Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22CA6B60C61011ECA77ECC81F1222468.roa
File: 22CA6B60C61011ECA77ECC81F1222468.roa (raw, json)
Hash identifier: UFg38iU4t+j9ZrChF1l+CN825bDyV3uASYuHdzQGNfc=
Subject key identifier: DE:32:A6:16:93:31:0D:52:F5:5F:68:54:18:50:A7:43:94:D8:23:11
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0641
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22CA6B60C61011ECA77ECC81F1222468.roa
Signing time: Wed 27 Apr 2022 09:55:15 +0000
ROA not before: Wed 27 Apr 2022 09:55:11 +0000
ROA not after: Thu 27 Apr 2023 09:55:11 +0000
asID: 174
IP address blocks: 102.129.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 27 09:55:11 2022 GMT
Not After : Apr 27 09:55:11 2023 GMT
Subject: CN=62691303-9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:b2:a6:3b:ee:9b:a7:42:29:14:a3:58:4d:
a3:8a:1c:14:59:7a:83:09:0e:2b:62:ff:fd:a4:d8:
44:20:48:1c:5b:9c:73:ce:46:8f:89:89:f9:6d:fb:
7a:53:a1:cb:9d:66:ff:d4:78:7f:9f:a3:07:2c:b5:
cb:74:fa:35:b0:3a:c4:55:51:45:27:ce:ed:9f:de:
1a:c2:02:ad:e4:9e:64:7e:5d:6d:35:30:7b:34:22:
74:1c:0d:25:ef:d6:b6:23:a4:2e:cb:42:c8:c0:81:
34:36:d2:0c:ae:cb:bd:10:cb:63:2f:cc:50:2a:c9:
6d:e4:d4:29:a4:2c:17:ac:39:bb:64:e2:fe:76:75:
ea:63:83:10:c5:9d:34:21:25:e7:d6:67:71:53:7f:
46:fa:b7:1d:05:2d:3d:04:7b:29:30:a3:39:49:d0:
18:64:57:e6:75:96:ac:22:17:68:da:4d:78:9a:e0:
99:9a:ef:ea:1f:1d:d2:5a:7b:ff:39:04:40:23:a9:
fd:2d:d8:8f:a5:c9:53:cf:3e:8b:35:0d:67:cc:c6:
98:1a:3c:f7:e0:c7:fe:2b:7c:cd:a4:75:59:91:43:
46:6b:69:60:cc:6c:ec:84:c8:cf:6a:eb:62:74:45:
27:16:5a:99:ec:b1:fd:18:2d:59:c0:c4:84:6b:e6:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:A6:16:93:31:0D:52:F5:5F:68:54:18:50:A7:43:94:D8:23:11
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/22CA6B60C61011ECA77ECC81F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.153.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:06:97:44:55:6a:70:13:fc:77:9c:a1:b7:d1:aa:17:fd:c0:
7f:96:8e:34:47:40:3b:7f:31:e6:fe:2b:ba:b0:64:83:a4:18:
7e:2b:c7:77:ca:c2:08:4a:ec:22:7f:35:e3:cd:6b:1e:09:2d:
b7:7c:19:15:1e:e9:a9:6a:e5:8f:68:c4:fc:00:d0:f3:37:0f:
07:0e:24:fa:e6:89:6f:17:90:58:6a:d8:76:82:d9:96:6a:31:
ab:0c:09:50:ab:84:20:4a:59:fa:56:65:cb:ea:68:f0:87:93:
c1:d2:e3:7f:d8:bd:e8:d2:f7:54:02:b0:6d:0b:52:9a:1e:1e:
c6:c7:85:3b:d1:62:1b:66:6a:42:5e:65:d9:f0:da:b2:2c:1d:
f0:e5:ed:86:1d:2e:a8:4c:f7:84:5c:ce:13:c8:da:98:33:4a:
23:f1:c7:f5:bd:7d:c6:d4:3d:4c:6b:bf:ea:35:80:82:e7:79:
ed:01:55:6d:32:a5:57:fc:49:26:11:bb:0e:47:74:7b:c4:93:
41:c1:f9:55:43:e4:43:e0:2c:0b:08:56:76:50:4f:b7:f3:d2:
b1:b5:a2:55:2d:c1:49:15:88:1c:15:2e:f6:35:90:7a:12:ba:
1a:45:17:fb:a1:03:ba:e5:2e:b0:48:3f:d2:94:93:b9:49:4b:
8f:59:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org