed:8c:
7d:9e:dc:9b:62:4b:7e:8f:ae:2c:1b:8a:9e:6a:08:
af:96:57:a6:25:a2:48:bb:6e:f2:de:e4:7f:a6:fb:
3c:09:97:18:08:be:ce:24:49:a5:9d:6f:49:2b:7d:
bf:2a:42:33:6a:ec:27:86:87:db:a1:9e:c8:f9:70:
c1:e8:b0:0c:23:1c:51:d5:ed:ab:48:ac:8c:43:72:
e9:3e:b5:3e:d6:59:10:d6:22:d6:3b:d7:78:eb:ce:
3e:15:3e:0d:2b:57:bc:fb:2b:13:2c:40:ab:e7:ec:
cf:79:cf:97:7f:9a:ac:a5:f9:96:95:de:58:66:aa:
31:20:62:14:9f:4e:63:dc:d9:76:50:f7:1c:08:41:
32:03:c7:5c:c7:9b:2f:dd:b8:e8:e7:9b:6a:0c:af:
1e:15:a2:8c:c3:dc:4c:1c:12:3e:25:4d:8a:2b:cf:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CB:31:EC:AC:DB:92:6D:9A:F5:1D:A4:B5:69:F3:0A:45:02:6A:E2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/155347C4F9CB11ECBB06ACF3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:37:79:10:f0:41:e2:53:c5:b7:57:ba:27:9a:6c:c1:9a:2b:
84:3d:9f:0f:1d:bb:55:2f:3f:c6:8c:52:1c:b4:c9:98:d3:ce:
30:50:4a:3e:c0:56:14:f6:65:e0:5e:7f:09:43:e6:c5:b1:be:
09:a7:22:75:8e:38:76:f7:00:0a:ff:a5:ba:58:bb:6c:91:55:
d7:ec:d3:da:31:7c:19:c6:81:6a:55:ff:3a:be:7a:11:63:d1:
86:70:74:a6:3c:54:aa:03:51:ff:18:3a:10:b5:d3:34:7a:9c:
fc:9a:aa:33:85:0a:7f:da:6a:50:56:58:af:f0:ee:f5:70:b5:
65:26:44:9e:ac:60:ae:b9:b4:1a:de:6f:5a:cb:6a:3e:06:70:
54:7e:18:a1:21:ad:ea:83:45:c7:08:82:10:ff:1f:67:0d:73:
18:0d:29:72:a1:eb:1f:eb:d7:b7:9d:76:99:e2:76:52:f8:f7:
01:08:56:20:c0:50:02:bf:2d:b5:e7:41:a9:53:ed:c5:9a:34:
f6:63:72:61:05:98:6f:e3:1d:48:f7:54:a5:c2:11:d1:ef:ff:
bf:e4:ee:ea:fa:d8:73:53:73:27:99:46:0f:d7:df:a2:3a:93:
aa:20:e2:b5:ae:72:92:0d:49:00:08:da:d8:f8:c0:00:26:3c:
a6:86:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org