Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/364EFB1823FF11EDAEF09F8AF1222468.roa
File: 364EFB1823FF11EDAEF09F8AF1222468.roa (raw, json)
Hash identifier: hl//KZioMnQobywC7a56Ag2lw52wv3rVgou5sDY5lqA=
Subject key identifier: 05:3B:06:30:EF:29:86:04:4A:EB:30:6B:13:52:28:D1:2C:C4:C2:C9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 079E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/364EFB1823FF11EDAEF09F8AF1222468.roa
Signing time: Wed 24 Aug 2022 22:50:55 +0000
ROA not before: Wed 24 Aug 2022 22:50:51 +0000
ROA not after: Fri 25 Aug 2023 22:50:51 +0000
asID: 212238
IP address blocks: 102.129.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 22:50:51 2022 GMT
Not After : Aug 25 22:50:51 2023 GMT
Subject: CN=6306ab4f-d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:9a:f9:e9:23:68:a7:d7:33:2c:d8:a1:ee:
4a:04:e5:6b:fe:6f:d2:5a:b0:a6:15:03:ad:57:a0:
05:bb:ad:c0:3f:93:27:f6:4b:db:ef:2d:b9:42:1e:
5e:72:e5:5b:87:ad:9c:b6:7c:b6:77:63:63:f7:02:
67:72:8b:de:72:f8:0b:21:b7:be:e2:51:85:96:dd:
db:bc:c9:07:ce:3e:1a:62:bc:df:35:f1:29:c9:9b:
18:80:df:e6:c7:90:e8:67:0e:78:3b:16:93:ec:f3:
6b:33:fc:66:14:99:d8:a2:8f:3a:dd:87:29:a8:23:
fc:9f:4b:2d:82:67:b4:bb:03:b8:a3:91:99:d3:fe:
6e:12:30:35:49:f0:b3:11:97:f7:97:35:24:f1:91:
d1:62:ed:3d:8f:83:14:31:c6:c9:5c:69:ce:50:9a:
77:05:81:31:73:0e:07:11:3a:97:be:e8:27:c7:72:
b9:c2:f0:eb:50:22:6a:72:23:a9:b6:a3:f9:ce:11:
00:fc:f6:93:9b:02:24:93:97:cf:14:81:f7:bb:d6:
aa:47:8d:8c:40:2d:77:1d:ee:c2:4b:04:e9:0c:72:
1f:65:fd:28:70:57:b6:ed:de:1d:8a:1f:1b:93:b0:
77:99:4e:45:d3:67:6e:14:f0:25:e3:77:7a:da:7e:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:06:30:EF:29:86:04:4A:EB:30:6B:13:52:28:D1:2C:C4:C2:C9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/364EFB1823FF11EDAEF09F8AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.161.0/24
Signature Algorithm: sha256WithRSAEncryption
43:48:57:f0:68:ac:cb:e9:64:32:ef:1a:e9:eb:69:77:b7:e8:
70:0e:eb:b2:b7:cf:bf:57:c3:44:a8:3e:6b:5a:3f:ee:a7:d1:
23:9d:a9:a0:36:3a:1d:4a:0a:3e:7a:59:4e:92:0f:4c:79:c0:
31:e2:98:5d:13:7b:8e:04:7c:6e:46:cc:d2:89:c3:c6:fa:8b:
40:78:67:10:5a:d4:92:d6:7e:92:1d:bd:68:ce:68:32:3d:93:
7c:81:b3:98:98:ab:57:e7:1f:e9:82:4a:d3:65:64:3e:95:8d:
9e:45:50:dc:9b:be:46:a3:a0:c2:38:d6:55:8a:d5:96:10:bd:
5d:e8:17:d0:c6:45:b0:a9:ef:f0:da:f6:18:66:05:1a:91:53:
6e:30:7b:cf:7e:c4:1e:c2:3f:59:e0:2e:a4:6f:93:1f:e2:cd:
ab:32:b9:7e:fd:d3:50:53:e5:c1:62:4c:d0:a8:e4:52:43:d9:
22:87:71:ab:f0:2d:1b:06:67:3d:bf:b2:d9:64:00:26:a3:cb:
53:84:b0:c9:1e:29:11:ce:07:c8:a3:43:13:e8:bc:15:4c:e2:
94:8a:ca:49:05:4d:6d:a2:64:9b:e3:3a:60:e4:53:67:6c:1e:
79:37:0a:34:12:4e:f3:d3:ca:ee:32:72:70:4b:da:b6:a7:35:
59:2b:28:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org