Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5E33494CF41E11ECABA7D3DEF1222468.roa
File: 5E33494CF41E11ECABA7D3DEF1222468.roa (raw, json)
Hash identifier: v+/SAqtu6WaZCaiqSfkHGJEBxzD79BTSj5JWLdyjGWs=
Subject key identifier: EB:36:14:A0:C7:15:03:43:29:FA:78:B2:B5:98:67:08:89:3F:12:B4
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06B1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5E33494CF41E11ECABA7D3DEF1222468.roa
Signing time: Sat 25 Jun 2022 00:33:01 +0000
ROA not before: Sat 25 Jun 2022 00:00:56 +0000
ROA not after: Sun 25 Jun 2023 00:00:56 +0000
asID: 40676
IP address blocks: 102.129.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 25 00:00:56 2022 GMT
Not After : Jun 25 00:00:56 2023 GMT
Subject: CN=62b657bd-4256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:1f:ea:26:6c:87:35:d8:1b:4f:ed:45:c8:
f1:f5:94:2b:67:e0:42:86:ae:7c:cd:b6:c4:dc:58:
c1:dd:f4:47:06:39:41:d2:0d:51:5a:53:23:c6:bb:
80:9f:7e:fd:09:e1:7b:7a:00:ec:f8:61:a9:0a:b6:
ef:71:61:c3:4d:d6:93:77:ec:87:d5:d8:b0:1c:4a:
aa:b7:34:f7:b0:20:12:fb:8f:ee:45:55:8c:6a:07:
46:fb:76:6e:e7:8b:86:80:2f:40:c3:45:ac:08:26:
46:6c:b3:64:04:fb:21:20:d9:9c:78:bb:69:ac:2c:
f9:e3:e0:42:84:1f:0b:cc:46:c3:7b:1b:db:16:57:
e4:2e:1e:0e:02:9f:16:18:0e:f2:4d:7a:08:19:4f:
ab:41:08:7c:cc:f0:f1:02:3f:e0:88:3d:e3:73:ca:
6d:65:32:7f:fa:7f:6a:6f:4a:f6:61:3f:42:e0:49:
ad:e7:8f:ed:45:64:50:c3:5e:d0:84:cf:a5:93:3f:
5e:c1:30:c1:cc:d6:ac:b1:92:68:23:d1:0d:8f:9c:
fe:ca:ba:7f:10:b3:67:80:11:90:68:e2:cc:4e:96:
65:90:f6:e3:22:58:5e:17:8c:7d:f1:14:b8:91:f4:
e4:90:fb:e3:10:01:3b:d5:73:97:e5:86:0f:dc:99:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:14:A0:C7:15:03:43:29:FA:78:B2:B5:98:67:08:89:3F:12:B4
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5E33494CF41E11ECABA7D3DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:52:0c:bb:58:2a:ec:d2:ad:27:a5:67:97:1b:51:bd:f0:27:
23:d8:5f:78:bb:64:a7:10:33:94:c2:34:f2:db:57:79:df:cf:
56:e0:f6:09:b3:c5:b4:0a:67:74:c5:50:d6:ec:e7:b8:98:85:
00:2a:40:bf:af:ff:1b:91:ee:24:1f:54:b2:85:e4:1c:01:8c:
33:68:96:64:5d:d8:12:79:d3:80:bc:36:09:d0:a7:ec:6b:f3:
6a:e8:e5:66:a0:6e:dc:1d:1f:16:19:de:fe:f1:3d:cc:d0:7e:
c1:27:06:0b:c1:c7:6c:99:ab:e6:2a:70:55:91:29:68:c6:da:
72:a0:b9:cd:0c:8d:ee:63:83:b3:f2:4c:e8:e3:e9:ad:c4:5e:
f7:bd:6b:45:05:b3:3f:a9:a5:95:a8:d6:bf:3c:6a:4c:b4:09:
52:5a:d8:44:c2:88:07:02:11:fc:ff:3e:64:35:82:df:73:c1:
46:f4:81:38:38:3b:42:07:ae:f4:4b:2e:bb:dc:c8:32:a9:1f:
c5:82:9b:29:d8:91:d2:71:96:31:7c:f2:58:51:61:98:c4:19:
8c:98:1f:5b:c1:a0:ef:a0:58:1b:40:e6:3c:24:55:b7:d0:11:
21:3f:98:f2:f4:03:c4:a0:0b:1d:13:df:ef:dd:74:51:1a:39:
6c:89:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org