Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4699C6A281A711EBBE097215F8AEA228.roa
File: 4699C6A281A711EBBE097215F8AEA228.roa (raw, json)
Hash identifier: 2TQHBB7AxJBu9640eJCNUubrpxaRmNU/jonroAJWqc0=
Subject key identifier: 5D:96:EA:67:5F:8B:77:B7:DB:09:6F:DF:D0:48:3A:81:A4:80:3F:A6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 037E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4699C6A281A711EBBE097215F8AEA228.roa
Signing time: Wed 10 Mar 2021 13:48:21 +0000
ROA not before: Wed 10 Mar 2021 13:48:16 +0000
ROA not after: Thu 10 Mar 2022 13:48:16 +0000
asID: 11170
IP address blocks: 102.129.237.0/24 maxlen: 24
102.129.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 13:48:16 2021 GMT
Not After : Mar 10 13:48:16 2022 GMT
Subject: CN=6048ce25-d960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:62:62:da:3e:27:cb:6b:94:46:86:c9:37:
44:44:0f:1b:3f:78:64:77:cd:e1:9b:06:41:58:86:
a5:8a:59:79:d2:a7:7c:6f:21:f2:63:b3:5d:7b:1f:
61:f6:1c:b3:0a:81:61:be:55:b7:f5:52:f1:dc:b4:
91:e5:00:73:ab:e3:a0:e0:67:bb:2f:13:a2:50:42:
21:1c:fd:59:bd:b7:74:98:f0:9e:cd:ad:bd:47:6a:
fd:b8:4f:ce:d6:91:32:0e:6b:0d:05:2c:f7:d0:35:
b8:b5:65:1a:97:b9:d1:54:25:d0:fa:a7:30:eb:13:
f5:5e:57:ac:66:93:c4:55:77:46:ac:67:fc:59:38:
91:55:cd:7e:87:8f:0a:87:09:f4:54:d9:de:88:f3:
96:eb:3f:4f:76:2f:cd:21:30:55:98:a3:22:f0:13:
24:94:e7:bf:90:45:a9:01:97:5f:eb:9e:80:a2:46:
07:b0:02:27:d3:5a:fa:2d:25:75:e2:2c:77:c4:b1:
90:da:6e:bf:fc:e7:28:e5:99:25:00:1d:7d:41:c6:
37:c4:f6:22:de:25:3d:d6:9e:56:9d:2b:62:b8:ba:
23:f8:3a:91:6d:53:9d:1b:2d:46:11:92:ab:c2:80:
44:08:ad:b4:9b:d5:f7:35:dc:d5:9d:73:86:f1:e4:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:EA:67:5F:8B:77:B7:DB:09:6F:DF:D0:48:3A:81:A4:80:3F:A6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4699C6A281A711EBBE097215F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.237.0/24
102.129.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8c:af:4d:c9:77:a3:1c:46:70:10:3d:29:e3:43:49:73:80:
6a:c9:2f:fc:f6:4a:6d:41:55:77:7d:a6:6a:1c:1e:9c:ce:03:
86:a8:98:0e:68:fe:37:14:f5:fb:37:ab:b2:57:94:6f:f4:0d:
25:0e:e8:39:71:14:05:e7:5e:fd:ab:34:fe:d5:c0:2a:ca:26:
01:16:74:f8:85:93:2e:4c:44:f7:fd:e9:0d:f9:2a:25:4a:fe:
ca:75:63:86:ea:9e:a6:74:59:c6:ea:c0:49:bb:d8:f8:0d:c2:
62:51:c3:f2:ce:92:b9:06:9d:c4:c7:06:64:ae:b2:49:a4:ba:
c4:e6:ce:59:b5:7b:01:c0:1f:e7:fb:78:f7:09:1f:63:d1:b9:
d7:56:09:74:44:80:20:d6:d1:82:3c:5d:e6:bd:5e:e7:6b:d7:
c7:9b:ad:0e:c3:ee:41:84:c5:ab:41:83:30:14:a2:07:ad:48:
6d:92:59:33:5f:75:73:1d:a8:55:b7:d0:32:4c:84:3a:f3:d5:
0f:64:66:8f:0b:b3:c0:4c:9b:2c:0c:ba:24:7e:33:76:fe:16:
ae:28:c1:50:fb:17:19:ce:64:69:f4:e9:8e:9e:5a:6e:72:27:
7e:54:13:79:33:c9:db:bf:9e:1a:f0:02:d2:37:18:bc:63:85:
b7:b3:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:23 2024 by rpki-client on console-ams.rpki-client.org