Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/903B2FE4BE3311EBABCB9D5FF8AEA228.roa
File: 903B2FE4BE3311EBABCB9D5FF8AEA228.roa (raw, json)
Hash identifier: hxTMKxw6JKOP7J2iZMjZgpc5uVPjBPitT0PT5Bt1Nvo=
Subject key identifier: 9C:64:DA:04:62:90:06:6D:9D:D7:59:F4:D8:52:7D:EB:9B:33:F1:F7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0402
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/903B2FE4BE3311EBABCB9D5FF8AEA228.roa
Signing time: Wed 26 May 2021 15:03:44 +0000
ROA not before: Wed 26 May 2021 15:03:40 +0000
ROA not after: Thu 26 May 2022 15:03:40 +0000
asID: 399045
IP address blocks: 102.129.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 26 15:03:40 2021 GMT
Not After : May 26 15:03:40 2022 GMT
Subject: CN=60ae6350-c76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:0b:84:1d:13:5c:aa:af:97:4d:35:ca:1b:
b0:9c:e5:e7:c2:51:28:81:c1:8b:10:30:81:f3:63:
43:be:70:b6:e5:40:dc:92:f1:29:da:4a:c9:3f:b3:
81:a4:c2:8f:01:e4:27:11:77:9c:b2:54:ab:9a:1a:
1b:86:b2:83:ae:b9:9c:e7:34:40:b4:f0:da:c8:d4:
8b:fa:1e:51:fd:58:1a:a6:4e:63:34:2a:34:db:f1:
2d:90:e0:eb:0e:a9:b0:7b:76:35:a8:d3:48:23:dd:
01:9b:de:e6:af:95:5a:81:b4:04:84:fe:7d:70:0e:
64:11:0a:a3:c0:bc:2e:a2:d9:da:96:72:5e:cc:bf:
ec:34:09:d9:32:44:b6:3e:21:af:21:61:3a:cc:86:
fd:60:f9:89:b6:90:e5:dc:ee:3a:c1:93:91:ab:c8:
30:45:54:9f:e6:39:65:db:20:05:02:46:9f:44:7f:
0b:2a:ce:8d:0f:7c:9a:6b:ff:1d:40:82:31:fc:68:
41:09:c2:77:9b:2f:0b:5a:dd:8d:07:ad:b0:33:f0:
02:9e:27:b0:9a:22:69:7b:41:c6:00:e1:5c:f3:4b:
7f:d5:8f:5f:d8:1c:53:d5:54:e9:d4:7b:ac:dd:2b:
9b:6b:64:b3:5b:56:4f:e5:38:15:50:b2:e9:a5:fa:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:DA:04:62:90:06:6D:9D:D7:59:F4:D8:52:7D:EB:9B:33:F1:F7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/903B2FE4BE3311EBABCB9D5FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8f:10:0f:fe:77:18:f4:6c:f1:f3:a6:a3:da:e5:2d:86:9b:
b9:c8:5a:d2:18:0b:b2:51:16:87:ca:bf:bd:87:81:07:03:98:
c9:52:e6:21:a3:46:fa:e2:77:8d:6a:80:8a:36:ac:e8:46:49:
72:e6:2d:f8:25:dc:57:19:86:4d:dc:1c:af:67:fd:91:99:57:
fd:23:cb:e6:11:c5:30:90:f3:72:d6:ae:e9:ca:5d:62:b4:86:
ea:cb:0e:ba:b7:19:1b:90:9b:43:1b:a5:13:5b:0d:a7:5d:8b:
e4:af:20:4b:e6:ff:4f:70:46:ea:29:bc:f0:d0:53:db:38:95:
6d:98:8c:15:79:ab:cb:b3:c3:42:db:ed:32:9c:49:80:24:2e:
fe:94:b1:f7:17:ef:e6:a1:89:21:b9:cc:4e:47:38:1b:d0:8e:
53:f7:74:d8:1d:24:85:73:12:09:a4:68:e7:73:c5:e1:9b:07:
83:95:15:e5:a0:b7:29:71:7e:50:7d:15:a8:36:ca:df:d2:0c:
99:22:05:ae:b2:93:60:be:6c:02:45:1e:ed:4f:a2:85:15:30:
9f:93:4b:67:0b:0e:b5:82:d2:93:7b:f5:8e:8a:85:77:b9:70:
c8:58:e1:b2:7a:68:68:b4:bb:c8:50:21:dd:b5:31:a8:97:f9:
5b:91:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org