Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F409BF4EA0811EB98B0F16BD8A014CE.roa
File: 4F409BF4EA0811EB98B0F16BD8A014CE.roa (raw, json)
Hash identifier: qvbEshT6FA4A5yRYCTcwUfuAaadI6B/1jRMf5KYmraI=
Subject key identifier: FC:17:09:83:C3:D0:07:49:BD:26:80:25:8C:4E:9F:7A:FA:EE:AB:8B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 046E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F409BF4EA0811EB98B0F16BD8A014CE.roa
Signing time: Wed 21 Jul 2021 09:45:07 +0000
ROA not before: Wed 21 Jul 2021 09:45:01 +0000
ROA not after: Thu 21 Jul 2022 09:45:01 +0000
asID: 134512
IP address blocks: 102.129.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 21 09:45:01 2021 GMT
Not After : Jul 21 09:45:01 2022 GMT
Subject: CN=60f7eca3-2271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:ca:da:40:66:3a:7e:39:cc:68:ff:c1:cc:
da:da:88:61:0e:89:9b:65:28:23:65:22:ae:c4:a6:
47:8f:1a:8e:93:0a:ca:36:ce:cd:f8:7e:e3:ca:c4:
c3:56:16:94:fe:29:cc:4a:9d:73:2f:2a:44:45:37:
b2:14:44:dd:4c:6d:85:b5:91:de:21:82:9a:10:2b:
3b:03:2c:6b:0d:ed:b7:4b:a6:5b:42:32:b5:d0:00:
0a:63:2b:98:63:48:c7:36:1f:44:65:b1:87:b1:c6:
7d:18:a8:fc:6e:66:6a:d2:47:20:5f:64:d3:9f:fc:
11:04:e4:2c:4e:ad:63:55:d0:e2:b8:f6:71:24:fd:
a8:49:b6:ba:42:f2:50:ca:9f:12:06:40:f7:77:a7:
b5:83:87:38:a5:1e:28:a5:86:ab:47:1e:6f:d2:25:
d7:2d:53:bf:71:9f:47:b5:08:c8:3c:67:2f:ed:39:
93:2d:32:8f:19:04:d3:e0:83:10:2d:31:a5:ef:8a:
c3:50:5e:ac:00:e4:2f:3d:5e:5b:dd:55:b8:8d:55:
37:c0:ff:e2:a7:e3:52:cf:85:2a:40:7d:53:9c:15:
8a:5a:90:c9:3a:9e:9d:8c:d9:d7:af:81:c7:92:b8:
15:5d:f0:b6:d2:4e:0c:64:58:e3:14:07:08:a4:74:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:09:83:C3:D0:07:49:BD:26:80:25:8C:4E:9F:7A:FA:EE:AB:8B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4F409BF4EA0811EB98B0F16BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:58:05:a4:c8:a5:8d:9b:9f:59:2e:b1:5a:ab:21:66:49:3c:
3b:f1:32:cd:0f:2f:d3:60:33:27:c2:d6:83:c5:96:24:e8:d7:
89:2c:7a:0d:ab:b8:63:c9:ef:97:15:b4:86:b5:74:16:f8:94:
e3:4f:33:97:59:58:e9:1c:0a:69:e6:f6:68:2b:ca:7e:23:f1:
7a:9a:e4:d2:37:0a:fd:33:e4:e9:23:46:f0:e4:ee:af:74:d8:
42:af:57:5e:05:9b:a4:43:b7:8a:1f:ee:bc:47:b2:34:96:e0:
d7:c8:29:2b:4f:ea:69:30:c0:ef:1d:0e:76:8f:03:03:98:68:
b0:4a:e3:c9:6f:b6:82:ce:10:f6:cd:3a:8b:a7:02:bc:59:f5:
4a:a9:58:27:f1:39:05:fc:81:8c:4e:4b:a9:a2:2e:b1:8c:34:
f1:50:31:56:c9:3b:8d:c3:36:a9:ad:e2:41:54:b5:e5:68:93:
f9:47:4a:81:9c:9c:e7:0d:31:9a:da:1c:cf:64:01:55:b8:2f:
94:58:24:d5:97:23:f8:30:64:40:2e:39:fb:ce:7e:99:77:54:
00:e7:d1:27:88:ef:9c:fd:e2:e5:87:45:e9:17:67:1f:1a:45:
47:d5:bd:0e:a7:1c:9c:46:42:a7:9b:b7:de:c7:12:9c:1c:d3:
ed:ad:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org