Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5861F612E62D11EB88A61360D8A014CE.roa
File: 5861F612E62D11EB88A61360D8A014CE.roa (raw, json)
Hash identifier: UZKgxWNangb+7S+28y3grLZtiLj+unhDcsCdzbUjy58=
Subject key identifier: A6:63:72:01:E5:B0:63:A1:7B:DD:D9:8C:3A:17:92:31:FD:73:C4:79
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0463
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5861F612E62D11EB88A61360D8A014CE.roa
Signing time: Fri 16 Jul 2021 12:00:01 +0000
ROA not before: Fri 16 Jul 2021 11:59:55 +0000
ROA not after: Sat 16 Jul 2022 11:59:55 +0000
asID: 211585
IP address blocks: 102.129.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 16 11:59:55 2021 GMT
Not After : Jul 16 11:59:55 2022 GMT
Subject: CN=60f174c1-7515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:2e:2e:c5:c0:73:49:f6:32:33:7b:15:a5:
22:47:f1:a0:62:1c:6e:82:cf:ce:74:69:1c:f1:8c:
fb:9d:fb:3b:8e:b4:62:99:a3:02:a2:b8:2b:e0:4e:
d4:b3:60:8b:2d:14:79:b6:a4:91:65:1b:86:6f:3f:
5f:36:b1:ba:1d:a7:e3:5d:41:c8:e8:ef:fd:36:2f:
ba:d7:41:7b:d1:bf:38:e5:98:ac:43:cf:b6:b3:19:
fe:af:fb:5b:40:e6:27:ad:c0:1f:46:67:7a:00:49:
f6:0b:07:74:65:27:d2:8e:62:04:66:aa:b6:7d:d1:
f6:51:39:56:61:0a:c0:44:e9:5d:45:0e:0d:25:97:
54:7f:d0:83:03:8f:46:df:c7:a6:66:44:95:6c:4b:
81:12:23:e1:91:a8:49:30:62:4a:c6:8d:70:a1:c1:
94:46:0b:47:02:d3:89:7c:44:d6:3e:90:d6:eb:40:
51:b3:83:56:41:0c:a7:c9:b6:ca:70:ad:89:db:a8:
ab:3e:49:b3:20:b8:01:65:88:03:2e:bd:fa:0d:1d:
4f:ac:54:0b:80:05:10:6e:0b:93:df:1e:26:92:1e:
0a:a6:95:ce:5d:15:53:ae:6b:36:70:21:7a:f0:6e:
d6:32:7b:d3:98:f9:95:5a:b7:24:f7:1c:6b:4b:d2:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:72:01:E5:B0:63:A1:7B:DD:D9:8C:3A:17:92:31:FD:73:C4:79
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5861F612E62D11EB88A61360D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6b:0c:27:c8:91:67:64:60:70:99:92:b9:57:4d:92:14:13:
e3:eb:53:54:11:fd:9d:03:ce:e0:b9:86:0c:e9:7f:ff:e4:9b:
5a:cc:9c:c8:41:74:7d:ad:08:f2:06:f8:18:28:40:1e:b0:7b:
94:4f:d1:a6:b5:74:a4:ac:23:81:a2:f6:64:1d:42:74:81:18:
e8:77:26:51:00:a4:11:ff:b2:47:6d:69:2d:e3:e3:40:25:d2:
f2:77:98:ab:37:85:d7:81:30:cf:3a:da:35:db:02:20:ad:cc:
aa:a2:d2:8f:77:46:10:66:40:8b:35:b8:ff:94:2b:27:66:d3:
de:7f:43:18:85:89:dd:c0:ec:d0:f9:6a:ae:67:5a:a0:42:b3:
25:6e:1d:93:27:77:26:74:9e:d8:e7:3b:14:91:0c:93:eb:72:
e5:89:ca:93:40:af:58:92:77:f5:9f:d9:dc:70:0f:be:65:11:
cd:a9:a0:61:e0:fb:73:f6:9e:3c:b9:d9:aa:e3:4a:ae:92:83:
a3:f2:70:01:3d:65:8d:2a:94:c5:dd:62:ef:59:ba:51:48:2f:
5e:39:00:d5:23:03:13:3a:a1:f5:94:c3:b2:ea:6e:f5:a5:06:
00:bf:95:0a:80:9c:ee:ed:ba:39:bc:a0:f9:d4:66:14:e2:3e:
ae:71:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org