Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9948A4FA819611EC8C0915755A40D577.roa
File: 9948A4FA819611EC8C0915755A40D577.roa (raw, json)
Hash identifier: 6CYj4H+xgorvV1ED6q3NUxHjaSHU5owsLpjb6NDBNhU=
Subject key identifier: 64:4F:5F:CE:73:E8:57:CE:B2:18:02:25:D3:8B:88:D5:F0:A1:6F:AA
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05CC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9948A4FA819611EC8C0915755A40D577.roa
Signing time: Sun 30 Jan 2022 06:33:56 +0000
ROA not before: Sun 30 Jan 2022 06:33:51 +0000
ROA not after: Mon 30 Jan 2023 06:33:51 +0000
asID: 49999
IP address blocks: 102.129.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 30 06:33:51 2022 GMT
Not After : Jan 30 06:33:51 2023 GMT
Subject: CN=61f63154-ea0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:48:06:05:13:65:72:27:61:89:8e:60:46:
d3:e9:be:16:e1:c1:48:4b:40:df:d0:11:57:1c:9e:
e1:e3:d5:2f:7c:72:7b:a6:0e:dc:70:00:fc:0c:4d:
9e:59:60:b6:33:30:f1:cf:af:df:2d:4a:a4:2b:63:
63:3e:c0:c4:aa:92:b2:99:27:7d:ae:5c:1b:7f:c3:
36:c6:a6:9d:1d:c7:11:76:62:ed:f5:87:7b:6c:04:
6e:cc:32:92:68:a4:14:b2:bf:b3:1e:9c:04:c4:34:
8a:ef:93:fb:b5:57:f1:2f:c2:51:b8:43:1d:cc:e2:
cb:5d:8c:e8:71:b7:14:a7:e9:82:1f:d6:04:08:cb:
de:3f:51:26:c6:d8:dd:70:c7:a4:55:41:6e:ce:f8:
3f:bd:ce:31:6d:e5:d8:9c:9b:5f:79:50:4b:4d:3c:
28:dd:0f:a3:8a:10:c8:90:eb:22:01:86:8f:e9:2c:
c0:bb:28:e7:4d:25:db:d1:cb:15:da:5a:11:d4:fc:
17:92:bd:b4:d5:92:7e:3e:68:b0:48:77:3c:27:e9:
63:be:e7:72:18:50:cb:85:85:f5:4e:25:8e:43:e9:
86:ad:f0:00:9e:6e:96:ec:4f:78:d4:d4:3b:c6:37:
b3:12:a9:54:52:86:ba:b7:26:56:f6:43:0b:6f:f4:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:5F:CE:73:E8:57:CE:B2:18:02:25:D3:8B:88:D5:F0:A1:6F:AA
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9948A4FA819611EC8C0915755A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d9:4b:8d:21:83:9c:36:16:ef:e5:39:fb:a0:4a:a1:66:f0:
5e:5f:f5:dc:29:f1:88:5f:d3:01:94:09:c7:c2:2d:c3:2c:68:
89:5a:ab:73:87:0a:4f:8c:be:f0:a2:fc:7f:18:c3:74:3e:91:
fb:c6:05:29:4b:89:43:08:08:11:82:3b:bf:dd:9e:e4:61:7e:
0d:e6:aa:59:4c:98:55:6f:d4:ab:a0:e0:e1:a2:52:64:71:0f:
dd:33:bb:e1:96:82:5d:cb:02:66:df:53:8e:42:e4:bc:ad:32:
d7:4a:c7:b5:88:76:17:d4:b2:dc:f9:83:c8:81:84:bf:e4:a6:
8d:f8:97:ca:ed:0a:40:f8:ea:1b:94:be:64:f5:a9:c2:ae:1e:
93:3e:9c:63:22:b1:ca:51:93:0d:d6:7e:1d:15:88:21:f6:0c:
d2:16:1a:77:fa:48:07:11:e0:04:5c:cf:d1:18:eb:ba:4e:36:
a1:e9:10:82:9b:54:3a:95:91:c2:ea:fa:60:3b:5b:75:65:f8:
f7:f1:d7:c0:ef:46:45:92:20:9b:db:d8:6d:8b:32:04:bc:c1:
36:71:21:0a:24:ca:b5:eb:54:4d:cc:06:e4:ad:86:9b:95:a4:
56:8c:fa:a6:90:1b:27:cb:cf:aa:72:72:69:65:0e:f7:74:eb:
e7:70:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org