Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7515ED2023FF11ED8FAE4E8BF1222468.roa
File: 7515ED2023FF11ED8FAE4E8BF1222468.roa (raw, json)
Hash identifier: amQLfZOYwT8fCTOeAU18GvRBpVYLdRfk/Kt+qAiXXuY=
Subject key identifier: 3E:7B:86:6E:E1:40:EA:2F:49:10:F1:F5:49:71:6D:8C:6D:B0:9E:02
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 07A0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7515ED2023FF11ED8FAE4E8BF1222468.roa
Signing time: Wed 24 Aug 2022 22:52:41 +0000
ROA not before: Wed 24 Aug 2022 22:52:37 +0000
ROA not after: Fri 25 Aug 2023 22:52:37 +0000
asID: 212238
IP address blocks: 102.129.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 22:52:37 2022 GMT
Not After : Aug 25 22:52:37 2023 GMT
Subject: CN=6306abb9-de16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:fa:4c:1d:4c:ec:49:38:d9:14:96:ae:e2:
a3:08:ec:87:3a:a8:dc:09:cd:f6:5c:e0:be:75:fd:
e7:1d:7d:0d:bd:39:e1:d2:5d:bc:61:91:2e:de:cb:
9f:5f:67:10:54:67:3f:ce:51:ae:a3:44:ed:fa:32:
62:3d:89:83:46:7b:4a:35:4d:b8:02:d9:b7:5e:94:
85:1d:f2:83:ff:5e:bf:0b:3a:0a:8f:f5:87:74:45:
4e:82:b8:a2:f9:ea:0b:35:63:5f:89:9f:c2:93:8c:
6e:66:ab:5e:5f:11:1a:a1:fa:dc:0e:5e:90:53:5e:
56:2b:1a:df:34:5f:24:59:d6:54:7c:01:a7:71:9b:
3f:72:92:67:3c:4b:50:e1:be:06:c7:60:48:2d:94:
7b:85:10:84:c6:bf:0c:94:c5:96:1d:b8:0a:d1:f7:
66:2d:16:96:7c:b0:9e:97:1a:28:4a:17:31:6d:b2:
d8:67:a9:2c:b1:e6:8f:cc:30:65:1c:13:89:37:e6:
5d:8c:d0:11:54:fe:4b:de:c4:11:51:ab:e5:3e:09:
29:18:29:0e:b5:14:f2:0e:43:2a:f5:c6:f3:9b:b3:
3b:1d:6c:3c:d3:9d:58:95:04:a9:38:bd:69:8d:29:
ee:0c:e2:09:ba:a4:ec:c5:0c:26:43:e9:ca:9d:d4:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:86:6E:E1:40:EA:2F:49:10:F1:F5:49:71:6D:8C:6D:B0:9E:02
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/7515ED2023FF11ED8FAE4E8BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.163.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f2:20:7b:10:5e:a7:2b:08:41:9d:cb:68:61:a1:15:d4:92:
cb:20:84:66:10:63:12:d6:bf:49:9c:20:de:1a:35:a1:f3:be:
84:1d:ee:f4:ec:b4:48:62:39:83:d3:e0:55:bc:2e:67:59:10:
71:b5:5e:a8:d3:2a:6d:0b:b4:d9:c5:e5:91:56:01:8c:e5:cd:
fa:53:47:61:ea:5e:ee:1d:3d:4a:4e:69:8d:07:16:7b:f6:66:
66:38:a8:d2:4b:1d:62:f3:93:28:06:f9:92:70:a4:f7:67:cc:
15:a9:8f:31:34:08:2e:97:2b:f0:d1:7c:73:91:e0:9f:e8:70:
b3:96:cc:ab:2c:c4:a2:65:0c:78:0a:82:80:a8:76:7b:ea:3c:
d4:90:fc:1f:19:c3:4f:26:9a:79:2e:f6:e8:47:eb:70:0b:1b:
b4:6d:e7:4a:c2:db:16:69:1c:92:e9:3e:ac:85:c5:aa:4f:1f:
77:1e:f4:51:d2:cd:87:10:99:7b:14:b3:36:6e:0b:c2:01:16:
00:d2:a5:7b:af:9a:90:7d:fc:e5:d5:ee:91:fe:90:18:52:0c:
79:22:3f:d3:13:f5:61:96:2e:b0:ed:79:ad:1e:42:c4:ab:20:
a6:1e:c8:79:21:b5:bc:24:d6:d3:33:4b:19:15:d0:d5:0a:a5:
27:18:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org