Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2900A25CFF8A11EC9090EAABF1222468.roa
File: 2900A25CFF8A11EC9090EAABF1222468.roa (raw, json)
Hash identifier: 9BpUqsvNwsuzFRd7jD0jOqT412ay9jVr4VtVwLPSjWw=
Subject key identifier: 20:21:0F:9C:47:D9:47:9C:8B:46:02:8C:87:2F:E8:21:58:8A:66:62
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0729
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2900A25CFF8A11EC9090EAABF1222468.roa
Signing time: Sat 09 Jul 2022 13:22:20 +0000
ROA not before: Sat 09 Jul 2022 13:22:16 +0000
ROA not after: Sun 09 Jul 2023 13:22:16 +0000
asID: 46562
IP address blocks: 102.129.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 9 13:22:16 2022 GMT
Not After : Jul 9 13:22:16 2023 GMT
Subject: CN=62c9810c-0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:7e:f4:c5:1f:e6:c4:6c:db:7d:f1:fd:89:
6d:7c:ba:6d:0a:7f:fc:50:c3:89:fb:8b:52:21:5e:
92:f6:c5:18:f6:35:d5:03:3e:99:59:f0:1a:8f:4f:
5e:21:9c:4e:71:ec:e8:44:ae:96:b8:32:a0:9f:03:
99:64:bf:ed:71:63:c6:e3:82:1d:7e:6d:55:98:2e:
24:ed:ee:d8:2b:58:c8:b7:17:ea:db:88:4e:70:9d:
55:93:14:ca:df:e2:4c:b0:f4:d9:5c:0b:4f:d7:40:
2e:c1:8b:b1:db:1f:6a:03:f6:10:dd:33:fc:67:82:
7c:7a:43:49:37:13:65:8e:15:7f:05:31:e1:e4:88:
9a:93:d3:09:52:ed:ba:54:71:1f:f5:41:f9:be:ad:
9b:38:5a:fd:4f:30:42:41:3a:34:ab:23:b8:52:a6:
6b:ae:ec:3a:95:61:7f:97:1c:e4:63:ef:f4:15:da:
b0:ca:80:91:4f:f5:fc:08:99:ed:5d:7e:b1:32:4c:
f3:08:63:39:08:74:55:ad:48:b6:50:ea:e6:e8:40:
d0:f5:5e:bd:a1:4a:59:76:87:40:fc:56:01:56:ed:
e4:15:b5:58:64:b9:a3:3d:ea:ef:b0:14:09:b9:0a:
38:85:69:a4:ec:7c:9d:5f:cf:a9:f8:21:26:f5:26:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:0F:9C:47:D9:47:9C:8B:46:02:8C:87:2F:E8:21:58:8A:66:62
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2900A25CFF8A11EC9090EAABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cf:23:c8:4c:7c:d3:38:be:38:48:ba:6b:f0:da:31:b8:9e:
ad:f3:d9:0e:42:c6:bb:3a:91:c0:be:4a:65:fe:f5:8e:5d:15:
37:89:79:ec:45:79:4b:62:49:44:d2:dd:9a:75:82:7a:08:7f:
7f:f0:c4:69:14:76:b0:ed:08:f3:d6:d5:3d:d7:3e:b9:af:c4:
23:9a:1e:9c:fc:91:ba:60:b9:e3:9a:14:7c:19:c6:52:54:24:
e8:96:a5:72:d8:26:4c:18:5c:13:14:23:cf:f7:05:76:61:a6:
95:25:f7:c5:e3:72:33:92:49:48:c5:5e:21:3d:a1:77:20:68:
ec:51:f4:b2:94:59:9c:a2:d9:88:1c:20:01:63:ea:dc:b2:e7:
e2:7c:64:f7:25:81:50:68:05:8c:0e:41:a2:dc:79:42:3d:d6:
dc:e7:bd:5e:30:00:d5:2e:9a:c5:ef:15:dd:84:4f:0c:7d:66:
45:dc:1e:83:d5:a9:da:79:9f:d6:7d:2a:a6:6b:a6:0c:c2:b9:
02:85:8b:1b:2f:b9:a1:c0:32:7e:3e:1a:5f:7e:e5:89:78:38:
11:d7:e2:5c:b5:27:e9:26:12:cd:67:a2:c8:ce:18:07:01:1b:
f1:c5:9a:72:ee:79:a2:33:d5:8b:17:e8:cd:38:b9:22:73:ff:
0e:c9:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org