Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD6E4D66F77511EC99AF9B89F1222468.roa
File: CD6E4D66F77511EC99AF9B89F1222468.roa (raw, json)
Hash identifier: wzMVrMSnbxV5aUqssLqkNxbB9AMzjnbT9RyfHfndtVs=
Subject key identifier: E3:F2:1F:B0:D7:0A:F3:D1:5D:F2:86:AD:36:B8:AE:21:72:D2:2B:56
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06C4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD6E4D66F77511EC99AF9B89F1222468.roa
Signing time: Wed 29 Jun 2022 06:36:27 +0000
ROA not before: Wed 29 Jun 2022 06:36:21 +0000
ROA not after: Thu 29 Jun 2023 06:36:21 +0000
asID: 61317
IP address blocks: 102.129.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 29 06:36:21 2022 GMT
Not After : Jun 29 06:36:21 2023 GMT
Subject: CN=62bbf2eb-6e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3e:61:28:4b:27:db:be:77:b8:28:28:57:8b:
90:2d:3d:b5:50:88:cc:4f:ef:6f:51:6e:1c:90:1a:
22:23:6c:1a:15:3b:54:c4:c9:41:ee:41:9d:61:d5:
30:5f:48:17:70:92:1d:d2:22:d9:91:5b:7e:a5:8d:
2c:51:c3:f9:2d:2b:52:98:70:8c:52:9c:73:c9:d1:
36:8f:5b:16:a3:a6:b0:a8:ec:e9:12:14:ff:77:50:
55:d2:b2:ed:1a:9c:19:fb:12:f4:05:fa:29:ee:3c:
dd:f8:7e:23:3c:47:14:f5:65:25:59:4a:e7:9c:39:
74:57:1d:e0:a2:a9:f5:f8:fb:19:8f:dc:58:2a:82:
01:23:3a:eb:54:f9:84:2d:16:17:10:9f:55:7e:8b:
3a:de:52:7f:a1:95:f6:27:7c:a4:26:77:07:bf:2c:
dd:6d:f2:3a:df:f5:c7:e5:68:82:09:1d:bf:5e:44:
f3:37:eb:ed:d1:53:57:1d:e7:85:d1:33:20:63:ab:
3e:91:4c:a4:f6:49:71:b8:3c:1f:7a:10:91:51:33:
b3:bd:ae:22:05:a3:f1:a5:68:7d:ee:b3:0d:25:97:
de:26:f5:b3:39:26:75:3b:f0:10:b6:9a:62:64:83:
4a:a4:86:74:84:08:31:59:97:d8:53:62:a3:13:4d:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:1F:B0:D7:0A:F3:D1:5D:F2:86:AD:36:B8:AE:21:72:D2:2B:56
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CD6E4D66F77511EC99AF9B89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c3:bc:ce:90:b9:0b:f4:73:2a:68:be:9e:ba:91:c6:38:d1:
53:57:c2:f2:f9:9f:0b:f2:ed:ee:2e:c4:a5:fe:28:1e:dc:d5:
b6:ec:43:9f:31:13:e1:76:69:da:90:df:b9:0a:0c:f0:13:5d:
08:96:38:94:b6:54:f2:1e:21:71:ee:87:8a:4b:3a:df:d6:fb:
15:a4:9f:2c:1e:05:d3:75:8e:50:dd:f3:b7:8b:d1:26:ed:f2:
d4:3c:e6:20:71:23:66:86:c2:61:0f:4c:cc:78:50:c2:e7:c2:
f7:a0:64:84:73:74:33:22:b1:43:00:8b:21:7f:ec:06:00:92:
4e:cd:0e:ee:2a:ed:28:a2:d2:8e:6e:c6:e3:d2:09:b1:50:c8:
3d:84:cf:3c:37:e1:c2:5e:1a:be:8b:72:52:26:86:b6:2d:1e:
35:c4:02:83:51:44:fc:af:7b:5e:35:30:82:17:0d:6e:92:45:
d0:29:a4:1c:c5:19:1a:52:f4:9f:1a:7b:82:3b:bc:53:22:1d:
e9:dd:90:50:ad:81:78:ac:b0:9c:3a:48:05:a6:8e:38:f9:2f:
28:de:87:f3:da:08:1a:a5:f4:c7:5b:35:df:f7:e3:36:40:c5:
e2:8a:75:cb:ce:54:c8:53:27:84:92:92:47:b7:4c:a1:09:a1:
31:85:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org