Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5EBCE0CA71011ED90E1FEAEF1222468.roa
File: B5EBCE0CA71011ED90E1FEAEF1222468.roa (raw, json)
Hash identifier: 8dU9QDPPzmD4P4g53KXI0/GISyDZ23jDuxo+0qLl/nM=
Subject key identifier: 20:2E:6E:B5:10:63:8A:9E:EE:CE:00:DA:18:75:F9:57:BD:56:15:9C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A0D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5EBCE0CA71011ED90E1FEAEF1222468.roa
Signing time: Tue 07 Feb 2023 17:56:13 +0000
ROA not before: Tue 07 Feb 2023 17:56:09 +0000
ROA not after: Wed 07 Feb 2024 17:56:09 +0000
asID: 211373
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 7 17:56:09 2023 GMT
Not After : Feb 7 17:56:09 2024 GMT
Subject: CN=63e290bd-8948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:1e:75:b5:29:56:f1:d5:6a:be:9a:e5:eb:
50:05:42:e9:05:a5:c6:dd:2c:e8:6b:71:ca:66:40:
66:53:f8:4c:e8:6e:ed:6e:9e:3a:48:26:6b:41:fa:
10:75:85:ff:f9:75:c8:d5:02:7a:d6:7f:a2:67:7c:
a9:3c:81:c5:82:9c:dc:c1:30:5c:bc:c8:94:6f:74:
7b:1d:87:54:7f:69:11:0d:b6:4e:24:bc:09:ec:2b:
f2:77:8d:89:b0:17:c3:95:0c:61:21:a6:22:7b:ee:
81:54:91:68:2a:5c:1e:0e:23:f4:d2:f7:41:d3:90:
53:83:cc:c2:ac:55:50:4d:34:88:3e:b6:74:55:7e:
1e:54:70:76:f5:37:d3:9f:1f:5a:7c:87:98:db:0a:
3a:5b:1b:bb:93:76:2e:df:69:4d:da:3c:14:b7:79:
a9:64:1e:0f:fe:f6:3c:10:fd:e2:53:1e:e7:f1:7b:
d3:83:33:06:a0:f4:43:e9:10:86:26:a0:a8:db:f1:
7b:e1:e4:02:47:2c:4a:b9:f9:6c:eb:82:42:6d:56:
0f:15:79:2d:1a:36:b4:4b:cb:3a:7e:73:7f:87:8d:
a9:b6:9d:94:5a:eb:f1:81:d7:53:b3:fa:e1:0e:04:
a3:9f:59:7c:67:1b:cd:a5:37:30:23:d3:92:a8:d7:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:6E:B5:10:63:8A:9E:EE:CE:00:DA:18:75:F9:57:BD:56:15:9C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B5EBCE0CA71011ED90E1FEAEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b0:47:a7:6e:45:20:f8:d1:f9:9d:c4:52:dd:0e:70:9d:f4:
6f:ba:46:86:0b:3d:a4:2c:1a:b2:30:3c:86:e3:e9:48:c4:fd:
a7:df:60:eb:1b:46:c8:d9:3e:f4:db:57:a9:90:c5:1d:1c:8d:
35:d7:3e:6d:41:ab:ce:00:c0:43:b0:fe:35:3a:c1:e0:3a:7b:
e1:45:ee:c3:8a:8f:35:51:5e:e5:1a:c5:c0:29:ae:6d:9e:36:
a4:e0:4f:39:2f:90:98:b5:4b:71:6b:de:13:0f:37:2d:43:21:
4e:3a:24:86:e2:48:5e:78:3e:97:48:5f:e7:23:6d:0b:b2:f2:
10:8b:6c:65:76:1a:20:61:59:0b:83:21:c3:7c:ab:71:23:f4:
63:f5:ed:fa:27:13:2f:9f:43:4f:1d:34:e0:35:72:49:59:03:
b3:a8:08:17:a3:52:e9:7f:02:56:0c:3b:41:53:2f:b6:41:52:
1c:95:d9:d6:f8:b2:0d:0b:4c:0c:2a:5a:0f:b9:9f:07:ee:04:
d5:d3:a8:c6:68:ed:60:23:38:2a:09:f5:27:04:19:f7:b9:9e:
34:de:08:b1:9a:e3:85:9f:86:be:f3:51:5e:8d:61:db:a5:63:
d1:ad:a8:77:22:6c:c7:3c:6f:77:18:82:33:f1:ad:48:ce:1e:
8c:82:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org