Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/570A63A01AB511ECAF4E6C24D8A014CE.roa
File: 570A63A01AB511ECAF4E6C24D8A014CE.roa (raw, json)
Hash identifier: 8P4vrMckre4t/EOf+sGR/NJnNyi96rkfJoXNUsc2MYc=
Subject key identifier: 85:F0:A1:B6:76:C2:1E:FC:AA:68:64:F8:46:E1:61:B8:AD:1A:9C:EA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04EF
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/570A63A01AB511ECAF4E6C24D8A014CE.roa
Signing time: Tue 21 Sep 2021 08:24:29 +0000
ROA not before: Tue 21 Sep 2021 08:24:21 +0000
ROA not after: Wed 21 Sep 2022 08:24:21 +0000
asID: 22773
IP address blocks: 102.129.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 21 08:24:21 2021 GMT
Not After : Sep 21 08:24:21 2022 GMT
Subject: CN=614996bd-3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:e9:4c:31:21:7c:c4:4c:cf:b5:a4:6d:62:
45:f3:6c:ec:3b:c8:16:a8:cc:f5:25:b1:31:34:64:
c7:09:8f:ef:71:60:76:b8:9a:cc:99:9f:fb:68:9a:
21:7f:22:30:61:53:1f:84:0c:44:7b:95:26:f6:f0:
d0:3c:02:27:f3:2e:5c:b6:91:68:41:42:c7:f3:3e:
24:6f:e6:d7:71:80:93:83:e6:45:f5:0f:32:20:9e:
fd:a8:0e:13:5e:68:96:d2:47:3a:ee:8c:49:41:40:
fa:96:ca:11:9a:36:4b:6b:77:bd:70:2d:74:2c:f9:
df:ad:c8:80:0b:f4:5e:1c:a5:7e:ad:2a:44:aa:ba:
1b:5d:95:28:71:36:44:73:ae:04:b7:70:fc:48:73:
f1:4c:09:d2:11:bc:30:52:73:ae:c8:c5:bd:4a:7a:
be:bf:07:ff:15:a9:fe:ad:4d:da:15:3b:70:40:f2:
99:2c:74:ee:d1:03:82:2a:a7:83:28:08:72:e4:00:
6a:c2:89:2f:9e:d6:54:4a:33:9d:25:fc:af:f3:5d:
f2:2c:ff:b3:84:14:ae:b7:5a:f6:37:ed:ec:be:83:
7f:63:6c:23:05:fc:a0:a2:e2:f8:d2:56:7f:5d:a3:
e7:6e:d2:02:f7:d0:8a:6e:a3:a1:88:5c:60:70:77:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:A1:B6:76:C2:1E:FC:AA:68:64:F8:46:E1:61:B8:AD:1A:9C:EA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/570A63A01AB511ECAF4E6C24D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
05:6b:97:10:92:91:88:89:ad:06:0b:56:fc:2b:5f:c9:e4:5b:
61:98:0b:1b:e9:4e:15:82:c7:3f:bb:1b:e3:4e:73:e7:60:2e:
97:77:ea:85:bb:03:d4:7f:d9:b8:df:e8:1f:b5:ab:cd:a5:5c:
e4:a7:43:51:50:9c:41:bc:3c:98:d6:11:0d:93:7e:25:2c:ef:
ca:65:9c:17:86:7d:b1:c1:10:93:b4:31:22:cc:e7:a3:b4:b6:
a3:f9:a2:55:c4:8c:f3:7a:9d:ff:ce:34:99:88:de:4d:23:17:
ec:93:3c:ac:4c:7d:5b:45:47:ba:5a:47:97:5c:85:40:ff:39:
e2:9e:6a:b3:bf:b3:a2:88:e7:14:a7:9d:d3:d1:2d:61:e6:8e:
bb:c0:1c:eb:36:cb:6c:e7:5a:3c:37:ea:92:37:09:08:3b:5a:
86:d4:70:4d:04:f8:94:69:31:df:3e:5b:71:fb:d7:5d:90:a4:
93:3b:34:eb:de:9d:92:fb:7b:16:52:d9:19:99:65:dd:e8:2f:
f4:6e:1e:b3:ff:04:5f:5c:dc:e8:89:97:4b:66:00:e9:a3:a3:
c1:7a:fe:74:e7:1f:c8:8b:58:51:f2:86:29:a1:f7:52:30:1b:
d3:cd:1c:9d:a0:7e:57:ef:2e:17:98:7a:c7:6b:7e:50:06:2f:
b3:d5:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org