Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C3B68301D2111EDACCC7ABDF1222468.roa
File: 2C3B68301D2111EDACCC7ABDF1222468.roa (raw, json)
Hash identifier: j1g6HS5f5kqZlsCvBv61wMsjyjKTwrWDQzA6dUT0FX8=
Subject key identifier: A2:14:B1:59:CB:31:72:F8:6C:73:6B:66:DA:C2:6C:28:9B:C7:67:E5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0781
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C3B68301D2111EDACCC7ABDF1222468.roa
Signing time: Tue 16 Aug 2022 05:06:23 +0000
ROA not before: Tue 16 Aug 2022 05:06:19 +0000
ROA not after: Wed 16 Aug 2023 05:06:19 +0000
asID: 40676
IP address blocks: 102.129.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 16 05:06:19 2022 GMT
Not After : Aug 16 05:06:19 2023 GMT
Subject: CN=62fb25cf-4c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:32:f0:d1:6a:c6:2e:d4:e6:fc:0b:5e:36:
6c:2a:46:87:a1:e7:5d:68:a2:8f:80:db:d1:85:8c:
36:5a:99:a9:e2:18:4c:6b:a8:c5:80:e3:ab:b5:ec:
e2:6d:d1:41:29:19:a1:98:02:8f:46:76:48:7e:df:
15:40:d5:12:8a:2d:71:8f:e6:1b:af:63:4b:a4:23:
33:2f:2e:88:08:3f:a9:d2:c1:40:d7:5f:b1:78:ea:
68:e0:3c:15:1f:79:d9:cb:c9:9d:8c:49:75:cc:a9:
60:95:1c:54:d6:68:8b:d6:59:64:78:ad:d1:8f:49:
4c:8d:c4:d0:3a:6b:5e:31:91:80:3f:63:54:f6:f4:
8a:d5:81:ac:eb:8a:df:7a:92:98:32:2b:c2:15:bf:
a5:37:08:fc:45:c9:4a:f5:28:04:8f:60:81:18:da:
b3:9b:77:d6:a6:03:b3:d5:58:50:15:0e:58:0d:a6:
f1:c5:42:b9:90:91:a4:41:41:97:2a:17:df:1b:03:
bb:fa:71:2e:b3:a5:15:81:bb:bf:1f:2e:43:d8:14:
0b:47:62:80:18:74:3e:80:3f:d5:90:50:d5:1b:35:
22:76:bf:e6:e5:94:b7:a2:15:15:c7:fc:cd:ef:4e:
21:6c:77:a9:aa:cc:ed:a2:81:66:9b:eb:8b:4e:9e:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:B1:59:CB:31:72:F8:6C:73:6B:66:DA:C2:6C:28:9B:C7:67:E5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2C3B68301D2111EDACCC7ABDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8e:81:4b:cc:a5:fb:fc:91:b3:ac:a8:3e:1f:38:7d:6e:c2:
85:1e:3e:d3:15:62:29:e2:8b:9a:88:d1:76:bd:33:a6:6f:ee:
b2:58:60:a8:3d:5c:88:c7:60:c1:10:8b:3b:11:3e:42:ae:d4:
2e:bc:fa:e5:bb:a1:f5:40:dc:ee:e2:9e:99:ec:47:7f:c6:5e:
98:65:b3:d3:52:ad:a7:b2:d5:bf:41:66:6e:c2:e8:8a:e9:bf:
af:f2:4d:54:86:ae:a4:4a:95:78:03:c0:f8:57:86:1b:86:81:
a8:ec:a0:71:d1:8a:1d:4d:fe:71:98:39:cb:5c:3c:8b:b0:70:
82:a8:1a:a7:c3:39:85:62:e4:fd:99:b7:79:d8:0d:ab:e6:81:
52:e2:7b:a8:aa:ea:16:b9:cf:02:9a:a9:67:c0:d6:a1:9c:89:
45:bc:94:d7:21:d5:cc:81:75:75:e1:16:11:29:c8:65:96:5b:
90:05:7f:5e:ec:40:61:3c:45:cc:2c:64:86:62:26:53:13:36:
5b:4d:9d:48:d9:ab:01:eb:d6:ca:fe:5d:f5:99:97:56:85:aa:
eb:cc:64:c5:7f:21:c7:fa:50:fd:35:a2:05:8d:b3:39:b9:7d:
22:aa:de:34:19:f0:5e:b8:0d:ae:e4:5e:f2:53:45:db:f5:32:
32:73:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 19:29:31 2023 by rpki-client on console-ams.rpki-client.org