Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88803F049FF11EDB72D9D96F1222468.roa
File: C88803F049FF11EDB72D9D96F1222468.roa (raw, json)
Hash identifier: VREGPyLWoi/y1QTWU2gumLK7hJ3LWBF88UiTsPebH8A=
Subject key identifier: 4D:6A:0A:31:D8:1B:1D:63:09:94:04:08:83:62:CC:4B:BF:3F:0F:2F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 084E
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88803F049FF11EDB72D9D96F1222468.roa
Signing time: Wed 12 Oct 2022 07:30:45 +0000
ROA not before: Wed 12 Oct 2022 07:30:41 +0000
ROA not after: Thu 12 Oct 2023 07:30:41 +0000
asID: 207459
IP address blocks: 102.129.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 12 07:30:41 2022 GMT
Not After : Oct 12 07:30:41 2023 GMT
Subject: CN=63466d25-c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:3b:b4:2a:88:8e:5e:b4:91:77:cd:75:5e:
90:e3:1f:93:3d:65:d5:8c:b2:e8:6a:0f:db:e7:44:
af:4d:dd:d6:c1:6f:ac:8d:f1:23:6e:24:5d:dc:67:
0e:8d:fb:fa:b1:f2:91:d2:02:58:2a:02:ea:bd:a3:
5d:f1:83:b3:dc:47:5c:7a:cf:76:95:b7:a1:bb:10:
82:76:c2:4b:d0:eb:af:2d:d0:82:06:6b:f7:4c:ad:
d7:a6:ed:3e:e7:d3:18:ff:49:1f:d6:39:e9:7d:ce:
ef:7e:2d:95:ee:fe:07:a0:e9:b6:1e:93:a4:54:9e:
93:ef:d2:4f:11:71:fd:c0:2e:69:e4:b9:87:31:4c:
90:aa:bc:e0:03:94:64:0b:3c:6f:5e:06:3d:3d:1a:
41:fa:7e:7f:ee:c2:5a:d2:e6:fa:d0:a9:a3:34:fb:
b6:c9:ec:4a:c8:47:64:51:56:d5:cb:8e:4f:b3:8d:
1c:da:e1:32:17:8d:13:79:3b:dc:8c:63:95:af:c1:
6e:e6:68:88:9b:fe:3a:bf:00:5a:18:78:fa:9b:de:
27:37:3f:cc:76:09:54:65:bf:af:8d:f1:e8:33:2f:
5a:a9:63:84:6f:03:03:04:32:46:75:c2:4d:46:06:
fb:4e:46:40:75:3f:19:4f:56:75:49:23:a3:85:95:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:0A:31:D8:1B:1D:63:09:94:04:08:83:62:CC:4B:BF:3F:0F:2F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C88803F049FF11EDB72D9D96F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.149.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7c:97:c6:f7:01:8c:9a:fd:f7:9f:0d:7a:e7:61:66:98:5b:
92:9e:11:9c:6f:1a:81:52:d2:9b:37:c1:b8:83:a6:cd:20:fa:
41:c5:45:7b:50:8f:3b:25:d1:b0:61:88:c3:a0:e8:e2:df:54:
9d:50:00:62:27:37:7f:71:54:d9:00:04:10:69:a9:0c:8a:db:
1f:b7:ee:3c:dc:8a:55:8e:67:6e:1c:a9:b4:4e:03:4e:f2:32:
90:1b:1e:b9:bd:12:43:3d:75:3d:ce:86:09:bc:2e:aa:8a:a5:
d3:46:fb:20:fa:04:14:b5:0c:31:d1:1d:86:3d:b2:1f:18:b3:
37:11:e1:4b:83:5c:4d:bf:bd:a9:86:46:ed:83:c9:13:15:4c:
96:f2:31:8a:3d:5a:eb:43:dd:cd:b0:45:c6:60:22:c4:66:3e:
29:5a:b6:1a:59:8a:26:c0:55:60:ac:78:a1:26:f4:5c:3d:b7:
54:e3:b0:98:fa:d5:86:8d:25:0d:c3:fb:7a:4e:e3:0d:6a:a8:
04:bb:42:18:4c:a8:be:ec:0f:6f:dc:d4:9c:3b:12:dc:24:7e:
26:00:68:24:c3:54:bc:e9:b6:36:fb:48:47:1d:91:77:f9:6c:
da:91:d1:17:3c:31:2f:c3:b7:a7:bb:89:1f:94:07:16:5d:21:
d1:86:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org