Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
File: ADC23E08F9C511ECBE4034E3F1222468.roa (raw, json)
Hash identifier: vfP5S1Y0M5U0vULzDYJWVl/n6JJDl3QkGblSxUR87aU=
Subject key identifier: 1C:B7:45:02:1A:0B:09:1C:E7:6E:77:2C:0E:34:70:87:24:F7:20:51
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06DB
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
Signing time: Sat 02 Jul 2022 05:13:16 +0000
ROA not before: Sat 02 Jul 2022 05:13:12 +0000
ROA not after: Sun 02 Jul 2023 05:13:12 +0000
asID: 43350
IP address blocks: 102.129.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:13:12 2022 GMT
Not After : Jul 2 05:13:12 2023 GMT
Subject: CN=62bfd3ec-a130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:14:3a:5f:1b:bc:c2:aa:fe:bc:55:60:27:
2c:cf:9c:71:ae:fb:28:a2:e9:ad:cd:9d:be:7d:9d:
4c:96:f4:c7:ab:d9:72:6c:62:e1:77:dc:41:19:d7:
6a:07:64:61:cb:20:91:f8:94:70:5d:25:aa:cb:b1:
42:d9:e3:64:b3:89:08:0b:fa:91:b1:06:5a:82:0a:
cf:19:a7:01:c4:ca:0d:13:93:8a:23:1b:25:e4:d8:
21:e1:bb:d0:84:f4:66:4d:30:81:54:73:33:f9:a4:
18:3b:66:ae:01:48:f8:11:f1:c7:32:d4:93:ed:98:
e8:f0:dd:4f:00:c0:7d:00:32:ac:a0:22:27:5e:b6:
87:a6:2e:6c:b8:18:18:04:2f:6b:86:2c:a0:33:41:
5f:ae:9e:25:ed:6f:43:2e:42:ee:28:96:c5:2d:fd:
05:f2:2a:ed:a5:b6:04:8d:9b:c8:fb:f7:ee:36:88:
4a:dd:fe:f0:f5:6e:1a:d9:6d:6a:33:37:e4:72:fd:
f7:26:b8:de:14:06:15:c6:27:50:94:48:58:46:94:
4e:6c:61:3f:fd:f8:98:ad:b3:b9:f0:50:07:66:78:
4c:4b:4d:25:b1:9c:ea:6e:56:c0:ce:d1:47:60:f3:
6e:91:b5:24:e9:35:4a:2e:f5:dc:e7:a0:8b:97:a9:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:45:02:1A:0B:09:1C:E7:6E:77:2C:0E:34:70:87:24:F7:20:51
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/ADC23E08F9C511ECBE4034E3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d1:80:a5:f9:f1:d1:85:6a:53:af:78:fc:3b:b5:20:9a:d8:
c4:f4:c4:12:b3:8a:8d:61:7f:dd:81:82:b2:88:c3:13:ba:3b:
80:46:b8:86:8e:04:9c:ed:3e:94:17:fb:1b:7b:26:3a:4d:ff:
78:01:d9:53:b7:3d:cd:d4:65:b9:79:79:a8:7c:42:22:45:e9:
d1:4a:ac:69:6e:71:51:72:c2:31:03:d6:c4:46:fb:28:8b:4c:
37:25:de:0f:25:4d:ab:44:4f:4c:a3:84:0f:8b:e5:22:28:c2:
65:03:19:7d:d3:de:8f:03:f9:ef:f9:5a:e4:fe:3f:a9:c7:63:
bf:7f:f4:0b:ea:31:22:cc:5e:bf:48:14:bc:7e:7b:cc:84:a9:
01:80:04:11:d2:b3:b9:91:98:d9:fb:95:fb:e0:23:b5:f9:c6:
59:33:0c:9c:5a:4d:a7:fa:65:cc:52:e6:d8:02:56:8b:a9:31:
7e:9d:d0:0c:7f:61:22:09:0d:70:7e:89:03:de:35:14:ad:09:
34:a3:2d:49:a7:ad:72:fc:6c:47:ef:05:13:09:83:35:a9:f1:
3b:10:e6:14:80:70:17:27:dc:a8:79:c3:a5:be:8f:cb:61:54:
dc:3a:5b:cd:0c:ee:ee:a0:58:10:1a:04:df:f2:64:b3:04:4f:
ee:d8:60:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org