Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/228ADB24B23611EBA229554AF8AEA228.roa
File: 228ADB24B23611EBA229554AF8AEA228.roa (raw, json)
Hash identifier: 8Ua3d9TfBwL3xpCCTfQh8Ar2KxFa6dw35/t0oP9Vb4k=
Subject key identifier: A8:31:3B:F1:30:BE:81:F1:37:28:75:C4:98:C6:C2:9C:55:81:76:80
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03ED
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/228ADB24B23611EBA229554AF8AEA228.roa
Signing time: Tue 11 May 2021 08:51:54 +0000
ROA not before: Tue 11 May 2021 08:51:49 +0000
ROA not after: Wed 11 May 2022 08:51:49 +0000
asID: 6315
IP address blocks: 102.129.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 11 08:51:49 2021 GMT
Not After : May 11 08:51:49 2022 GMT
Subject: CN=609a45aa-8bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:7b:51:1b:0e:d8:5d:a9:5d:e7:9a:9a:fc:
f3:86:fa:77:52:a8:dd:52:b0:dd:c8:9a:24:75:5f:
86:ed:85:4d:a6:2a:8f:43:2e:f8:dd:7a:83:0a:ab:
58:94:ba:cc:fe:fd:17:c1:3e:44:c6:0b:fe:51:1c:
5f:b1:15:e8:bb:72:ac:5c:c2:20:36:d3:50:b6:b5:
0c:7a:88:bf:95:f6:d5:c6:5b:40:b9:1a:42:f5:94:
67:23:f8:c5:bd:28:6d:5d:9e:d9:9b:6a:d7:1d:b9:
f3:07:b3:dc:14:4b:20:e9:41:49:8b:01:45:18:e7:
5a:6d:2e:95:f4:6f:76:d5:7f:68:1b:83:8a:a4:7c:
41:79:66:31:17:18:aa:ed:33:a0:5c:41:b0:98:9e:
52:7e:d3:bf:21:ab:94:4e:04:af:a5:fc:86:8e:d7:
80:69:63:71:33:1d:39:04:72:46:1f:a9:a9:eb:74:
82:95:7a:18:7a:47:8c:26:b7:ab:92:8e:72:1d:ed:
67:82:72:40:aa:d5:8e:ba:96:35:2f:2f:35:19:3c:
d4:38:ad:eb:38:7c:3a:ec:25:1d:72:d0:41:2a:d7:
06:b3:29:bf:7a:d9:35:29:d4:d9:52:ac:c2:f1:49:
33:d1:50:52:29:48:8c:68:d2:52:de:ed:36:44:18:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:31:3B:F1:30:BE:81:F1:37:28:75:C4:98:C6:C2:9C:55:81:76:80
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/228ADB24B23611EBA229554AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:39:6d:02:1c:48:3b:c5:4e:c4:fa:36:43:a3:84:cb:56:a3:
5b:46:ab:24:d4:f3:8f:35:04:34:ba:10:a0:cc:03:2d:b4:15:
e2:8f:c0:4b:db:b2:9f:f3:23:6c:df:90:01:89:79:3b:ee:d9:
7b:49:a9:ca:2b:5b:b9:e7:77:64:93:8a:dd:63:73:13:e1:9e:
78:20:7c:8b:7f:ba:14:ff:4c:87:c8:d9:25:1a:41:3a:af:ae:
b2:0c:9f:f4:f6:0d:a1:71:fd:eb:33:e3:85:b5:cc:d6:1a:6f:
f3:ef:0b:03:ee:c0:2f:88:57:33:3e:21:27:aa:64:03:de:7c:
68:0b:b9:3c:e4:25:c0:0a:03:0b:26:ef:c5:14:76:11:04:01:
2f:67:a8:61:40:f1:f7:17:52:d4:2d:9c:90:67:ef:e1:e6:40:
6d:a5:7b:d1:c3:37:e2:b0:4e:0e:ec:43:d2:3e:4d:b4:0f:f6:
4c:17:61:32:39:1a:b4:5d:f6:ec:87:b2:98:00:27:88:2e:9a:
d0:c1:c6:d8:21:a3:3a:a3:b0:b7:92:dd:61:a8:63:2b:c5:70:
6a:11:13:2e:99:4f:b2:e1:22:97:33:89:f0:dc:6d:2a:6c:41:
29:30:dd:da:b6:60:54:a5:c0:8d:65:c2:44:8f:42:d9:07:09:
4c:ef:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org