Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDF44EC6DE0011ED986D77FF2F6D8C1D.roa
File: CDF44EC6DE0011ED986D77FF2F6D8C1D.roa (raw, json)
Hash identifier: IXHD+1HqjW9EaBvUfPEg5VLdhwQ5OTKAb5w2hPCo2Wc=
Subject key identifier: 68:8F:56:3D:1B:BA:B4:A1:97:EC:17:06:CA:DC:7F:C0:93:BA:64:53
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B19
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDF44EC6DE0011ED986D77FF2F6D8C1D.roa
Signing time: Tue 18 Apr 2023 15:50:56 +0000
ROA not before: Tue 18 Apr 2023 15:50:50 +0000
ROA not after: Thu 18 Apr 2024 15:50:50 +0000
asID: 996
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 18 15:50:50 2023 GMT
Not After : Apr 18 15:50:50 2024 GMT
Subject: CN=643ebc60-88e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:3a:0a:10:a9:9f:b2:74:82:1c:9e:2b:f1:
9a:22:f7:8f:b0:f9:66:96:5b:fa:e7:70:fc:72:8d:
ac:68:39:71:f1:86:48:8d:53:f0:5d:f2:82:4d:24:
da:9c:e7:f8:f2:1e:a1:3e:d1:71:8d:2a:e1:7f:f6:
d7:6f:fa:60:ac:5a:1f:ea:fb:b1:95:4b:56:ed:9d:
57:c8:b0:11:6a:bd:2d:93:c0:c3:52:73:1d:8a:fa:
93:a1:71:d9:8c:f9:43:56:49:ed:95:3e:2d:a6:82:
01:11:ff:6e:b4:2b:cb:7e:8d:20:49:11:d1:c4:b1:
56:36:5c:08:0e:ea:21:86:33:cd:12:f6:ff:9b:9d:
b0:48:1d:b2:b2:ea:61:1d:12:15:1e:5e:c1:23:bd:
13:24:a1:11:0e:25:13:b9:18:da:65:2a:c3:95:17:
88:7f:4b:00:33:67:9b:a1:a9:cf:c9:b9:a0:75:7e:
b0:e5:2b:f0:f3:11:c5:54:50:6d:6f:47:dd:27:69:
a9:3d:5e:13:de:71:ff:a6:c5:2d:e6:31:6c:49:03:
12:49:f6:a5:2f:ce:8f:03:48:52:b2:0e:96:e1:14:
21:34:eb:02:3a:7f:75:e9:56:b1:fb:62:b2:c1:68:
38:e6:9a:3d:93:1c:3f:21:b9:2b:e3:62:dd:fc:27:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:56:3D:1B:BA:B4:A1:97:EC:17:06:CA:DC:7F:C0:93:BA:64:53
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CDF44EC6DE0011ED986D77FF2F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e7:ac:1a:dc:61:a7:12:2d:ff:d6:8d:2e:7c:02:c5:d8:ac:
51:db:8c:de:8a:28:a1:d8:9b:b5:db:ab:c7:a1:f7:09:5d:44:
50:d7:df:b3:ea:b6:95:47:cf:aa:ea:42:4f:20:17:82:d2:36:
37:70:03:c8:68:b4:bf:6e:e6:2c:bd:dc:3f:63:42:49:2e:92:
0e:90:4e:70:40:ab:e6:a5:4e:54:99:7b:31:9c:63:f8:20:d6:
be:c3:25:0e:a3:31:40:0a:a0:65:08:c3:fd:43:17:17:35:c2:
d4:e0:fd:97:b4:56:ac:01:a7:6d:5a:6e:ee:79:7d:2e:ac:f9:
22:78:f1:15:d0:3a:60:27:cd:b2:93:1d:54:df:f7:81:22:f7:
6d:23:22:47:23:32:54:dd:02:a6:fa:ec:3a:5d:a3:6a:0d:cb:
44:d2:68:4f:ad:6a:f9:f5:16:0c:96:5b:41:22:af:c7:07:f9:
cc:4c:01:5a:79:7b:83:8c:2a:fe:c6:36:88:71:25:6c:25:73:
3c:95:91:bb:e0:7f:b4:a5:b2:6a:53:3c:2a:74:b4:58:ac:d4:
30:09:f3:32:e3:f1:1f:61:fb:fe:b1:c6:43:69:cf:db:76:15:
91:e7:48:08:4e:42:62:3b:fc:e6:30:3c:2c:29:29:9d:ab:25:
18:e9:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org