Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D164C4ACF9CA11EC9E26E8F2F1222468.roa
File: D164C4ACF9CA11EC9E26E8F2F1222468.roa (raw, json)
Hash identifier: ciOXlYjf57ywlqwdqudLXeVNB3sJsCpa53qSkn+QWfE=
Subject key identifier: 84:69:90:B8:29:DF:2B:82:E1:B6:CA:20:A0:73:74:F9:C7:B7:D9:5C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06E6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D164C4ACF9CA11EC9E26E8F2F1222468.roa
Signing time: Sat 02 Jul 2022 05:50:03 +0000
ROA not before: Sat 02 Jul 2022 05:50:00 +0000
ROA not after: Sun 02 Jul 2023 05:50:00 +0000
asID: 43676
IP address blocks: 102.129.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766 (0x6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:50:00 2022 GMT
Not After : Jul 2 05:50:00 2023 GMT
Subject: CN=62bfdc8b-555b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:54:c1:2f:f3:3c:28:bf:32:87:f1:b3:e7:
3d:3f:8a:d7:43:e7:82:ea:14:14:f5:eb:64:e0:23:
ef:e6:ad:da:47:5b:23:2a:a6:fa:aa:e9:5c:c4:86:
b7:34:66:bf:ff:d5:6a:5f:cc:d7:a5:d6:a5:fc:49:
06:46:76:41:1d:78:f9:a7:88:cf:6e:1a:0f:f0:41:
71:fe:c7:b9:9c:d4:7d:a2:1f:73:5a:27:dc:9d:e0:
4a:d8:62:1d:62:e3:f7:d8:39:a9:48:f2:bc:67:85:
c0:25:c2:73:fc:cb:cd:3a:b1:c0:d0:3e:e9:31:3a:
1a:7a:85:7e:36:56:bc:c1:00:05:49:84:bf:d1:e3:
a4:96:e7:5c:0a:18:73:1d:0a:ee:e6:03:14:d5:a9:
52:9a:72:3e:ff:ac:e8:69:40:fc:45:32:9a:5f:fb:
e3:ce:de:cf:ad:fd:e0:c1:3c:80:b2:0a:ed:6a:46:
ba:bb:bf:43:9a:bd:d5:e1:64:e4:91:97:53:81:a3:
d8:b0:05:f7:47:9a:07:d7:87:f4:89:ed:0a:9f:c3:
9b:8f:df:8b:f9:ca:ae:3f:32:29:a5:5b:13:1f:7c:
5b:74:5b:15:36:82:43:98:81:02:1a:58:8f:54:a4:
fa:7c:bc:f0:7d:70:19:a4:4f:a5:55:3e:90:8f:16:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:90:B8:29:DF:2B:82:E1:B6:CA:20:A0:73:74:F9:C7:B7:D9:5C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D164C4ACF9CA11EC9E26E8F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.167.0/24
Signature Algorithm: sha256WithRSAEncryption
da:52:32:88:ac:bc:62:ed:43:26:50:9d:f4:90:62:7c:4b:c9:
00:3a:4e:aa:05:9b:8c:c1:22:f4:c5:91:90:26:5f:08:a3:3b:
48:63:f8:c1:5b:42:da:cf:ae:d4:52:26:8b:20:aa:bd:23:fb:
31:37:ab:c5:d3:11:5f:d8:9c:36:90:1a:2a:44:99:a3:4d:71:
b3:9c:fa:62:75:64:d3:36:b6:92:7d:bd:be:6e:b7:d0:ff:44:
d8:be:13:26:77:3e:87:76:02:fc:e9:6b:69:35:5a:5f:24:03:
c4:32:8d:ef:b4:bf:98:e2:89:08:bc:06:16:3f:4d:38:4d:88:
32:40:08:48:28:8a:0f:4d:eb:dd:d9:dd:78:fb:23:32:15:05:
38:6f:a7:a9:ae:00:9b:2f:d5:0b:51:84:b4:2d:ba:fb:fd:8e:
d6:3d:1e:c0:93:f1:d4:24:cc:44:99:2f:89:a7:b0:04:0f:e5:
c1:8f:58:e1:d9:2f:f3:4e:2c:bb:69:fa:0c:77:16:c8:54:ab:
8c:d5:5f:b4:b6:b3:ea:7e:ff:b0:07:95:a0:4f:06:66:6f:60:
64:2b:33:50:2d:23:c6:fc:09:c9:75:97:e4:ec:2a:64:e3:17:
1c:70:54:ab:e4:7f:07:43:ee:d7:52:b4:62:b9:3b:65:f7:e4:
a1:03:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org