Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1ED76DAE31611EB947C5F69F8AEA228.roa
File: B1ED76DAE31611EB947C5F69F8AEA228.roa (raw, json)
Hash identifier: 83AR2f1KARIq9bxAF3ASVKVfUnbBtWzA+UO/tlAcBHs=
Subject key identifier: 1A:57:C4:06:85:84:8F:16:65:7E:54:EE:AC:4F:E0:1A:A0:10:63:37
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0452
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1ED76DAE31611EB947C5F69F8AEA228.roa
Signing time: Mon 12 Jul 2021 13:40:18 +0000
ROA not before: Mon 12 Jul 2021 13:40:13 +0000
ROA not after: Tue 12 Jul 2022 13:40:13 +0000
asID: 46562
IP address blocks: 102.129.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106 (0x452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 12 13:40:13 2021 GMT
Not After : Jul 12 13:40:13 2022 GMT
Subject: CN=60ec4642-076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:00:48:41:59:bf:22:97:6d:d1:f3:93:af:
0d:73:41:26:e7:bf:4b:f4:85:a1:13:83:6a:bd:b7:
2a:eb:a3:35:51:33:5e:48:44:63:4f:e1:b5:f0:a8:
01:f3:aa:9a:b3:55:9f:74:71:44:32:15:0f:4d:eb:
23:e8:c1:e3:6c:68:f9:b1:60:1e:e2:cd:df:1f:cd:
57:ba:45:09:58:74:dd:22:25:99:06:8e:09:02:86:
69:26:b6:a6:7e:57:71:ef:e2:78:f7:b4:2e:24:f5:
20:b8:a1:4f:91:37:b5:22:b8:ac:b1:7b:d5:54:a0:
cc:1c:d3:bd:02:16:8a:58:30:89:60:f6:23:d8:41:
92:62:23:fd:22:e5:d9:fa:41:95:77:07:74:b8:1c:
7a:4d:f9:0e:87:ad:fe:f3:23:f4:e4:ae:6b:3d:ba:
63:e9:bb:b0:a1:8c:79:5c:9c:c6:20:4c:7c:1f:12:
cb:c1:46:71:e7:23:5e:59:d3:43:c7:67:ce:9d:42:
00:9f:12:7f:e3:b5:4a:9a:39:6d:5a:46:04:b1:e7:
63:27:5c:2d:9c:dd:2a:2c:a9:d2:78:2d:c0:89:1a:
6c:70:cc:54:17:70:e2:3a:f2:5e:e6:bc:87:71:51:
a0:07:61:19:3c:ff:8f:b1:8b:79:e4:4c:85:7a:9c:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:C4:06:85:84:8F:16:65:7E:54:EE:AC:4F:E0:1A:A0:10:63:37
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B1ED76DAE31611EB947C5F69F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.158.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8e:34:e4:ec:34:25:97:d7:a0:e3:bb:e2:8c:5b:74:1a:31:
fe:26:bb:b9:db:2d:8a:f4:d6:b0:d6:34:e8:d1:11:8a:ed:16:
86:32:f0:54:c4:10:ee:9a:4c:4d:da:b8:7d:fa:7e:f0:62:4d:
2e:8d:a5:db:9c:38:a2:f9:0a:2a:44:b6:a3:8b:b9:83:e9:c0:
79:a3:c8:8a:39:36:88:b9:73:ec:70:9a:29:dd:71:12:74:39:
d7:41:aa:a7:45:aa:b3:8d:98:d0:56:07:9d:33:c3:76:64:8d:
7a:6b:61:60:a5:6c:ca:85:5b:95:ba:d6:38:a9:e5:c2:67:06:
7f:6a:f8:f8:ba:c0:c4:6b:a7:be:f7:78:31:2a:37:32:82:93:
94:a4:bf:74:17:ac:1f:7c:3a:02:3a:c9:89:c7:aa:3e:07:9b:
de:c8:6f:9e:ea:65:ab:09:81:5f:a2:b7:76:21:28:c0:90:a2:
ac:43:a3:df:4d:98:99:e2:f3:ab:09:e8:d4:49:d6:2c:4a:bb:
75:83:b9:0e:42:bd:02:4c:a8:11:db:70:7a:5f:9c:fd:66:79:
a5:3d:5e:87:4a:84:75:59:b9:36:ff:13:5a:c4:26:bf:6d:fe:
95:f2:0a:24:ed:74:cf:22:46:2d:21:35:cd:aa:79:6b:ce:96:
79:ec:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org