Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6299E3F07F5311ECAC008BCD5A40D577.roa
File: 6299E3F07F5311ECAC008BCD5A40D577.roa (raw, json)
Hash identifier: CbID3VbhWtm0rCyQ5tFCCI2Ce/pX5oaa/w55FvmYYc0=
Subject key identifier: 3F:57:18:23:0C:08:69:57:C4:D9:90:54:7F:D9:24:46:3F:DC:FA:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05C7
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6299E3F07F5311ECAC008BCD5A40D577.roa
Signing time: Thu 27 Jan 2022 09:27:46 +0000
ROA not before: Thu 27 Jan 2022 09:27:41 +0000
ROA not after: Fri 27 Jan 2023 09:27:41 +0000
asID: 138156
IP address blocks: 102.129.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 27 09:27:41 2022 GMT
Not After : Jan 27 09:27:41 2023 GMT
Subject: CN=61f26591-4cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:66:f3:bf:47:16:4a:33:3e:e2:32:74:e5:
ee:c6:3d:1e:6a:e3:09:fc:c8:36:de:16:35:7c:36:
da:fe:f9:da:fd:11:c1:ca:7b:35:f3:5d:d8:9f:7c:
ee:d6:65:60:cc:b3:e6:54:d6:a7:df:e3:42:0c:8d:
ba:06:7d:ef:04:18:fc:18:38:57:2b:68:5f:52:bd:
6f:8a:53:78:92:31:1d:5d:d4:23:31:14:ef:d2:ab:
71:6d:ca:56:81:dd:ce:2c:3d:97:9b:75:0a:b0:b7:
da:df:58:6c:16:d0:63:68:71:f2:fa:5e:55:60:17:
12:a3:75:8c:eb:31:bf:18:1b:b0:76:d1:f3:cb:c0:
cd:13:20:3a:62:be:93:b7:fe:cc:1e:36:16:b5:00:
7d:7a:0b:ba:47:bb:96:02:f3:f8:d7:7a:40:c4:44:
4b:5a:eb:e6:f2:92:50:70:44:4a:5b:bc:08:f1:ac:
a7:b0:73:a6:6e:49:e5:36:62:92:07:9d:b4:b0:e1:
4e:d1:64:26:6c:b6:f1:a1:e1:cd:e0:b4:c7:74:a7:
22:0b:87:8b:ca:2d:8f:8c:77:18:5b:33:e6:ce:34:
40:39:0e:9a:cf:c8:14:af:72:91:5c:47:d1:0d:eb:
92:45:44:ff:76:d3:21:21:83:04:16:c2:3d:14:72:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:18:23:0C:08:69:57:C4:D9:90:54:7F:D9:24:46:3F:DC:FA:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6299E3F07F5311ECAC008BCD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.229.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e0:3d:6e:7d:b8:a6:36:73:da:b0:45:99:61:a8:3e:81:c0:
42:7c:f1:bc:2e:c1:c5:6b:72:34:d4:68:30:e1:2b:39:2d:5d:
11:13:99:96:b6:0b:a9:09:70:8a:c5:af:5e:6a:98:a6:19:4c:
93:21:c0:a2:61:c9:a8:ad:c6:f7:28:93:ff:c1:2c:39:ce:62:
30:0b:c4:8a:af:39:38:33:d1:7b:30:bf:a4:a8:71:e7:2d:e5:
8b:05:05:07:3c:b7:c1:6e:4e:09:c1:e6:74:78:a9:13:49:8d:
02:c2:86:e3:2d:87:58:23:60:6a:ca:e3:98:7d:48:1b:3b:db:
35:a6:a9:3d:7f:e5:7e:da:34:3b:2e:10:78:50:b6:f9:05:12:
c6:9b:58:19:af:84:33:20:4d:77:c1:8d:de:cd:27:63:f0:37:
6a:b5:0c:ed:d7:53:a9:5d:ad:17:10:2b:f6:54:93:96:6b:fe:
2f:17:d6:d8:8d:cc:ae:df:4a:bf:05:3d:fc:00:9c:c8:53:e2:
9d:f7:45:76:d2:87:3e:3a:de:5f:5a:45:10:c8:2e:8e:93:9e:
49:8a:a8:0e:e3:30:31:ac:b8:bd:e2:76:e7:9f:a5:2e:69:0c:
21:c0:d5:95:5a:e1:f8:bb:41:8c:11:6d:05:30:c6:a6:45:c6:
a6:5e:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org