Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A52369F41C4211EC8A95AF0FD8A014CE.roa
File: A52369F41C4211EC8A95AF0FD8A014CE.roa (raw, json)
Hash identifier: pxlq6OSahx+gbjPek9O1f2NfFyb/ljyROp4wF6NdcHs=
Subject key identifier: A4:EB:FE:3E:C2:7B:09:CB:1D:0F:59:64:12:A0:F4:3D:82:77:43:41
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04F5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A52369F41C4211EC8A95AF0FD8A014CE.roa
Signing time: Thu 23 Sep 2021 07:48:31 +0000
ROA not before: Thu 23 Sep 2021 07:48:27 +0000
ROA not after: Sat 23 Sep 2023 07:48:27 +0000
asID: 23470
IP address blocks: 102.129.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 23 07:48:27 2021 GMT
Not After : Sep 23 07:48:27 2023 GMT
Subject: CN=614c314f-e00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:60:0c:05:fe:e8:85:89:d0:0e:b9:82:24:
a4:d9:cc:d4:24:d6:c7:6f:e2:89:60:59:30:f4:2f:
0c:f4:99:f3:fb:f5:b9:4b:6f:29:89:49:2e:86:99:
23:4d:58:eb:2f:73:bf:ce:03:8e:db:cd:9c:c9:6d:
6b:a8:e2:9b:94:ae:70:47:55:59:0c:22:14:4a:1f:
ed:fd:4d:17:96:3c:51:2a:74:e5:0d:a9:24:ca:75:
51:2e:d3:50:56:d9:b6:8c:b7:7d:30:4f:80:47:a2:
85:db:4d:74:53:06:03:4d:6f:88:14:7d:43:df:0f:
ef:60:6a:d6:f5:34:53:6b:71:ff:6d:59:65:36:d9:
2e:32:53:fb:ea:90:75:86:5f:45:d6:fe:99:ee:56:
0c:cf:f8:51:66:e6:14:d3:e1:74:98:42:12:2b:54:
9a:cf:6f:46:88:28:10:e8:6f:cc:f2:69:30:a8:98:
2a:e0:61:d9:4b:57:fa:f0:01:5c:74:51:75:bd:6e:
2d:cd:3e:7c:d1:6c:06:c3:62:52:eb:44:04:58:b7:
a0:97:48:b4:8f:a5:17:d0:33:11:df:40:12:d4:ec:
ca:02:01:48:bf:b1:59:11:1f:91:35:9a:20:3b:ad:
64:d8:46:62:e0:c4:bb:da:12:b1:70:3e:3a:51:67:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:FE:3E:C2:7B:09:CB:1D:0F:59:64:12:A0:F4:3D:82:77:43:41
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A52369F41C4211EC8A95AF0FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:21:0c:cf:f3:7d:35:56:ee:08:75:f5:6f:a0:1e:ad:90:97:
b7:18:e4:df:06:46:26:69:67:7e:20:10:7a:5a:d5:ee:5e:83:
52:cf:e6:72:0c:2c:86:3a:6b:76:19:68:b3:df:ed:b7:e0:0e:
9d:4b:f1:da:84:b6:ff:87:18:05:ff:04:80:94:c8:dc:62:18:
79:ad:f2:52:a5:0d:3c:ba:77:8b:59:fd:51:79:91:f5:3c:f7:
53:47:0a:e4:17:e0:e7:04:9b:aa:88:8a:a6:81:84:7a:67:62:
ab:04:ff:48:38:9c:5a:c1:79:b5:21:32:f0:96:72:7f:c0:b8:
85:0f:8a:d6:a9:dc:54:03:7d:8b:bc:61:f8:6f:c7:59:80:12:
7f:44:bd:46:67:3e:0b:41:46:1e:0a:2b:e2:08:9f:34:6e:36:
ec:39:79:aa:f0:80:00:0e:65:d3:4f:8f:19:bb:c8:8f:d8:17:
6f:66:36:1a:14:1d:a7:07:ef:00:7a:17:cb:cc:e1:74:77:02:
ec:78:d5:d7:d7:d9:e9:37:3b:86:ec:ab:c2:b4:f9:b1:77:10:
3a:47:d8:1a:56:d9:d0:b6:d2:32:e9:69:94:0b:be:8a:83:28:
b1:85:05:ae:ce:d9:3f:60:1b:d6:de:b3:aa:de:b5:d6:44:89:
9c:36:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org