Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08C0416F9CB11EC829D94F5F1222468.roa
File: A08C0416F9CB11EC829D94F5F1222468.roa (raw, json)
Hash identifier: VFdcxTTcU4zn4SlrqHXJCCp/3CplPI80lQUB/O5KFWI=
Subject key identifier: 0A:D5:A7:E3:45:EF:B5:44:37:41:55:56:27:2D:72:29:AE:F9:A6:28
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06F2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08C0416F9CB11EC829D94F5F1222468.roa
Signing time: Sat 02 Jul 2022 05:55:51 +0000
ROA not before: Sat 02 Jul 2022 05:55:47 +0000
ROA not after: Sun 02 Jul 2023 05:55:47 +0000
asID: 43676
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:55:47 2022 GMT
Not After : Jul 2 05:55:47 2023 GMT
Subject: CN=62bfdde7-62e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:2e:a9:c3:7e:0a:a9:72:b7:fd:08:c6:85:
d7:a6:5d:03:ca:4b:92:dd:d8:40:37:1a:17:56:9b:
ed:b9:90:cd:00:db:46:1e:0e:91:33:4f:ed:4a:ee:
c7:40:5c:6a:13:5b:17:be:bb:89:1b:f9:f0:84:51:
ba:be:7f:6d:20:4c:87:a3:4e:fd:20:d1:a5:08:08:
4b:01:b1:42:d0:8a:48:7e:09:59:df:d5:de:6f:3c:
f3:cd:7b:03:12:23:32:29:e9:57:64:4d:c4:15:57:
5c:0f:3d:78:1c:09:45:23:69:9d:52:be:6f:b3:ff:
3e:ae:f7:02:4d:50:3a:54:aa:20:98:3d:d9:13:d0:
6f:ea:a5:14:05:4d:ba:9e:bd:a5:6d:c6:42:6f:05:
86:89:ce:ef:fe:dd:bf:27:c9:9d:f8:da:72:86:50:
d8:bd:fb:ec:52:ac:28:3e:d9:c0:4e:09:57:5e:98:
6e:69:e4:dc:d1:a2:2e:ef:6a:f0:89:7b:a5:d2:e1:
22:74:aa:61:27:38:e1:54:a2:d2:4c:00:5d:08:14:
8e:e6:3d:02:c7:96:c0:0d:99:04:2e:68:c7:ee:4a:
e8:b2:9c:f8:39:94:c2:51:06:ac:72:2c:b0:d1:f1:
db:c0:e8:a6:b9:37:6e:90:ac:b4:08:17:b9:b8:a4:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:A7:E3:45:EF:B5:44:37:41:55:56:27:2D:72:29:AE:F9:A6:28
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08C0416F9CB11EC829D94F5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
53:75:e0:12:bf:5c:39:fe:af:ee:9e:11:1f:3a:40:36:2d:aa:
1a:0d:41:f5:a0:82:10:7d:8d:a1:bd:e3:8c:e1:11:33:6b:a8:
03:b8:50:db:a1:52:ec:c6:61:69:e4:56:fd:09:78:3a:ac:99:
0c:be:e1:e7:52:46:8a:cb:81:a5:81:8e:02:c4:51:99:00:33:
c1:19:30:b3:1c:6d:24:7c:a8:18:1d:24:90:15:4b:93:b0:74:
af:8b:dd:a6:cc:4d:29:74:ba:d8:09:30:87:4f:ff:25:75:02:
94:7d:0e:41:6e:75:18:68:e5:69:04:5a:11:5a:30:08:a2:6e:
4b:9d:3f:34:9e:2e:b1:df:4d:bd:e7:38:b0:ef:b9:a7:c3:d2:
f4:a8:05:3e:fb:3b:f8:17:e9:1c:8b:1d:a4:8c:72:81:cd:68:
8a:07:db:5d:b6:c0:15:8a:8d:15:c5:3a:22:fe:3e:9c:f5:f9:
d4:dd:df:f9:c1:7c:5b:1a:b6:20:64:08:9c:61:90:44:62:34:
45:2b:33:8d:1a:61:85:dd:f0:7d:b5:c7:38:2b:b5:21:2e:0e:
0a:c0:e8:08:20:11:c8:d4:6e:32:ec:e6:75:af:ce:aa:77:08:
43:7a:50:77:29:9c:6e:c4:7c:3e:3f:43:39:ff:af:a3:06:c8:
d0:5a:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org