Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3C7E1810F9CB11ECBD4649F4F1222468.roa
File: 3C7E1810F9CB11ECBD4649F4F1222468.roa (raw, json)
Hash identifier: ToFVLU7hSQ19nau4d+uDugShKMeHJl6FweGxP1j1ciQ=
Subject key identifier: 14:D4:E0:7C:6E:8A:2B:4E:F8:80:F6:96:48:CA:03:21:E9:79:C7:59
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06EC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3C7E1810F9CB11ECBD4649F4F1222468.roa
Signing time: Sat 02 Jul 2022 05:53:03 +0000
ROA not before: Sat 02 Jul 2022 05:52:59 +0000
ROA not after: Sun 02 Jul 2023 05:52:59 +0000
asID: 43676
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1772 (0x6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:52:59 2022 GMT
Not After : Jul 2 05:52:59 2023 GMT
Subject: CN=62bfdd3f-8665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:0a:5b:09:21:b0:25:0c:86:e9:6e:ff:63:
b1:98:3a:7f:20:c4:aa:7d:85:a3:40:d6:fd:70:75:
55:bd:23:f2:4b:5a:ac:44:46:18:ad:b0:2e:1b:62:
c0:4e:41:e0:09:49:89:81:ff:b8:ff:c2:57:e3:63:
d2:c3:7e:8f:b9:0c:d2:48:b5:06:8f:2a:df:69:98:
3b:3e:51:43:12:3a:9d:75:f9:5e:2d:d3:40:69:d5:
d2:29:6c:87:bb:8b:d4:c7:f5:29:43:ca:11:06:71:
7c:b3:09:9d:fc:ef:46:b7:53:42:49:3f:5a:82:23:
09:8a:b3:a8:29:7c:14:3c:6b:fa:b5:21:87:f8:d5:
da:bb:4a:6c:20:57:3d:27:6f:34:5f:ea:b9:87:23:
df:78:8e:94:9f:47:5d:96:5c:b7:a5:0a:23:60:cc:
07:2c:f1:84:48:d4:9a:71:c7:21:f4:a6:64:ac:27:
eb:1f:9d:2b:ee:78:de:b0:04:b9:2e:3e:ff:9d:e6:
1d:21:48:7c:18:9f:77:6b:06:73:8e:3e:45:d1:fe:
12:df:33:f5:e2:d8:b3:7b:dc:96:8d:0a:ef:0a:c2:
08:47:f7:0e:b2:fd:57:d8:31:73:90:a1:1b:33:14:
72:68:54:2e:82:e9:ad:28:b7:42:ff:99:f4:ae:3a:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:E0:7C:6E:8A:2B:4E:F8:80:F6:96:48:CA:03:21:E9:79:C7:59
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3C7E1810F9CB11ECBD4649F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0d:35:62:98:2d:e2:c9:ab:76:78:d1:ee:a7:7c:6b:c2:1a:
6d:d6:98:e7:dd:88:4c:f3:c0:c3:e3:92:63:c6:07:70:bc:df:
7f:1e:32:1b:ac:64:47:9e:c6:34:12:f5:e5:c3:d9:49:85:b7:
00:92:18:cf:46:3c:ad:bc:43:5a:8b:fc:fb:5e:29:ed:b4:ea:
f2:6f:56:a9:0a:fe:93:d7:2f:9c:c3:6f:df:65:13:35:e1:ef:
75:77:98:83:45:1c:11:9c:17:23:a5:70:78:15:d3:3d:89:ad:
e3:a1:41:cb:ef:4d:f9:ea:2b:8b:3f:f9:2f:de:8d:4e:17:34:
c8:2c:40:a3:0d:9c:10:d7:db:35:2e:4e:a6:67:ad:a2:12:0c:
7e:b4:01:79:15:88:71:15:99:59:0b:18:84:fd:01:9f:9d:23:
65:1f:88:97:b1:f6:71:2f:96:4d:ce:1e:66:f4:a3:a1:3a:2f:
9b:20:82:1b:3a:81:42:12:6d:73:71:fd:49:6e:c9:e8:21:53:
9e:f5:b2:d8:7e:45:26:ae:1b:1e:ad:32:9b:99:40:66:17:6e:
1b:46:5a:9e:5f:d9:9e:06:6a:c8:88:01:20:f9:ec:24:0a:e3:
7b:58:74:bc:22:c8:e2:7e:97:c6:72:b7:57:b3:70:29:39:99:
36:7f:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org