Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/888BFA861D5511ECAF6DC239D8A014CE.roa
File: 888BFA861D5511ECAF6DC239D8A014CE.roa (raw, json)
Hash identifier: 4DGm2euzgLK5n1fcN4Tp7bUz2+qcdaPHfihg+UGztk4=
Subject key identifier: 44:AC:DE:4E:24:7C:2A:86:6B:32:44:FB:72:7E:E3:03:B7:E6:8F:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04FE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/888BFA861D5511ECAF6DC239D8A014CE.roa
Signing time: Fri 24 Sep 2021 16:36:14 +0000
ROA not before: Fri 24 Sep 2021 16:36:09 +0000
ROA not after: Sat 24 Sep 2022 16:36:09 +0000
asID: 397373
IP address blocks: 102.129.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 24 16:36:09 2021 GMT
Not After : Sep 24 16:36:09 2022 GMT
Subject: CN=614dfe7e-ea77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:67:80:ec:41:09:46:2c:7a:e9:2f:0d:95:
d6:44:90:d2:df:10:d0:11:30:96:fa:02:21:e0:f8:
67:5f:aa:ad:34:38:eb:09:b3:fd:0b:d7:ae:ca:62:
a7:1b:e2:d2:7f:2f:e9:65:b3:fa:a4:14:35:f7:f2:
14:fa:de:39:34:4f:c8:1e:72:a1:f5:c6:3d:55:5c:
3a:01:cc:37:af:c8:7b:a4:48:c3:d3:db:89:89:af:
41:c5:ac:c9:75:ed:2f:76:ae:68:73:e9:62:52:76:
0f:8b:46:c3:75:31:f0:f2:cd:8d:6a:30:69:3a:74:
1d:bc:c9:e5:0c:cc:fc:82:7c:c1:29:8a:12:a8:2d:
8c:fd:11:1f:7a:ea:c2:76:59:f7:48:44:f2:44:87:
b5:75:ed:47:fb:a1:5c:77:41:39:a1:ab:14:6b:08:
04:76:f2:2f:67:03:67:cf:2c:16:aa:6f:23:01:74:
80:5c:68:57:ca:16:97:12:11:aa:94:88:9c:f3:dc:
77:d2:19:93:f9:97:bf:35:f5:b1:77:e2:86:64:bc:
22:13:61:f2:bd:1c:4a:17:d5:91:1d:32:1e:1c:ed:
af:af:5e:e4:ab:0a:5a:85:ff:fd:01:70:31:1a:9d:
39:9d:77:8f:ae:0c:62:32:42:9d:d3:99:b5:14:37:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AC:DE:4E:24:7C:2A:86:6B:32:44:FB:72:7E:E3:03:B7:E6:8F:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/888BFA861D5511ECAF6DC239D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e1:cb:e5:38:0d:4e:40:84:91:fa:d5:8a:ae:18:47:41:80:
53:6f:d4:8a:b3:c3:c3:b1:1d:3d:1e:6c:11:e5:e8:d1:8e:38:
46:50:25:16:2f:d7:4a:ef:03:79:37:30:e1:8e:37:aa:e3:11:
60:bb:40:e6:cd:c3:7f:d6:b2:aa:ef:b8:9f:c5:96:23:57:b7:
28:39:7e:a2:90:4d:b3:56:52:5a:c5:0b:26:a2:9f:f1:87:f0:
8f:ce:8f:63:cf:1d:77:61:7c:c0:13:4c:4a:61:61:83:69:aa:
c9:15:2e:66:77:8e:b3:aa:86:1b:ef:b2:68:01:78:8a:56:0a:
3a:13:cb:6c:b0:61:7a:98:59:94:89:e7:19:f5:dd:25:01:f3:
cc:f9:8a:27:6d:33:ac:da:ae:60:fa:e7:c6:8c:c2:07:13:dc:
bb:79:b6:cd:f1:36:a4:02:d2:e4:95:84:0f:65:8f:97:25:f2:
ff:7d:3b:8a:78:c4:62:e0:7f:e9:2d:2b:f2:7d:72:de:87:95:
c0:83:99:39:9e:f9:46:35:34:5a:19:bb:16:ae:55:9e:34:82:
93:41:93:8d:c0:43:ca:24:bd:c4:72:d0:77:f7:f3:51:33:db:
da:87:b8:f1:f6:40:36:34:02:26:7a:fc:df:77:d8:8c:f6:58:
1e:6f:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org