Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C73B796EFE5911ED83CF67844AD9E6FC.roa
File: C73B796EFE5911ED83CF67844AD9E6FC.roa (raw, json)
Hash identifier: DQmvYTyfkFeq62Q/lvFKDI33xsz0FZ4pyUdWn58Jrew=
Subject key identifier: 09:4E:B3:DD:38:A3:F3:86:F3:9D:3B:F0:35:2D:BC:F8:61:E4:9B:D3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0BA9
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C73B796EFE5911ED83CF67844AD9E6FC.roa
Signing time: Mon 29 May 2023 19:48:27 +0000
ROA not before: Mon 29 May 2023 19:48:21 +0000
ROA not after: Wed 29 May 2024 19:48:21 +0000
asID: 200482
IP address blocks: 102.129.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 29 19:48:21 2023 GMT
Not After : May 29 19:48:21 2024 GMT
Subject: CN=6475018b-0a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:fd:d6:fe:84:50:8a:c5:d9:96:4d:6a:b5:
37:26:b8:c3:17:94:1f:20:80:05:67:23:60:57:aa:
a1:9a:ef:01:27:10:e3:60:84:d2:5d:e2:8c:0a:e5:
a2:6f:8e:98:65:88:68:83:e0:9b:e2:ae:6c:68:7e:
4f:4c:f5:3f:2f:71:f8:35:47:37:66:fd:fd:93:5c:
88:61:80:a7:ea:50:04:56:02:d0:51:87:79:01:9e:
1b:65:70:f3:0e:3f:27:85:f0:1c:52:ff:57:f2:09:
b2:7f:2a:77:f6:72:05:1a:2b:c7:b0:b0:85:a2:44:
5e:68:a9:62:df:f0:fa:ff:19:0c:83:56:e3:4c:30:
60:2b:64:a2:98:75:54:fa:e5:a9:0d:ac:c4:05:eb:
ef:4c:63:d7:11:b9:4e:80:e9:52:ce:47:10:49:a6:
96:69:2a:c5:35:5b:eb:a3:24:54:82:87:0f:a4:99:
00:bd:b9:8a:79:75:29:0e:9a:46:2c:be:fe:9a:36:
dc:fb:c4:a8:0c:59:6a:37:b6:74:89:a0:7d:79:8e:
de:3a:75:87:ac:b0:a6:2b:53:30:6e:c0:cb:d9:39:
0a:e9:a8:d3:14:19:67:e1:b7:3e:0f:82:e3:ef:6f:
9d:13:fa:af:d4:84:a5:b5:6b:4d:1c:c4:9d:37:db:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4E:B3:DD:38:A3:F3:86:F3:9D:3B:F0:35:2D:BC:F8:61:E4:9B:D3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C73B796EFE5911ED83CF67844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4d:03:67:76:18:87:58:b6:96:39:c2:3a:c0:e9:df:d3:5b:
d8:96:64:ee:a3:bd:4f:ec:20:16:b3:40:d2:56:e6:8f:aa:87:
ff:f3:71:e2:55:56:d5:d5:f4:d8:3a:ae:79:95:7f:73:69:6a:
17:55:f1:73:62:d8:51:ed:e7:3b:b1:f7:ec:5b:71:bf:02:63:
a3:1e:80:78:a7:28:89:5b:a9:70:18:2f:a1:dc:fc:8d:ec:6b:
dd:d8:47:eb:db:89:73:ae:bb:46:ce:24:d3:ae:69:de:82:97:
b1:93:00:29:ab:a9:b6:e1:95:55:ba:7c:9d:a9:a8:f8:f7:9e:
ba:92:7a:3b:4d:b9:7e:fc:54:01:81:06:84:13:bc:93:31:59:
5d:bb:fb:be:ed:70:2e:f2:c2:87:8f:38:22:65:d1:ac:a9:4b:
71:40:88:53:3b:f9:02:8b:7f:49:9b:74:a2:fd:ae:6a:be:2f:
08:65:42:7f:d6:4c:b1:d0:62:c9:4e:4f:10:e6:a1:0c:6e:24:
fc:2a:a3:1e:d6:00:da:43:44:2d:d4:6e:50:bc:0c:06:ed:9d:
46:09:b5:1f:00:f5:91:d6:64:c7:37:da:6f:dc:80:dc:1b:cd:
b1:7a:24:8f:b1:e4:83:c9:7f:a7:18:c8:34:c1:37:50:8c:fd:
23:d6:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org