Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D49F795E494011ECA9AB6E65D8A014CE.roa
File: D49F795E494011ECA9AB6E65D8A014CE.roa (raw, json)
Hash identifier: bXgs7+/S6n4BeOZHCsAaJpwNxcY6HOsMGfNt5R1FhMg=
Subject key identifier: EF:F8:39:10:D3:5D:B9:83:5B:DD:B5:58:A0:F3:6F:24:4A:A9:60:5B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 055A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D49F795E494011ECA9AB6E65D8A014CE.roa
Signing time: Fri 19 Nov 2021 13:58:54 +0000
ROA not before: Fri 19 Nov 2021 13:58:50 +0000
ROA not after: Sat 19 Nov 2022 13:58:50 +0000
asID: 53340
IP address blocks: 102.129.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 19 13:58:50 2021 GMT
Not After : Nov 19 13:58:50 2022 GMT
Subject: CN=6197ad9e-b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:7f:7e:97:9a:20:1f:bf:ab:4a:f4:35:6b:
88:42:c9:33:58:48:5d:0f:4a:50:fa:dc:a7:17:70:
43:ea:90:ae:38:a1:bc:4b:b5:c0:05:a5:3a:ea:30:
3e:c7:76:e4:1a:29:d3:ed:a9:b5:09:78:df:75:79:
07:5d:bd:bb:f2:cd:f2:e9:9d:09:e2:97:bc:f0:5a:
61:d3:65:13:39:22:12:de:34:7b:d8:3a:c9:ef:53:
cc:eb:b8:f2:9a:8a:69:d8:90:06:06:33:eb:15:6f:
a5:63:2f:e3:34:69:34:8d:b2:a5:8b:04:96:59:69:
5a:47:8c:52:ba:52:69:af:73:29:0b:ad:06:a1:ec:
28:8f:04:dc:52:c4:b8:64:5c:58:d9:d4:88:f6:7a:
db:97:cd:78:d0:b9:16:e7:e4:34:5b:75:23:ad:e4:
7f:23:cf:e5:3b:17:6d:75:23:c4:f1:4d:6a:13:cd:
47:af:2e:4c:72:84:80:5d:d5:6f:7c:5e:fb:e4:a2:
2d:b6:fc:c1:00:37:2a:17:98:de:57:7e:e9:1c:f4:
8a:07:0d:6a:62:4b:ee:a5:99:ce:44:a3:86:cd:7f:
4b:5e:01:bf:91:0f:d6:11:e3:5b:69:c8:c4:90:6c:
26:78:80:a2:9a:6a:8e:ec:51:10:af:1b:69:b2:c8:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:39:10:D3:5D:B9:83:5B:DD:B5:58:A0:F3:6F:24:4A:A9:60:5B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D49F795E494011ECA9AB6E65D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:61:f6:96:d9:15:d8:4d:01:08:e6:e0:1f:cb:da:a7:09:b9:
fd:94:14:c5:b3:08:51:ce:0f:c2:d2:63:0f:c5:5c:40:7a:fb:
9a:96:2d:91:05:b6:8f:df:bf:c2:37:fe:ec:81:85:88:b8:ec:
0e:a9:45:ac:f1:ea:be:25:ab:7f:af:65:41:8c:14:3b:ae:8e:
89:74:61:e3:5d:0c:2a:07:49:d3:01:87:a0:a1:2c:28:b2:cd:
aa:e7:72:14:cf:34:b8:4b:6a:13:a0:40:45:a4:e9:e6:27:fc:
3a:1f:48:11:be:07:60:25:5a:04:8e:81:31:20:71:da:6e:ac:
87:eb:08:d5:1c:2c:e9:79:a3:bd:45:87:b2:b3:94:a2:d6:4b:
f8:77:5d:90:46:0d:a0:4e:d3:b7:9f:5a:b2:0c:45:fd:dd:4a:
f1:f6:8f:db:7b:b9:59:be:57:9b:37:52:e8:a2:2f:c0:da:bc:
5a:f9:40:d4:34:90:45:48:c4:0b:00:92:e0:7c:ff:8a:0a:54:
f8:33:e7:72:e6:f4:57:dd:e3:ba:da:59:82:90:0c:0a:fe:d3:
2e:75:16:66:c1:84:52:19:40:7a:4d:3a:f6:2c:0d:fd:cc:e5:
b6:3b:fc:a0:f8:2e:fd:13:d0:ca:26:d9:3e:e3:f0:ab:70:d1:
d0:d6:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org