Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BD9E89E49D311ECA70E4950D8A014CE.roa
File: 6BD9E89E49D311ECA70E4950D8A014CE.roa (raw, json)
Hash identifier: cLAP/ASHcND22ZBSgFcLZSotb/sBFvPHklp1bbOgAXM=
Subject key identifier: 86:4C:C2:C9:88:05:05:30:07:F0:D7:A7:88:01:0B:72:1B:76:7E:F0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 055D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BD9E89E49D311ECA70E4950D8A014CE.roa
Signing time: Sat 20 Nov 2021 07:28:14 +0000
ROA not before: Sat 20 Nov 2021 07:28:09 +0000
ROA not after: Sun 20 Nov 2022 07:28:09 +0000
asID: 62579
IP address blocks: 102.129.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 20 07:28:09 2021 GMT
Not After : Nov 20 07:28:09 2022 GMT
Subject: CN=6198a38e-f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:92:62:c1:50:78:29:b1:1c:95:d3:69:af:
b6:7c:81:7e:65:fa:38:6c:cc:59:9e:6f:f6:fe:d6:
cd:57:37:ca:75:40:6a:e2:02:2c:c0:34:67:c7:6a:
63:b7:90:ef:d3:3e:5d:a6:53:17:bd:9b:ce:00:ca:
3b:c0:19:84:a7:2e:f3:76:5e:55:1e:d1:c9:b4:83:
6d:6f:73:97:e7:c6:36:d4:9f:79:10:d2:da:1e:cd:
eb:c7:1b:c4:ae:8e:e2:c4:bf:e6:38:41:ef:94:25:
a3:20:b8:9a:a5:92:b7:73:b7:18:b3:71:32:7b:43:
c2:ca:2b:73:ce:14:37:fc:db:a3:bc:bd:bd:e3:7a:
8d:ab:45:6b:94:f3:37:b6:4d:7e:32:bb:57:c7:dd:
69:c1:65:46:71:a8:80:31:b3:3f:d5:64:ed:db:1b:
8e:34:37:20:40:50:f4:b6:9c:d2:02:94:30:56:5c:
ed:58:a8:fb:dc:26:5d:1e:3c:bc:07:49:94:66:56:
ce:d9:dc:8b:6f:89:a5:96:19:62:31:03:d1:d8:4e:
4e:00:61:92:29:57:49:a3:12:58:e9:36:91:17:7c:
57:a4:d5:bf:3a:c1:73:d1:37:78:77:bd:2d:7a:e4:
85:d4:93:81:d4:31:2d:d1:f7:ef:82:d6:4e:0e:b2:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:C2:C9:88:05:05:30:07:F0:D7:A7:88:01:0B:72:1B:76:7E:F0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6BD9E89E49D311ECA70E4950D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8d:74:df:2d:4f:78:e4:ac:3e:83:c7:61:95:bc:27:01:31:
a0:ff:46:e2:b8:49:28:43:71:de:a0:73:93:06:4a:68:2f:3e:
77:18:5f:13:99:e4:1e:55:ce:8c:5a:fc:5a:fc:fb:62:48:e9:
98:3d:99:59:02:c8:16:c4:ee:dc:eb:5e:f1:e7:fc:1d:03:9a:
5e:1f:52:ff:f2:30:45:6c:30:0d:58:7a:cb:97:7f:bf:64:27:
78:e8:74:6e:19:68:bd:9f:7f:84:cd:a0:65:fc:d6:7a:7b:67:
0e:cb:6c:d5:01:56:9d:f6:e4:cc:82:a1:b4:01:06:0e:cd:d8:
51:6b:f4:94:20:56:af:46:d4:7b:39:16:ea:09:05:b1:64:9a:
20:60:9c:8e:89:d1:8b:70:ad:d1:36:8f:04:b6:d6:8e:b6:de:
78:f3:ca:33:10:08:1d:5c:7e:f9:52:03:0c:2a:e1:f0:6d:05:
fb:07:15:28:15:1c:1a:c2:69:d1:a9:40:c6:06:93:b9:d0:9a:
2d:6f:2a:45:ed:d4:01:c9:62:b7:fc:54:9a:5d:ea:03:ac:b4:
e5:5c:28:f4:4b:68:cd:0c:d5:ff:09:8a:57:7f:a4:75:20:33:
7f:be:9b:4a:5d:67:2d:83:4b:8f:36:b8:72:7d:33:dc:68:62:
5b:44:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org