Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3368E1AA113D11ECACA8D83ED8A014CE.roa
File: 3368E1AA113D11ECACA8D83ED8A014CE.roa (raw, json)
Hash identifier: AqnwKy0YQp8hFbdJRJVm0EpQ8HeggyRknMXXV4SVpS8=
Subject key identifier: 2C:BB:8B:6B:AF:C2:22:01:05:70:8C:89:31:DC:21:FF:CB:13:17:5C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04D7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3368E1AA113D11ECACA8D83ED8A014CE.roa
Signing time: Thu 09 Sep 2021 07:11:50 +0000
ROA not before: Thu 09 Sep 2021 07:11:44 +0000
ROA not after: Fri 09 Sep 2022 07:11:44 +0000
asID: 135375
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 9 07:11:44 2021 GMT
Not After : Sep 9 07:11:44 2022 GMT
Subject: CN=6139b3b6-0857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:2b:af:dc:f7:01:cf:8e:62:3c:db:0c:5c:
24:52:37:cc:55:76:30:29:a1:9d:e9:19:b0:cb:2f:
51:40:0a:90:99:58:a4:20:c7:8e:75:d9:ff:ab:c9:
10:dd:fe:55:37:1f:bc:06:b6:e4:8a:f5:35:b2:62:
0d:e3:29:da:43:2d:81:af:62:76:28:35:da:9e:c5:
b4:20:65:84:34:29:d4:78:d2:bf:e1:31:2e:58:87:
78:2c:b2:fa:16:22:e0:27:b6:14:96:93:c2:2b:c9:
90:c7:9b:d3:03:17:8c:71:c0:28:0f:3d:d4:37:31:
75:0d:49:c9:34:7a:72:0d:9b:15:54:62:be:2d:d4:
32:aa:bf:59:e9:e9:aa:ef:b9:34:58:47:e9:ce:90:
a3:ff:a6:42:02:5c:88:14:0b:4f:55:9d:ba:a8:05:
02:cf:d6:45:cb:aa:c0:64:b8:5b:a3:04:cc:a4:29:
eb:27:36:e7:f0:6e:77:59:55:eb:86:97:ea:aa:28:
51:83:78:d8:91:fa:a8:4c:8c:6a:3a:c3:e2:9a:2d:
5f:06:33:a4:ef:cd:04:9a:1d:0c:07:b6:ec:90:ba:
d3:dd:b0:90:bb:d8:c6:19:63:d9:5c:06:dc:bc:8e:
79:25:34:36:20:00:ee:19:46:40:4a:43:6b:b3:d5:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:8B:6B:AF:C2:22:01:05:70:8C:89:31:DC:21:FF:CB:13:17:5C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3368E1AA113D11ECACA8D83ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a2:17:09:e6:24:81:21:bd:36:4f:15:9f:ec:b4:ab:50:72:
73:21:de:33:e8:b1:92:21:f1:45:ab:fe:ff:65:39:6c:b4:60:
f4:b7:8c:93:05:c4:0f:7d:07:88:65:7d:32:8b:15:50:10:64:
54:70:dd:fa:a3:35:40:a0:6d:e9:f1:2e:e5:a9:d0:32:25:6c:
ff:46:6a:6f:a2:67:ed:82:51:85:33:75:f2:59:a6:67:b6:8e:
a2:1e:8a:13:4d:1c:31:1c:c5:36:50:eb:4d:6f:d6:c8:76:96:
b6:a6:72:ee:eb:11:2d:c2:39:84:70:88:67:8a:03:bb:5e:9a:
38:e9:0c:e6:01:7e:c9:4f:00:70:e0:2b:0b:bd:b9:be:45:2e:
62:6f:e3:99:ad:06:c3:39:bf:5f:ca:39:02:e4:e9:ed:92:5b:
51:1b:de:5c:ce:84:3b:2a:f7:e7:62:d8:18:6b:55:c6:01:65:
e2:f5:97:af:10:bd:45:99:3e:a5:ea:37:ce:41:63:94:e0:c3:
fe:94:ae:72:9c:f1:09:8c:22:e8:0b:65:93:58:20:77:d0:44:
34:39:82:56:11:d3:b2:92:bb:80:e2:9a:a7:31:35:6a:54:cb:
df:0a:4a:06:31:33:c0:23:68:6f:2d:e0:1b:0c:84:5a:8c:6d:
a2:ed:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org