Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/327E4CEC1C6B11EC9F3A334BD8A014CE.roa
File: 327E4CEC1C6B11EC9F3A334BD8A014CE.roa (raw, json)
Hash identifier: /FcsXG2+B+OtkhSr6EaJ9VxghxGC3KEGR3TcZjkMaPk=
Subject key identifier: AE:D1:D8:70:C4:55:D0:6F:EB:B9:5E:61:21:F9:6B:BC:46:26:81:6B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04F7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/327E4CEC1C6B11EC9F3A334BD8A014CE.roa
Signing time: Thu 23 Sep 2021 12:38:48 +0000
ROA not before: Thu 23 Sep 2021 12:38:42 +0000
ROA not after: Sat 23 Sep 2023 12:38:42 +0000
asID: 61317
IP address blocks: 102.129.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271 (0x4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 23 12:38:42 2021 GMT
Not After : Sep 23 12:38:42 2023 GMT
Subject: CN=614c7557-3de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:83:af:63:d8:0c:cd:28:46:c8:2b:a1:59:
22:db:54:ef:22:65:2f:33:73:0c:a0:f1:ea:a3:ad:
66:92:d0:d7:85:68:2a:ad:95:58:c9:56:9f:f1:0a:
26:56:ed:e1:6b:47:bc:af:a7:a4:b7:4c:9d:e3:04:
76:96:fc:47:6f:03:14:96:61:a8:db:4c:f5:d8:c1:
62:ce:7d:67:f9:f2:4b:9a:6c:8b:d4:ef:9e:9c:95:
04:3c:5a:6f:a6:3a:ff:61:3f:fb:4a:90:a6:02:89:
f6:a2:cd:58:2b:48:43:81:29:c2:d4:fb:93:61:68:
f3:77:95:05:7f:98:d3:85:e8:0e:cb:25:0d:17:cf:
4f:cc:62:ac:52:10:cc:3c:44:4b:f8:e0:96:82:08:
93:43:5b:89:a0:93:be:8b:02:52:ad:ac:d8:c1:18:
b5:22:d5:d8:a4:f9:3e:94:28:f7:7c:74:a6:70:dc:
2b:a4:47:74:b1:dc:fd:8c:43:b9:0a:8f:80:9d:cd:
da:e4:3e:fa:4a:e4:da:5a:db:26:64:f6:c8:8f:d4:
dc:0f:aa:89:28:66:a4:a9:5c:56:0b:11:8c:d3:04:
21:76:6b:0a:37:31:7f:72:41:a0:7e:16:68:b3:f6:
f8:21:cd:f7:87:77:1b:c4:c1:9c:1e:ce:83:30:ed:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:D8:70:C4:55:D0:6F:EB:B9:5E:61:21:F9:6B:BC:46:26:81:6B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/327E4CEC1C6B11EC9F3A334BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:13:84:c4:04:cc:7c:f8:1a:19:ed:b1:64:47:cd:c6:d1:54:
7c:39:30:ad:d8:85:3c:d1:38:4a:59:8a:84:60:69:90:22:2d:
5d:0e:fc:ac:b5:10:6a:0c:3a:88:29:88:d5:d9:56:23:5e:89:
79:7d:cd:a0:b9:8c:5a:af:8d:b3:50:dc:f9:46:a6:3d:3a:46:
93:05:d8:06:ba:60:0b:74:ad:51:3f:f1:dd:50:91:9f:ff:f9:
0a:d7:dc:43:0b:46:cc:50:a1:0d:cc:84:69:91:30:b1:f3:c9:
84:87:01:26:cd:07:d9:f1:fe:38:4c:7c:d1:9b:df:6c:63:32:
88:d8:0e:02:fe:17:d4:7f:4a:ab:90:dd:76:fe:a9:49:ff:b7:
d4:f1:5d:6e:46:d0:44:da:1a:8b:27:8b:f0:3e:b8:bb:9c:fe:
f9:4b:68:7b:d3:33:a2:a9:65:41:32:03:6a:87:c8:d7:63:22:
61:cf:aa:75:be:64:d4:ec:49:e2:71:09:04:5f:7d:00:8d:bb:
aa:4c:c8:1a:9e:33:e3:3f:b2:87:bf:23:07:02:71:5d:ca:e5:
e9:68:c3:e5:bb:b8:5c:03:21:14:4f:37:a6:ed:e9:23:00:3f:
6a:ef:5f:37:d6:15:5b:9f:9e:21:a8:2a:0c:6f:6d:d2:da:fc:
cd:a9:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org