Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B988F70DB6B11EDACB95D9D2F6D8C1D.roa
File: 8B988F70DB6B11EDACB95D9D2F6D8C1D.roa (raw, json)
Hash identifier: Vgkl2UNQYPCwgbUguzIXz3BTLP9L3kgdzfdzs1HpRVw=
Subject key identifier: 8C:FB:A0:BB:D7:BF:70:91:9B:4E:0C:0D:91:9A:F8:B2:76:4C:2C:81
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B11
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B988F70DB6B11EDACB95D9D2F6D8C1D.roa
Signing time: Sat 15 Apr 2023 08:57:27 +0000
ROA not before: Sat 15 Apr 2023 08:57:22 +0000
ROA not after: Mon 15 Apr 2024 08:57:22 +0000
asID: 35916
IP address blocks: 102.129.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2833 (0xb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 15 08:57:22 2023 GMT
Not After : Apr 15 08:57:22 2024 GMT
Subject: CN=643a66f7-9acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:14:b5:73:5a:5a:dd:9f:9e:95:e2:ac:44:
b6:35:cf:45:16:7b:ef:59:99:58:bf:1b:09:9c:32:
d3:a9:d6:d8:25:63:45:9d:05:34:98:eb:94:e4:57:
52:36:4e:e6:87:a3:15:a6:9c:f0:3a:1b:e3:48:de:
5b:57:a7:29:c2:07:0e:b9:61:f0:a9:03:eb:8a:a5:
c7:2c:f7:4f:57:a2:54:41:ed:71:c2:bc:5f:39:43:
63:50:a9:a1:78:65:73:3c:f9:62:0a:68:4a:a8:46:
5f:85:9c:c2:b8:9d:33:3a:64:df:ce:91:4c:52:60:
68:9e:02:24:db:79:53:19:80:4d:d0:f6:04:a4:0e:
f7:9f:f7:16:7b:24:75:f0:74:de:ea:0b:92:b1:be:
c7:89:ff:ad:ef:7a:1f:bc:0a:06:28:8b:78:0d:ce:
9d:05:0d:39:5d:e8:ef:f9:be:7d:f2:48:31:29:b9:
09:4a:4d:69:cc:0d:21:82:ef:0c:26:0f:6f:c1:b4:
5e:e5:15:42:41:06:61:32:80:5d:ac:b5:f8:4a:0b:
2f:fb:48:46:17:ee:47:a2:87:8d:95:c6:fd:bc:87:
b7:27:ba:40:3e:cf:04:57:5a:d2:47:a8:d4:03:5d:
8d:71:be:51:16:00:f3:14:8c:db:2a:72:c8:5d:0b:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:A0:BB:D7:BF:70:91:9B:4E:0C:0D:91:9A:F8:B2:76:4C:2C:81
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8B988F70DB6B11EDACB95D9D2F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/24
Signature Algorithm: sha256WithRSAEncryption
13:21:f3:a5:a1:40:db:10:92:4f:12:69:00:5b:75:71:e2:b1:
d3:70:1d:c1:7a:d9:76:98:a0:aa:1a:40:aa:dc:17:2e:1d:7c:
b9:29:2e:bc:0e:c3:63:16:df:08:fb:2f:a4:36:3c:d0:5e:a4:
5d:dd:96:b6:50:61:e2:a6:31:49:a2:3d:24:1a:7a:ad:ba:8b:
ca:c1:6a:6d:e1:b6:c9:e0:e2:82:33:dd:e2:c6:d3:b9:20:29:
b9:38:42:e8:04:23:ae:92:cb:76:5c:61:06:70:0d:e7:61:65:
6a:9a:ec:a6:c0:84:b9:e8:d8:df:75:7e:b7:8c:a8:dc:90:cc:
70:11:64:a9:8c:2f:3d:5a:cb:99:54:f4:31:97:23:e6:2b:5e:
ff:07:0d:2c:43:c0:6b:88:8a:2a:94:0a:72:c4:17:92:41:52:
10:f1:58:5c:93:ba:69:c6:d2:7d:7c:4a:7d:f3:75:01:76:5d:
ff:fa:8b:c7:cd:a9:a0:5a:d0:6e:d1:e4:8e:fd:8f:0c:b2:ce:
c0:2d:70:6c:4e:ca:34:69:96:5b:82:54:5b:b5:f0:09:9d:2e:
74:06:4d:e6:22:9b:c9:c6:52:a5:b1:3f:78:cd:54:79:1b:93:
c8:26:c2:52:9a:98:8e:c4:45:84:d8:4a:31:26:07:83:ac:2f:
74:47:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:09:59 2024 by rpki-client on console-fra.rpki-client.org