Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35035A588B3611EDB1F4CBC2F1222468.roa
File: 35035A588B3611EDB1F4CBC2F1222468.roa (raw, json)
Hash identifier: mwjU1Sl9FENHfIyq/sues42prI0oiBu95C5MqyHquvI=
Subject key identifier: 35:E8:07:C6:CE:10:E8:14:59:23:2F:04:AE:FD:35:13:02:39:91:F7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 099F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35035A588B3611EDB1F4CBC2F1222468.roa
Signing time: Tue 03 Jan 2023 07:14:05 +0000
ROA not before: Tue 03 Jan 2023 07:14:01 +0000
ROA not after: Fri 05 Jan 2024 07:14:01 +0000
asID: 6315
IP address blocks: 102.129.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463 (0x99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 3 07:14:01 2023 GMT
Not After : Jan 5 07:14:01 2024 GMT
Subject: CN=63b3d5bd-4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:fc:68:a7:33:ba:a3:f3:62:52:51:19:95:
68:a6:b9:80:fa:52:04:08:c4:7b:fa:b7:7f:03:63:
4c:9f:c8:3a:1e:c1:50:dc:98:39:34:60:66:be:97:
cd:22:90:ab:a2:6c:da:57:a7:90:db:28:95:02:7f:
4d:d5:05:0f:27:05:aa:bc:a0:be:7a:73:66:2f:cc:
58:00:f0:37:da:62:be:f7:58:c9:de:7e:27:18:26:
c7:7a:ff:bf:9e:ee:53:9d:cd:af:39:d4:13:3c:1f:
c0:99:e5:07:f5:39:84:f5:cc:2a:19:68:76:5a:45:
02:73:ac:94:a4:bd:f1:02:00:a0:31:a2:ab:ad:93:
b1:ad:28:34:41:4d:9d:08:7c:c6:56:02:53:f0:39:
c2:10:b7:af:9b:d0:01:b4:7f:79:87:07:be:c3:4e:
c3:a8:a5:18:59:c7:9d:02:a8:98:e0:0e:2b:c6:15:
76:44:55:ff:61:ad:e6:41:68:8a:f4:9d:51:c2:61:
6c:e1:86:28:9b:f8:f5:13:41:17:1e:b2:fc:33:d2:
5e:02:bd:5a:17:1c:db:05:06:a5:e5:01:2f:5c:07:
ef:21:00:dd:a0:f1:e8:68:1e:14:7f:86:8f:4a:b9:
cd:5f:58:2d:38:35:8a:92:86:af:d0:d2:50:8d:0e:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:07:C6:CE:10:E8:14:59:23:2F:04:AE:FD:35:13:02:39:91:F7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/35035A588B3611EDB1F4CBC2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:41:a9:24:e1:7a:16:23:c9:9b:8d:45:54:ae:12:57:92:4f:
54:ee:61:44:e4:5b:59:28:f4:fd:04:b3:e8:ad:10:58:8e:14:
85:69:ce:16:f0:88:6e:7d:2e:14:a5:dd:fe:13:12:af:74:71:
ea:7d:f2:96:a4:d3:43:cd:dd:14:2c:b3:5f:d6:02:6c:94:1d:
81:c7:42:d4:7a:96:9e:94:e5:8d:b8:38:7d:58:79:50:47:07:
93:70:97:b5:d7:f6:92:d3:46:8f:64:4a:86:29:01:58:58:57:
d6:f2:a2:9c:8b:f2:20:c1:b1:33:c9:77:dd:36:3f:11:00:e7:
b7:50:d5:35:e2:d4:99:82:83:59:07:de:4c:d2:99:53:4b:62:
38:74:68:2a:58:98:99:17:9d:1c:ad:11:8b:a4:64:28:72:7c:
e6:4c:60:9d:a0:81:08:c6:ab:04:3e:1c:86:af:bf:bc:94:c3:
f0:48:76:0c:87:41:42:33:4b:86:9b:db:86:b0:c2:7e:b9:c1:
ef:7c:4b:83:1b:6a:32:60:86:2d:df:84:ab:df:ed:c7:ff:6b:
b9:12:3f:c7:e5:e6:9c:c8:f9:8f:59:8b:fc:8e:61:73:f0:7a:
23:98:6b:05:23:19:95:ca:ac:73:ab:e9:78:18:cf:40:e1:b6:
25:ec:34:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 17:14:08 2024 by rpki-client on console-ams.rpki-client.org