Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/732AE924B43D11EDA65F9EAAF1222468.roa
File: 732AE924B43D11EDA65F9EAAF1222468.roa (raw, json)
Hash identifier: JFBdVf3i9UhAABke3r14Ha4ZujNVT9aLlxxaupKm2n0=
Subject key identifier: CE:71:A5:87:E1:70:58:5A:AA:AA:52:8F:A5:78:0D:30:17:13:A5:FB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AA0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/732AE924B43D11EDA65F9EAAF1222468.roa
Signing time: Fri 24 Feb 2023 12:19:14 +0000
ROA not before: Fri 24 Feb 2023 12:19:10 +0000
ROA not after: Sat 24 Feb 2024 12:19:10 +0000
asID: 200017
IP address blocks: 102.129.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2720 (0xaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 24 12:19:10 2023 GMT
Not After : Feb 24 12:19:10 2024 GMT
Subject: CN=63f8ab42-6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:ae:f2:9d:5b:e1:56:5c:4b:f5:a5:12:ba:
4f:53:9b:0a:33:30:56:29:2a:f0:19:e1:60:75:a3:
06:80:5a:ae:e9:b6:d6:41:3f:8a:4a:84:e7:26:fd:
b1:1c:c3:18:a9:53:e7:56:ec:97:9d:4f:d3:c2:b2:
c4:1c:5b:b3:2e:8c:3e:42:3f:4e:73:9b:20:de:b6:
df:e5:dc:cb:62:31:ba:c6:95:e4:04:c6:a0:4d:e4:
56:50:b5:45:ae:0e:1a:00:eb:b1:a6:a7:f6:d1:ae:
96:4a:7f:f4:0a:4f:2f:1a:1d:6b:3a:93:5a:c6:79:
30:2a:3b:ca:6c:b9:68:11:43:34:d6:37:86:d8:09:
5a:3a:21:09:3f:d9:9c:76:72:c9:7b:31:ce:24:42:
82:0c:43:12:5e:56:54:aa:c7:1b:b8:d6:52:37:1c:
cb:73:22:af:b9:b1:0b:bc:1d:77:55:71:65:8f:f9:
ef:33:2d:50:5c:e0:e0:88:1e:e5:36:87:45:04:59:
6c:6a:a3:a8:8a:fd:7e:1c:86:5e:0d:c6:a5:7b:65:
e6:6d:c2:1c:94:d0:e1:4c:f7:e1:0c:07:65:74:2c:
06:10:32:bd:ab:a9:d7:9f:f1:79:25:f8:8a:ce:53:
8d:06:1e:ac:55:14:4f:89:47:1e:59:63:2f:59:93:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:A5:87:E1:70:58:5A:AA:AA:52:8F:A5:78:0D:30:17:13:A5:FB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/732AE924B43D11EDA65F9EAAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.187.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e7:75:78:4b:b4:81:52:37:a5:0d:cd:d9:6e:5a:b8:98:1b:
a4:c2:65:03:ae:7a:84:eb:0f:f5:6f:cf:a8:a7:4c:9a:98:62:
3d:a1:0e:2b:f2:65:18:5e:40:25:97:60:2c:16:c4:98:97:e7:
9d:93:92:cd:9b:f4:4a:b9:6d:96:e6:f3:d6:76:f4:bf:20:33:
63:94:3c:57:80:fc:c6:8f:b6:ee:f1:ed:0b:df:d0:de:51:b4:
1b:9d:da:b0:0f:39:6d:e4:86:37:e0:37:d9:99:b7:3e:27:dc:
4e:d5:0a:73:e5:e5:46:0a:f8:ce:6d:57:0d:3b:e5:eb:60:53:
28:a5:7d:19:66:0f:ee:66:e6:f9:d7:d1:60:c6:26:ed:29:b2:
03:78:d3:b9:d9:6b:3e:1b:62:98:00:91:79:20:23:54:71:e5:
10:95:ac:ac:98:1a:3e:76:6f:6e:24:95:79:59:b9:4d:dd:ae:
91:b5:d2:f3:9b:b9:79:1b:33:5c:85:2c:f2:27:a9:95:af:ab:
89:7a:0f:b1:5b:4e:9f:d5:36:42:2a:13:56:84:bb:67:8f:f4:
31:fd:19:65:29:71:eb:e0:84:ff:e1:a8:24:08:34:02:79:8f:
64:20:46:6e:90:6f:ce:cc:15:76:08:4f:8e:63:c8:56:29:e2:
85:1e:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 01:43:02 2024 by rpki-client on console-fra.rpki-client.org