Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BAA0DEC823FE11ED9D521689F1222468.roa
File: BAA0DEC823FE11ED9D521689F1222468.roa (raw, json)
Hash identifier: /XchqeHpnD2exyVomQahMyM5127S78jugeDGHExXB+I=
Subject key identifier: 95:6A:6B:11:97:85:4A:4E:16:F9:52:CB:1F:DE:8F:9E:B4:9D:60:DD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 079A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BAA0DEC823FE11ED9D521689F1222468.roa
Signing time: Wed 24 Aug 2022 22:47:28 +0000
ROA not before: Wed 24 Aug 2022 22:47:24 +0000
ROA not after: Fri 25 Aug 2023 22:47:24 +0000
asID: 212238
IP address blocks: 102.129.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 22:47:24 2022 GMT
Not After : Aug 25 22:47:24 2023 GMT
Subject: CN=6306aa80-d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:7b:d9:b1:da:78:66:5c:3e:9c:0a:38:e6:
b6:d3:81:36:be:2d:dd:7e:3f:dc:8f:b2:1a:5e:0b:
90:a2:ed:83:73:b9:d3:bc:4e:c4:57:00:8b:c7:7c:
e2:87:b4:62:f9:05:5a:59:50:60:c4:6d:8e:b4:6d:
9d:32:aa:db:c6:4a:2d:73:fd:04:d1:e5:73:6f:86:
9b:9f:18:2f:6b:db:21:ff:b6:86:f6:48:48:e0:5b:
af:23:0b:63:5a:9a:e2:82:80:c3:f3:11:ba:1c:67:
11:db:e4:1a:d1:da:55:b8:5c:bc:b5:cc:29:d9:c2:
91:2e:5d:20:df:17:d2:cf:1c:4b:6b:6f:12:57:a3:
a7:74:78:1c:76:80:99:db:48:08:10:36:8b:9a:59:
63:02:61:2e:2a:d3:2d:10:b3:2a:b7:6a:4b:9d:f8:
09:46:de:7c:b7:9a:01:e8:21:21:7c:fc:07:ae:6d:
6b:1b:cb:b5:ea:46:8f:6c:6e:29:28:81:0e:ab:c5:
00:86:ee:05:c2:62:33:36:62:b4:58:77:c9:15:f5:
81:92:0b:c5:3b:07:17:54:11:31:33:fb:c4:70:da:
e4:38:69:83:14:d8:77:3c:7e:60:5c:6c:9a:8d:c4:
7d:11:1a:cf:7b:43:23:be:d8:12:e2:f2:79:d1:9c:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6A:6B:11:97:85:4A:4E:16:F9:52:CB:1F:DE:8F:9E:B4:9D:60:DD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BAA0DEC823FE11ED9D521689F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7d:df:4f:9a:34:bc:99:fe:58:5e:e9:22:ee:5a:39:e4:b0:
0d:b1:16:c0:54:68:44:db:ad:2f:64:a6:fb:b2:84:02:3d:7b:
38:09:6f:9d:3f:13:b1:73:9a:99:c3:2c:28:f6:21:46:a3:f8:
c4:96:58:b7:50:a2:8a:79:f2:45:62:0d:fd:ba:5e:7c:9c:21:
e7:b1:36:95:78:0a:08:4c:57:a7:e4:11:00:e5:e6:4f:48:1b:
25:b9:c1:8d:68:02:bf:cd:99:49:aa:22:94:67:ce:92:5f:9d:
3a:41:5e:63:db:79:90:c2:77:8f:97:f1:1f:f5:40:54:30:79:
c8:9b:ff:9b:9a:17:c2:35:5b:cb:dd:4c:32:53:5d:c8:f2:a3:
12:0c:34:d3:e8:8d:39:64:1a:22:b9:7a:e7:82:92:df:10:af:
19:36:ba:32:f7:f6:fc:cd:c7:20:46:ae:fb:c1:1c:cd:82:bb:
b7:a9:9f:89:e4:98:f5:6b:1a:57:3a:e0:25:1d:f7:12:34:4d:
61:93:d4:b3:55:7f:91:3e:45:f8:01:1a:05:db:13:3f:c3:87:
44:8b:66:85:58:3e:85:80:e4:ec:8b:a0:71:2d:2a:db:06:f4:
9f:f3:52:fe:99:fc:9a:18:8e:90:97:cf:c9:a8:e3:3a:35:0c:
d4:07:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 01:13:23 2023 by rpki-client on console-fra.rpki-client.org