Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91C46BEE492D11EBB9EF1252F8AEA228.roa
File: 91C46BEE492D11EBB9EF1252F8AEA228.roa (raw, json)
Hash identifier: 45N5XT1Z2Zb5dTVmXHNupcdwFdjbZLfao6l6b97Tpws=
Subject key identifier: E7:1F:43:4D:D0:C5:8A:F3:3C:55:75:47:2E:BE:37:C1:20:E5:36:C7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 030D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91C46BEE492D11EBB9EF1252F8AEA228.roa
Signing time: Mon 28 Dec 2020 16:56:04 +0000
ROA not before: Mon 28 Dec 2020 16:55:57 +0000
ROA not after: Wed 28 Dec 2022 16:55:57 +0000
asID: 9009
IP address blocks: 102.129.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 781 (0x30d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 28 16:55:57 2020 GMT
Not After : Dec 28 16:55:57 2022 GMT
Subject: CN=5fea0e23-6fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:ba:91:dc:d9:02:73:a8:4c:52:76:56:f2:
7c:79:14:76:58:7b:79:9b:1a:a5:ac:4d:c3:3c:59:
16:a5:28:1c:ce:6b:e9:d2:9c:ae:03:37:5c:5e:56:
c6:c0:cc:f7:05:6a:d0:eb:7c:6e:73:5f:f9:19:1c:
de:45:61:67:32:e3:f1:6e:06:0b:15:59:bc:78:d6:
56:da:2e:3c:2f:b8:bd:be:6a:0e:84:84:68:4c:4a:
7b:2f:14:ba:2d:b5:8b:55:b8:4d:ff:fe:08:2c:09:
68:c9:a3:95:03:29:64:2a:a2:e1:27:90:d3:10:33:
57:b2:8e:13:c9:8e:6c:86:61:c7:b5:61:44:98:3b:
0e:2e:24:af:f2:7c:ec:2a:bc:c8:c1:fb:5b:2d:66:
9e:22:a1:57:d4:77:d0:ef:dc:2d:62:ff:2b:38:e5:
c6:ec:ca:7a:d6:ba:fb:b2:3e:d6:2e:f7:69:db:30:
ef:ff:81:e0:17:b6:a7:64:6d:5b:44:ad:0c:0f:df:
f6:ae:6d:f8:81:b3:6b:fe:52:12:36:ff:e6:30:be:
66:3d:13:f9:b0:43:82:ae:4f:97:e9:30:26:3d:a4:
35:97:98:00:8d:62:45:ac:cb:47:f9:33:29:19:7a:
a4:23:00:6e:a3:67:aa:4d:59:6a:59:1c:9b:05:23:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:43:4D:D0:C5:8A:F3:3C:55:75:47:2E:BE:37:C1:20:E5:36:C7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/91C46BEE492D11EBB9EF1252F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ef:47:65:d4:b5:06:d7:77:48:d0:aa:82:23:7e:a3:51:8c:
84:cf:a8:97:2e:bc:89:c7:54:c7:6a:fa:d4:99:5d:3c:a2:d8:
5d:6a:ca:26:3b:80:b6:4b:ef:14:ff:68:97:1f:bf:93:f9:d2:
bd:6e:bc:52:68:93:fb:3c:09:70:d2:9a:34:32:96:a9:64:27:
1b:15:22:f4:a1:93:7b:0e:c4:7e:13:86:ac:52:a6:e4:3e:d1:
ea:00:fc:c6:61:db:33:22:70:41:3e:1d:e1:59:d4:0c:d9:74:
ee:10:f0:d2:5c:bf:1f:d3:cc:e8:86:6f:ab:e5:75:5c:0b:ac:
f5:c3:35:0a:cd:89:54:0c:14:b5:85:d4:40:e6:8a:99:00:72:
89:93:33:1a:bb:c7:b7:27:78:18:bd:7b:9c:5a:d6:bd:fd:76:
74:42:09:33:d9:f2:78:27:21:6f:a0:eb:14:0d:f7:ce:a2:0a:
b7:1c:2c:71:1f:75:5c:9d:de:d8:f2:f8:2d:b9:c2:be:1f:27:
f3:54:a4:97:34:de:97:74:ab:55:2b:79:77:22:37:41:e5:ad:
67:4f:9d:d4:19:91:da:69:9f:71:0e:c3:bf:13:56:cc:24:02:
e1:ee:65:08:c9:41:da:43:cd:fc:d2:cd:39:f7:cc:0b:97:e0:
7f:ac:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org