Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DD8E5940B2611EC8675F02CD8A014CE.roa
File: 3DD8E5940B2611EC8675F02CD8A014CE.roa (raw, json)
Hash identifier: 0nd5w6ZicPQtV08xmct1j71rlp/iW/1XXBT7Uq2BPa4=
Subject key identifier: C1:F4:87:9B:C3:FD:0A:5F:D3:87:2F:09:EC:8E:AD:F2:0E:35:B7:4F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04C4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DD8E5940B2611EC8675F02CD8A014CE.roa
Signing time: Wed 01 Sep 2021 13:12:22 +0000
ROA not before: Wed 01 Sep 2021 13:12:18 +0000
ROA not after: Thu 01 Sep 2022 13:12:18 +0000
asID: 212238
IP address blocks: 102.129.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 1 13:12:18 2021 GMT
Not After : Sep 1 13:12:18 2022 GMT
Subject: CN=612f7c36-5efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:fe:c3:1c:5d:d7:a2:a3:b2:3a:cf:c4:ef:
7f:48:16:61:3b:a0:1b:0c:c8:ac:42:a4:6b:ce:f0:
3e:0c:0e:28:80:77:75:e2:5c:a8:a4:ac:0d:78:e0:
5e:1e:c2:f3:04:c6:6d:ae:45:2e:55:0d:f6:ad:bb:
9c:9e:d9:85:9c:8b:2e:bc:46:98:bb:bd:9a:c8:7d:
22:a5:d3:49:48:51:fe:11:25:d9:ae:d6:50:d9:d8:
9b:ba:85:65:ba:f2:98:a2:0f:2b:7b:02:67:d6:e3:
f0:2e:8f:0b:0c:5e:95:e4:6a:3d:1e:db:81:90:bb:
5a:90:14:ab:c5:e7:8d:7f:c3:68:e2:14:bc:7e:44:
c0:e9:eb:86:6b:bd:fb:9d:e3:b6:7e:06:f9:f5:a8:
47:46:2c:f1:12:e8:02:99:db:18:f8:99:d4:94:33:
0a:62:d3:06:9e:b1:62:15:94:07:63:ed:5e:47:46:
cf:1f:ee:04:10:48:ed:26:dd:3b:6b:bd:95:f0:8b:
11:37:24:03:06:e2:5e:fe:3a:01:a2:7e:6e:c1:2d:
91:cc:60:5c:ab:df:28:6c:be:b1:4e:10:fd:0b:ce:
f9:6e:ec:c0:dc:19:28:95:b5:1f:ab:73:7c:df:a2:
e8:e6:37:7c:d5:26:7d:19:a1:9d:2c:61:45:d4:1e:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:87:9B:C3:FD:0A:5F:D3:87:2F:09:EC:8E:AD:F2:0E:35:B7:4F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3DD8E5940B2611EC8675F02CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
03:df:0b:3f:6a:30:95:19:0e:c6:f1:06:5c:86:da:33:3f:a0:
b3:64:eb:73:3f:0f:9d:df:ad:99:1e:95:aa:c7:64:61:81:dd:
8a:c1:cc:17:15:ae:f9:ac:8a:23:21:08:e8:e1:c6:38:1c:4e:
f6:af:11:8c:00:2c:e3:69:64:11:65:ba:4a:0b:7e:db:ef:03:
bc:ac:f3:1f:5d:4c:f9:95:06:ef:2e:29:d9:9d:e2:da:41:c4:
01:c5:96:0b:21:05:33:a6:00:c6:c6:17:43:e4:7f:17:80:23:
95:00:8d:e7:a3:2b:58:c9:91:62:2f:9b:98:ad:6d:c2:b9:64:
9f:ce:16:00:fd:f7:c0:7f:2e:19:9c:4f:3d:b4:59:db:7e:dd:
64:8b:17:96:74:c9:03:25:a2:02:2a:bc:14:f1:7d:00:b4:24:
f7:55:69:ce:43:23:bc:49:50:5c:ec:4d:7a:7a:e8:1b:1c:bc:
2e:b4:59:55:00:ab:e2:7d:ef:c6:68:7c:6f:00:5e:2d:28:25:
bd:f1:d4:fe:c1:67:c9:1c:f4:b8:a5:2a:2d:34:7e:f8:14:0d:
1d:70:83:ee:74:7a:d2:55:ec:6e:6a:d1:d8:82:7a:c9:9e:a2:
06:0e:74:b9:42:3b:d3:2b:4e:b7:a5:af:c1:95:c7:7b:b3:10:
d4:36:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org