Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16979ECA8B0A11EDB73611CAF1222468.roa
File: 16979ECA8B0A11EDB73611CAF1222468.roa (raw, json)
Hash identifier: SzRW9dZiL54EPaW8jJQsr7AlOLspVwIT0QmjyacyKXU=
Subject key identifier: 47:74:22:74:DC:32:3B:6F:AF:71:22:6D:10:1B:55:64:A5:42:1D:F5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 099D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16979ECA8B0A11EDB73611CAF1222468.roa
Signing time: Tue 03 Jan 2023 01:58:16 +0000
ROA not before: Tue 03 Jan 2023 01:58:13 +0000
ROA not after: Wed 03 Jan 2024 01:58:13 +0000
asID: 40676
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2461 (0x99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 3 01:58:13 2023 GMT
Not After : Jan 3 01:58:13 2024 GMT
Subject: CN=63b38bb8-1630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:ea:8c:b0:04:99:a7:2e:60:e3:4a:84:ff:
e3:da:e5:d9:04:68:68:f2:59:bc:e7:12:dd:54:70:
03:bc:e6:13:cd:e1:49:6a:21:29:19:18:b1:8e:db:
69:b0:d3:92:53:eb:51:3b:61:7f:61:d0:bd:c6:27:
08:d6:df:7a:06:be:8b:e6:19:a4:24:cd:2b:bb:0c:
ae:f4:41:75:90:a4:37:00:11:d8:e3:ba:2a:a8:51:
dd:7f:13:2f:93:e2:87:1e:3c:2a:ec:16:51:90:51:
39:89:d1:6c:69:68:cc:12:0c:a5:19:2e:aa:9f:4e:
0b:9e:9f:11:82:5c:19:9b:a7:7a:9a:cc:d4:3f:c6:
b3:ce:37:0f:d4:2e:3e:f2:b7:af:2d:57:23:c3:45:
27:ab:18:0c:47:a4:09:b8:88:bb:87:f4:50:a6:70:
53:3f:d4:d8:f8:c2:d0:48:43:fd:75:99:2f:87:ff:
85:9c:91:8b:cf:dd:7f:f7:93:67:c8:76:0d:af:66:
82:a2:16:01:a9:2a:6a:67:ac:df:a4:eb:5b:74:64:
78:01:5a:6e:33:03:12:05:e9:89:60:e8:03:c8:05:
15:9c:c9:36:d7:c0:9e:e4:07:90:93:48:e5:bd:bc:
6c:27:7c:ec:51:42:74:9e:7e:e3:8d:c1:6c:1c:59:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:22:74:DC:32:3B:6F:AF:71:22:6D:10:1B:55:64:A5:42:1D:F5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/16979ECA8B0A11EDB73611CAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5a:09:e3:42:29:3b:b6:2f:be:39:99:7b:aa:8a:af:5e:72:
70:6d:a5:1f:61:f5:3e:0d:d8:46:28:ee:e6:81:92:a0:87:64:
38:b5:f0:f1:af:68:23:47:31:ca:65:be:e8:bf:16:45:5f:79:
94:e6:3a:93:d9:5c:30:21:01:e8:ce:05:d2:61:b2:6f:23:93:
c0:e5:57:0f:5d:66:31:b1:30:43:8c:1c:fe:5e:b9:90:c4:9b:
04:98:bb:13:a0:4c:ce:1e:9e:ad:49:30:fb:f4:69:85:41:ce:
83:f2:49:6c:6c:26:ef:de:70:f1:60:ae:26:33:ad:53:03:ba:
8d:26:f3:e3:c8:a7:26:ce:fa:6c:82:66:47:24:f9:81:6a:12:
e3:59:db:0b:83:83:9d:3f:57:00:af:5b:c6:a7:e2:36:68:e7:
db:6a:0f:d6:02:ac:85:a7:79:a5:a9:04:d4:f1:36:f5:c4:0c:
99:76:29:db:22:93:e7:e1:bc:ea:71:04:60:5e:e2:a2:e1:d3:
25:92:81:ce:6f:cf:3e:ab:04:33:c5:b1:56:bb:5e:b3:13:3b:
97:d4:d1:b9:3a:ef:1c:c1:06:cb:75:6f:5d:51:3d:00:be:56:
cd:58:0f:d7:55:29:52:93:1f:08:2d:58:36:ad:3f:88:94:7a:
e8:70:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org