Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CACCD9CF9CA11ECB353E2F0F1222468.roa
File: 2CACCD9CF9CA11ECB353E2F0F1222468.roa (raw, json)
Hash identifier: kowaFMFUc05HHAGNNKyaIZF50+er5xVXEOZvmlB0yB8=
Subject key identifier: E4:5A:16:83:36:9B:6D:B1:F4:EF:84:CB:91:44:74:66:C1:61:9D:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06DE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CACCD9CF9CA11ECB353E2F0F1222468.roa
Signing time: Sat 02 Jul 2022 05:45:27 +0000
ROA not before: Sat 02 Jul 2022 05:45:24 +0000
ROA not after: Sun 02 Jul 2023 05:45:24 +0000
asID: 43676
IP address blocks: 102.129.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:45:24 2022 GMT
Not After : Jul 2 05:45:24 2023 GMT
Subject: CN=62bfdb77-4b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:e3:07:75:74:e0:eb:55:a5:8b:6a:df:c1:
4d:42:99:44:01:77:eb:1b:26:6e:95:ac:03:f8:10:
8f:8b:2b:c8:23:8d:fe:a7:17:59:a9:57:7a:79:57:
ff:c4:01:40:49:66:65:b2:7d:7a:49:be:eb:fe:2a:
70:1d:f2:c0:c4:f3:64:b2:5b:d1:f0:be:7b:cd:2b:
8c:6d:95:e7:3a:a5:c9:1a:98:a0:5a:fe:dc:34:e1:
21:bd:bc:3b:98:d7:d1:45:6a:e7:b6:a8:b2:3c:57:
7a:fa:2d:4d:33:cc:2c:f4:50:92:2e:00:87:f0:57:
16:80:6e:57:86:d1:74:fa:bc:fb:cb:24:22:ef:fa:
eb:1c:dd:57:70:54:85:96:ac:c4:98:86:e7:f3:e1:
05:bd:5c:a4:bd:63:d6:3e:27:42:89:91:5d:ad:95:
ad:27:aa:60:a7:61:f0:df:f2:f8:f0:11:ce:08:e3:
62:d9:3b:6e:29:ae:3d:54:fd:e0:d7:d1:49:30:68:
b8:4d:b7:05:97:77:78:6a:28:f6:2c:ee:65:2d:3c:
90:57:74:ec:21:27:2b:52:88:3e:99:9d:2a:92:1f:
7f:8c:a7:7c:cf:60:51:f2:a5:6c:b2:6b:9d:8b:f6:
b3:94:94:92:9f:21:90:56:b1:a6:72:9b:36:a8:ee:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:16:83:36:9B:6D:B1:F4:EF:84:CB:91:44:74:66:C1:61:9D:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CACCD9CF9CA11ECB353E2F0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9f:ed:eb:55:ff:58:a0:e4:23:77:64:f2:69:b5:99:eb:51:
ee:93:b6:c0:81:19:1f:7f:94:1e:9e:dd:cd:19:29:4c:2d:5b:
cd:10:9f:9e:7d:bc:a0:c0:80:1e:6d:6a:e0:3d:b8:8b:3b:e5:
61:e8:32:7f:e8:e8:c4:ce:a8:d7:5b:34:f6:aa:5a:b2:f8:6e:
b4:a2:0f:24:92:88:3b:b4:0f:e6:3f:37:a9:c0:f7:3a:67:cf:
6b:87:4a:be:ae:0c:b8:2e:4f:d0:78:ba:bd:49:b0:0e:28:8e:
6b:3f:47:d7:58:78:4e:ec:03:a6:70:3f:1b:c9:9d:b7:05:d0:
69:b8:a7:49:80:3c:4b:64:d8:75:73:6f:89:24:5e:ed:7c:29:
ee:2f:aa:4b:53:d0:67:f8:a9:ef:86:4d:ec:6e:a9:60:7f:0e:
8d:f7:9b:38:c3:a7:8f:b6:6c:f5:48:34:60:9b:5c:e3:23:2e:
92:b3:be:70:b1:d4:b0:7f:8e:82:db:61:cb:6b:7a:2f:1b:13:
8c:cc:58:59:db:93:57:92:17:91:f9:a4:b7:5d:39:b8:44:8c:
c5:6d:be:35:4d:c8:8d:58:b6:ab:6a:6a:ac:5d:c4:a7:e3:fa:
dc:bf:73:44:e9:2f:9e:5c:47:3b:07:eb:cd:8d:8d:cf:2c:b3:
4c:36:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org