Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93D6284E8AF511EDA7838C86F1222468.roa
File: 93D6284E8AF511EDA7838C86F1222468.roa (raw, json)
Hash identifier: 1q/RA/TciFrA8BdNSlNurND5jh2cKCbIm7QNl908SMA=
Subject key identifier: DF:20:D9:3D:EA:DE:A2:F3:46:E5:42:0F:A9:7A:25:C6:1D:BF:26:21
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0999
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93D6284E8AF511EDA7838C86F1222468.roa
Signing time: Mon 02 Jan 2023 23:31:27 +0000
ROA not before: Tue 03 Jan 2023 23:31:23 +0000
ROA not after: Wed 03 Jan 2024 23:31:23 +0000
asID: 40676
IP address blocks: 102.129.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 3 23:31:23 2023 GMT
Not After : Jan 3 23:31:23 2024 GMT
Subject: CN=63b3694f-0a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:a2:44:56:c0:a7:1c:23:ba:10:7d:36:01:
89:26:89:9a:5f:05:4b:41:21:d2:4b:23:ef:ff:92:
77:a4:04:f4:30:2e:51:81:e5:dd:fe:17:7d:c5:f3:
11:23:8a:6e:17:ef:fb:fe:9c:ef:93:26:b3:e1:d5:
5d:13:a1:8a:c0:8a:d7:18:9b:8b:e6:45:ed:83:ef:
e7:f8:1a:e6:e4:a3:6d:40:b3:12:ab:27:c8:6e:63:
1c:f0:37:08:24:41:a2:54:c8:f3:11:fd:b9:cd:bd:
59:ce:85:16:2a:14:81:70:af:7a:a8:14:09:2e:4e:
d6:af:99:43:1a:06:3f:a5:6e:2f:d7:62:20:ee:b3:
5d:51:2f:50:db:87:ac:8e:33:5d:9e:7d:5d:0c:5d:
01:0e:9b:df:83:cd:84:0f:43:f5:d5:3e:d4:53:42:
cb:34:63:1b:9a:43:33:21:b9:f7:0a:32:33:e6:68:
34:9b:4e:27:67:13:e6:8b:f0:f8:f9:88:2c:4f:cd:
14:9e:59:d0:04:64:6b:bc:88:e6:1e:b2:3a:7e:12:
fb:e1:e8:ec:6f:94:77:7f:af:50:f7:d5:00:ff:1e:
8a:6b:7a:e4:91:5f:01:bd:f3:9f:e9:79:d1:39:48:
15:c3:df:f0:f6:5e:26:15:f2:bd:b5:86:a5:21:7d:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:D9:3D:EA:DE:A2:F3:46:E5:42:0F:A9:7A:25:C6:1D:BF:26:21
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/93D6284E8AF511EDA7838C86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.190.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8d:2a:e2:39:cd:ab:aa:3c:88:46:18:c6:fd:e7:26:ea:46:
91:f1:b0:e3:4e:66:d2:59:29:2b:38:29:f0:37:e6:d8:3a:83:
28:b4:64:3a:a4:6c:b9:ad:a1:30:40:9e:13:f8:10:5b:f8:37:
3b:06:4d:26:70:c0:2e:ba:81:ea:b7:c7:c4:e8:9d:ca:ce:35:
2f:42:7f:e5:35:fd:e3:78:0f:c5:42:e4:22:08:24:54:bb:a0:
2f:68:35:fd:26:32:38:c3:49:c0:46:a8:61:d0:6c:c1:cd:e8:
fd:57:86:99:ea:0c:cb:c3:9b:f7:e5:ad:f5:f6:08:4c:e3:d4:
1f:5e:6d:5a:d0:58:52:b1:2e:3d:86:04:2c:77:31:e9:3e:ea:
70:2f:55:92:7d:85:7c:1f:e4:d2:7e:42:fe:32:da:07:23:cf:
f9:4e:af:2c:a1:16:77:37:b6:8e:9d:53:38:f7:2e:92:ce:61:
26:61:9a:0b:98:1f:2d:11:f9:cd:fd:12:43:6b:0d:a4:47:eb:
60:1d:ca:41:6a:d6:ae:89:8c:4e:ab:ca:bf:ad:be:0c:10:d4:
d1:6c:31:d6:65:d2:fd:99:f2:27:18:48:08:67:80:53:af:36:
0f:d5:f7:11:b6:70:36:b6:f7:58:6a:3a:68:b6:7e:29:2b:d3:
a2:86:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org