Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20CA736C493F11ECBB62CA62D8A014CE.roa
File: 20CA736C493F11ECBB62CA62D8A014CE.roa (raw, json)
Hash identifier: rhNFNp4PNsApcKHbiyyNeOsgpgZJ9PUz6X4QlJHqNC8=
Subject key identifier: B5:9E:21:11:04:A9:9F:42:5F:F4:88:80:80:57:8A:6D:6A:EB:4D:2C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0554
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20CA736C493F11ECBB62CA62D8A014CE.roa
Signing time: Fri 19 Nov 2021 13:46:43 +0000
ROA not before: Fri 19 Nov 2021 13:46:39 +0000
ROA not after: Sat 19 Nov 2022 13:46:39 +0000
asID: 147176
IP address blocks: 102.129.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 19 13:46:39 2021 GMT
Not After : Nov 19 13:46:39 2022 GMT
Subject: CN=6197aac2-ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:87:75:92:73:40:91:a8:e3:68:d0:f0:79:
5f:3a:25:77:50:46:62:95:ea:9b:1e:ad:1e:38:1d:
c7:9c:16:df:b9:28:20:fc:a1:5c:5e:ab:29:9b:6f:
8a:61:7f:43:a3:62:6d:8d:c6:37:bf:23:c7:bd:5a:
67:e7:04:3b:79:8d:90:45:4c:2f:81:c7:79:5f:6f:
f1:58:75:5e:cc:23:74:b1:11:b3:08:b0:99:4c:59:
9c:15:aa:b8:c8:0f:11:ce:d9:61:50:ac:b6:b5:ad:
91:87:11:77:f1:c4:e1:a7:8c:ce:5f:c5:54:f0:44:
fc:69:34:4d:35:7b:cd:b0:3a:ec:4f:23:10:fc:7c:
de:26:7b:b2:20:5f:fa:ff:96:23:e0:d5:c2:c9:2e:
f4:27:ba:cd:8d:30:6f:f6:07:d1:fc:de:f4:13:f4:
ac:da:ae:7a:ea:7d:37:ed:c8:cf:99:79:3d:64:83:
f5:c0:08:46:f9:a9:94:49:43:07:b2:42:2a:ca:2a:
96:23:67:0a:d0:5d:83:1f:3f:94:b1:63:7c:0b:5b:
eb:66:14:08:d3:45:3d:44:7a:48:db:71:12:b9:62:
bf:7a:97:b9:2c:2b:67:86:f6:b9:b5:a3:37:f0:33:
14:10:87:c4:18:f0:56:8e:70:65:ad:5e:13:e6:d0:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:21:11:04:A9:9F:42:5F:F4:88:80:80:57:8A:6D:6A:EB:4D:2C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/20CA736C493F11ECBB62CA62D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0d:dd:af:52:37:93:d2:3a:30:45:47:ed:1c:86:d4:d9:94:
ab:49:74:f7:15:fa:ac:5b:89:58:16:1c:38:c3:07:c5:0b:a5:
c0:53:88:40:e4:d6:a7:67:89:02:42:39:08:85:6c:33:c1:55:
3c:e8:b0:11:72:28:b1:db:6e:e8:92:30:c2:83:6b:b7:21:d8:
ba:16:37:10:aa:42:81:a2:56:53:c5:91:f9:e5:3d:77:f1:95:
00:0f:99:e9:a2:0b:ba:9c:3c:6c:43:e4:a6:15:d9:3f:57:52:
41:a3:f5:4b:b2:4c:1e:09:25:62:29:df:74:06:dd:91:36:b5:
c4:72:3c:5c:7d:e6:da:7b:99:70:28:63:00:f3:f5:4d:2c:d3:
ad:e7:2b:9e:b1:aa:89:78:f9:db:0d:af:33:49:82:c5:15:5f:
24:82:4e:d8:85:53:b2:76:fd:89:70:e2:0d:a6:d9:2c:65:e5:
23:8e:fa:c8:77:e6:8d:d8:f2:32:6c:63:90:85:97:cc:6a:b1:
92:0b:17:4e:87:6f:3f:76:b0:c9:89:86:b1:91:53:0b:73:0a:
6a:b3:e5:6e:85:9c:da:f3:4a:5e:10:c7:a5:82:eb:f8:f6:d0:
26:66:c8:b0:1d:c6:50:9e:05:b1:92:91:83:91:67:eb:08:5e:
09:42:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org