Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
File: 4832C54C84D311EC8BC301755A40D577.roa (raw, json)
Hash identifier: n+lJVR+NNc52+RGKktr+xGRxca6gppFW0OV62tLrAAo=
Subject key identifier: 9F:4C:2C:4A:D6:20:08:46:DB:01:A4:D2:CA:B8:76:27:9C:BF:D8:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05D5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
Signing time: Thu 03 Feb 2022 09:25:53 +0000
ROA not before: Thu 03 Feb 2022 09:25:48 +0000
ROA not after: Fri 03 Feb 2023 09:25:48 +0000
asID: 40676
IP address blocks: 102.129.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 3 09:25:48 2022 GMT
Not After : Feb 3 09:25:48 2023 GMT
Subject: CN=61fb9fa0-2890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:d6:e9:4e:56:15:a0:68:cd:1e:e7:fd:2a:
fc:63:01:9d:5f:3f:34:2b:bc:61:5e:f7:82:ac:12:
dc:28:78:51:47:53:94:75:a9:d9:9a:16:11:8f:36:
c5:e4:cc:01:dc:a7:ad:c8:61:d1:6f:0f:68:ee:9c:
cf:a7:ff:36:06:0d:83:62:f6:89:3d:2c:3c:23:43:
a3:09:5d:69:6e:a7:30:5a:a3:59:31:af:c8:19:d3:
bb:a4:d0:5c:71:37:cd:dd:62:e2:3b:45:c9:d1:28:
55:bd:2b:52:23:66:ef:bd:71:6e:98:23:02:5b:f8:
b3:b8:b9:0d:6a:95:b2:16:64:49:eb:37:9a:72:3a:
87:22:74:a5:af:2b:61:ca:c5:98:c2:44:bd:98:a6:
be:16:9e:59:2b:a5:d2:2f:fd:50:28:be:cc:40:9c:
86:4c:0a:63:2e:e1:5c:dd:ce:42:1c:ee:bd:97:2e:
95:02:a4:58:68:f9:68:5e:ba:f0:10:78:43:04:40:
07:82:ba:d4:b6:28:89:31:e0:35:a1:f2:f1:cd:92:
63:d8:c2:cb:b8:f1:c6:52:c4:ba:2e:cd:6e:b3:60:
6f:7d:9d:9c:92:ff:5d:32:12:db:00:75:e0:57:4f:
e9:ef:a4:ad:23:d7:f2:f2:17:33:98:0a:0f:d6:4a:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:2C:4A:D6:20:08:46:DB:01:A4:D2:CA:B8:76:27:9C:BF:D8:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4832C54C84D311EC8BC301755A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:64:cf:4a:f3:95:cc:8c:38:8f:09:4b:b8:fe:9a:32:ec:9a:
db:8f:e2:39:d3:a4:c6:8a:5f:36:4f:eb:2e:83:af:64:e8:12:
c1:f7:80:b0:77:fc:12:af:7f:c7:d3:c6:bc:03:27:3f:73:cb:
61:ee:fe:4e:0d:32:75:8e:91:15:7b:28:9a:d1:03:5a:ec:f9:
5e:84:69:88:5e:d8:9b:2c:ec:16:3a:e9:15:e0:ff:ab:7c:41:
9f:3b:5d:22:55:b5:51:95:81:e5:d0:8c:d9:fc:de:26:87:73:
9e:a7:0d:71:42:5e:b4:75:b2:34:1e:5f:f4:a0:1b:79:3b:14:
2b:cf:c5:b7:d4:e2:86:c0:a2:5b:23:51:7b:dc:16:95:e1:ed:
8f:98:8c:c1:93:df:97:5c:85:56:c9:9d:2e:e7:f7:22:66:f6:
25:9a:4e:11:bf:2b:17:cb:f3:74:35:77:e4:04:8e:b4:52:f6:
54:80:bb:f3:5a:23:cd:df:f4:c3:35:f6:47:d3:03:0e:20:c5:
a8:65:28:af:bd:b4:27:db:0f:6e:52:2f:cd:56:fb:c5:2d:5b:
83:68:c9:cb:b0:ad:28:6f:8b:e0:f7:fc:0b:4a:7d:41:82:e3:
4f:b6:78:ba:83:83:1b:2e:18:f0:69:96:81:f7:2b:35:8b:fc:
26:32:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org