Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62C97258EA4411EC82C72B9CF1222468.roa
File: 62C97258EA4411EC82C72B9CF1222468.roa (raw, json)
Hash identifier: 5ap84OfSOWONgO0CKDgN6xG/ovlK8rBxMzdxQ67GI1g=
Subject key identifier: 47:79:99:76:F6:39:1D:BD:01:3C:9C:B5:5F:2A:89:DC:8C:B9:8F:74
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0699
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62C97258EA4411EC82C72B9CF1222468.roa
Signing time: Sun 12 Jun 2022 11:39:58 +0000
ROA not before: Sun 12 Jun 2022 11:39:54 +0000
ROA not after: Mon 12 Jun 2023 11:39:54 +0000
asID: 398464
IP address blocks: 102.129.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 12 11:39:54 2022 GMT
Not After : Jun 12 11:39:54 2023 GMT
Subject: CN=62a5d08e-53fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:42:ca:1d:16:18:f7:e3:14:4c:45:5f:97:
1b:ac:ff:7c:25:44:32:ec:61:f0:ca:08:60:b2:0a:
3a:75:4a:87:9a:9e:35:3a:ae:53:cc:45:5d:91:e6:
85:e7:46:4c:0c:b4:94:9f:7d:d8:df:65:15:0c:c3:
aa:b1:ee:3b:f2:9e:03:84:64:4a:f9:65:c5:5a:f3:
8e:69:24:24:fb:71:85:10:89:f6:1e:23:ce:ef:04:
97:89:62:5f:34:16:b0:e4:2e:64:6d:37:56:80:3c:
8a:03:eb:e0:1e:e6:ca:e1:45:ff:5d:2f:6e:f1:7e:
0a:ac:7a:8f:12:a3:fa:4c:e1:a8:dc:d1:10:7f:2f:
b3:0f:bd:4e:91:9c:b3:37:ef:02:06:f5:cc:65:de:
19:1c:b0:ef:34:13:ad:b1:0d:bf:12:5a:ca:bc:a1:
9f:5a:1a:32:22:ec:0c:ad:21:17:d7:41:ec:ff:93:
24:f4:44:4e:31:df:97:1d:de:ce:73:59:f4:fa:7e:
55:26:76:ec:1d:de:ae:3b:be:bd:1f:b7:e3:66:64:
f6:77:98:57:a3:53:6a:c0:46:31:2c:5f:4c:a1:9c:
e1:8b:ef:4a:30:db:f6:9c:ae:d6:ae:0c:9d:c8:9e:
3e:55:b4:67:bb:27:29:52:d9:b7:84:3f:84:03:34:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:99:76:F6:39:1D:BD:01:3C:9C:B5:5F:2A:89:DC:8C:B9:8F:74
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/62C97258EA4411EC82C72B9CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:8c:55:47:fc:57:04:d6:ec:84:20:76:03:69:19:b0:ab:31:
67:2f:c2:72:7f:e6:0f:61:db:5e:de:7c:73:10:14:1a:71:6e:
46:74:4a:12:d3:da:31:6a:9b:b8:90:84:9b:92:dc:f6:23:a1:
fe:04:b6:f9:e3:c3:0b:b6:ea:9e:b2:54:ad:b4:87:72:66:03:
7e:00:cf:dc:95:0c:bb:f6:36:09:4b:8f:52:73:bc:bb:3f:b1:
86:8a:20:56:ae:b8:8b:aa:43:f8:b1:1c:f0:9f:2a:bd:35:80:
5e:00:4a:cc:83:56:a3:ed:68:ca:da:01:f6:23:66:e3:66:c1:
b4:2f:2c:33:3d:5b:96:e5:ae:e6:eb:14:9e:75:fb:fc:44:c0:
cf:6d:87:03:36:bd:96:29:6a:98:67:68:ec:79:37:99:50:c1:
48:16:31:ed:a5:01:e8:e6:69:93:d2:03:24:5f:ff:ff:25:72:
31:b5:21:e8:c9:93:ca:56:e0:a7:a9:38:f9:17:d8:f8:b5:bb:
50:42:84:ee:c2:a9:da:66:72:d9:68:85:14:43:5f:ee:30:83:
e1:de:c3:ec:e5:c7:76:54:a0:15:bf:4e:76:58:1d:07:46:12:
95:f2:d5:c6:4b:3b:9c:33:a3:ba:7e:fc:de:b8:aa:2a:e6:dd:
14:34:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org