Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41E32480493211EBAD46D156F8AEA228.roa
File: 41E32480493211EBAD46D156F8AEA228.roa (raw, json)
Hash identifier: pFM6rEkueat1mN3t0U/KuTxkWYKR3hn9q685QLX0Hjw=
Subject key identifier: F7:E6:A0:67:75:97:B0:A7:00:D8:78:66:2A:73:67:A4:DE:95:70:45
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0311
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41E32480493211EBAD46D156F8AEA228.roa
Signing time: Mon 28 Dec 2020 17:29:37 +0000
ROA not before: Mon 28 Dec 2020 17:29:32 +0000
ROA not after: Wed 28 Dec 2022 17:29:32 +0000
asID: 212238
IP address blocks: 102.129.147.0/24 maxlen: 24
102.129.154.0/24 maxlen: 24
102.129.155.0/24 maxlen: 24
102.129.159.0/24 maxlen: 24
102.129.243.0/24 maxlen: 24
102.165.33.0/24 maxlen: 24
102.165.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 28 17:29:32 2020 GMT
Not After : Dec 28 17:29:32 2022 GMT
Subject: CN=5fea1601-f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:a8:d8:d0:b8:e1:84:1e:cf:3d:32:65:2d:
12:f3:70:13:0f:dc:8c:96:9e:fa:2d:97:2e:8b:f5:
3a:a8:eb:ab:dc:8c:54:39:66:c7:ff:ce:71:33:df:
9d:ed:e2:36:04:bd:d0:cb:d6:8a:72:61:b1:8e:60:
f3:96:2c:8b:27:b1:1a:ae:40:d3:7e:53:18:b2:c5:
1d:c4:b3:ef:1a:44:16:1e:11:8d:dd:81:7b:80:df:
c4:0c:88:e8:93:04:ae:d0:79:ad:ad:4a:7c:f8:4a:
53:55:31:a4:7f:f2:1b:69:84:a7:ea:27:af:08:d7:
72:ca:13:a2:08:e7:eb:28:a4:be:7f:9c:ed:98:0f:
a6:bc:72:ca:df:76:4f:7b:e5:b5:11:ba:95:44:14:
f7:f4:21:15:17:0e:db:df:78:d9:05:29:8a:9f:9a:
61:64:76:c1:e2:4d:26:5e:f3:8e:4b:0a:b5:a3:04:
57:cf:11:ba:69:3a:fb:7c:1e:b7:b8:9a:69:67:93:
f5:ec:be:f4:de:0d:64:f1:71:f4:2c:8b:09:cc:62:
65:99:58:d4:91:82:66:77:03:5a:d5:f1:36:f4:a4:
ab:ed:41:d6:37:ff:da:f8:1f:dc:e9:24:d5:11:9f:
9d:f1:3f:5a:b3:92:5d:03:19:02:bc:9b:aa:4e:37:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:A0:67:75:97:B0:A7:00:D8:78:66:2A:73:67:A4:DE:95:70:45
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/41E32480493211EBAD46D156F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.147.0/24
102.129.154.0/23
102.129.159.0/24
102.129.243.0/24
102.165.33.0/24
102.165.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:06:ea:54:fe:1d:5f:01:3b:ca:a4:62:7c:95:2b:8a:27:ed:
9c:c7:92:d8:ab:81:ca:0a:d7:b1:20:7c:ed:72:34:e3:92:05:
d2:7c:a5:74:1f:f3:e7:70:f3:ca:9c:a6:62:d4:78:36:f5:c1:
23:ac:91:91:13:f2:d3:16:6e:17:af:5d:11:9a:bf:e7:1b:10:
50:b7:da:10:ac:ec:b3:4a:a0:9a:51:0a:25:99:91:42:21:60:
bc:cf:f8:70:39:12:f6:cd:70:11:c9:22:3d:51:5b:79:a6:18:
e4:4b:75:40:c2:cc:06:a9:a3:d5:90:4f:18:8e:4b:f6:50:4a:
68:3a:8d:2f:99:9e:dd:13:99:4d:d3:3a:9d:8e:80:f0:78:e2:
14:85:34:f8:78:a2:c2:0c:5a:ee:7c:8c:dd:3a:b0:48:ee:75:
f3:c6:d0:70:c9:4d:f3:fd:75:94:6b:96:07:86:c4:0b:4e:04:
99:ff:d0:ac:c0:3e:91:0d:8f:f2:cf:8b:f6:ac:3d:61:00:67:
42:4d:0d:c0:3d:cd:5a:af:6b:ae:a7:c7:09:c8:42:ae:4d:76:
d6:5e:35:56:85:bd:78:2b:d6:3d:06:a2:7b:b1:72:2d:68:58:
2d:8b:d7:07:41:31:8f:10:d2:08:7a:68:cc:28:66:4f:71:31:
98:8f:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org