Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/478A5D46AD8611EB9C77652DF8AEA228.roa
File: 478A5D46AD8611EB9C77652DF8AEA228.roa (raw, json)
Hash identifier: 6hmhMOJRalZzz1MBm5Cmmd1TIi+gtnXrGbCSnmQy0uE=
Subject key identifier: 91:A9:60:A5:07:F5:BB:88:26:FF:35:2F:3B:C1:3B:80:72:76:C0:C8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03E0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/478A5D46AD8611EB9C77652DF8AEA228.roa
Signing time: Wed 05 May 2021 09:43:00 +0000
ROA not before: Wed 05 May 2021 09:42:56 +0000
ROA not after: Thu 05 May 2022 09:42:56 +0000
asID: 174
IP address blocks: 102.129.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 09:42:56 2021 GMT
Not After : May 5 09:42:56 2022 GMT
Subject: CN=609268a4-6372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:cf:1a:70:1c:ad:64:f7:6b:34:bc:de:1d:
12:7f:9b:3b:5e:35:73:ac:ba:40:d3:b6:f9:00:9d:
20:23:18:15:04:00:f6:c9:14:65:3c:de:28:ae:70:
6b:64:d8:ea:73:db:76:b2:2c:dd:97:de:87:53:06:
b9:d9:3c:61:c5:7e:f4:8d:f9:b0:89:c6:a1:2e:09:
8b:bf:6c:31:71:e9:8a:ed:72:c4:d9:d9:8f:bc:a5:
d6:d6:3a:61:6e:77:e6:e6:c3:04:0f:5e:69:ef:49:
b6:00:6d:20:cc:76:8e:a6:50:25:74:af:d8:38:7b:
f3:bb:1e:65:52:ff:08:b3:78:c7:82:ce:1a:9f:4d:
10:24:54:29:97:ba:84:f1:d2:c9:1e:5e:a0:07:2b:
c0:4e:93:26:a9:b8:e7:8f:9c:5f:27:3a:63:b4:45:
a7:65:2e:80:7f:21:9a:28:99:61:f0:15:74:a5:85:
1e:21:2a:45:5e:a8:95:f7:fd:35:95:dd:1d:5e:33:
f1:f3:3c:39:e0:02:67:eb:dc:b2:64:fe:b2:77:05:
05:c1:d0:49:2a:bb:42:57:fc:cf:91:cd:0b:37:cd:
d2:ab:1d:c1:72:5c:07:a6:94:93:43:ba:b7:16:d6:
8e:a6:ac:cf:63:94:3c:c9:1a:53:63:ad:0e:90:6d:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A9:60:A5:07:F5:BB:88:26:FF:35:2F:3B:C1:3B:80:72:76:C0:C8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/478A5D46AD8611EB9C77652DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.153.0/24
Signature Algorithm: sha256WithRSAEncryption
43:eb:d3:af:a7:0d:a9:0b:20:5f:94:4e:22:8d:d5:9e:ff:9a:
c1:46:73:ca:e7:21:6f:74:d0:f3:c8:47:81:54:e6:fa:52:f3:
fd:1a:7b:ff:64:03:c2:6b:8d:0e:a0:e1:16:9c:58:2d:26:fc:
31:1f:4b:a8:5e:a0:e6:27:ee:31:27:b2:1d:bd:83:02:39:4a:
ec:a2:bc:0e:da:ae:66:95:e5:ad:73:94:46:f2:ad:b5:00:c1:
49:10:f0:4e:74:55:9e:2e:39:24:d4:79:f2:18:93:14:d7:e5:
5e:67:95:c3:3d:e6:64:7e:0e:59:85:0a:37:82:02:2d:11:07:
34:10:e5:55:55:97:f1:21:dc:24:0b:77:22:88:50:4e:e6:7c:
f7:ff:d9:07:1c:b6:bc:d2:9f:24:90:ab:17:59:8b:23:18:88:
20:5d:af:70:19:44:bc:61:c9:7c:94:02:ea:ef:b1:fb:2f:72:
7e:07:18:b1:88:f0:25:73:e5:9f:2d:1b:7b:d6:27:3b:83:42:
46:30:d9:bf:16:9a:87:39:17:83:ab:4d:70:11:6b:15:12:da:
27:7a:a4:47:57:d8:7c:80:ba:62:4b:1e:fd:5b:03:f7:ea:e7:
a5:4a:3b:03:a4:68:45:a2:d4:32:14:b4:e3:b4:a2:93:e2:0d:
8f:9c:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org