Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7D4B242585E11EC8DC87BD65A40D577.roa
File: D7D4B242585E11EC8DC87BD65A40D577.roa (raw, json)
Hash identifier: oZkS5X9bjCOtLxGqmS/nbIT09WVqbEZBRz9yffP53xk=
Subject key identifier: 06:B0:21:25:7B:28:13:70:5B:7D:A5:56:CA:B0:FF:2F:8E:64:35:E8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0578
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7D4B242585E11EC8DC87BD65A40D577.roa
Signing time: Wed 08 Dec 2021 19:41:31 +0000
ROA not before: Wed 08 Dec 2021 19:41:26 +0000
ROA not after: Thu 08 Dec 2022 19:41:26 +0000
asID: 212238
IP address blocks: 102.129.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 8 19:41:26 2021 GMT
Not After : Dec 8 19:41:26 2022 GMT
Subject: CN=61b10a6b-d312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0e:09:a6:4c:56:ab:1f:d3:db:2c:1f:65:62:
56:e0:63:f2:c0:52:f4:3d:85:02:b6:03:a2:94:f8:
90:0f:65:dd:e5:4c:88:bf:d1:6d:20:58:db:ee:fa:
f4:7f:20:d0:79:e0:b6:e8:76:3b:96:8b:d1:56:30:
78:6b:06:26:cc:8a:22:93:b3:d7:25:86:2b:70:9a:
46:67:47:71:b0:cf:6c:f5:e5:89:6b:dd:25:3d:f9:
30:80:e0:57:5a:30:51:26:41:d7:e6:50:76:11:d5:
50:ce:d2:f3:50:8b:09:c9:80:f8:81:fd:69:71:d0:
a5:ea:a8:d4:1b:6f:a9:92:aa:7f:8d:dc:42:e9:bf:
97:3e:fc:4c:29:4e:80:6e:d6:3b:a3:ed:6a:61:ba:
d7:81:ff:32:9e:ec:c8:3e:af:0d:0b:ed:78:bd:4b:
53:32:c5:0c:1a:d1:27:4a:37:90:82:e7:15:fa:1b:
8e:67:4f:42:2e:97:a2:f5:07:e6:3c:5d:7e:70:57:
4f:dd:1a:40:47:15:5a:5c:11:14:e3:e7:aa:79:d0:
1f:eb:e5:9e:a7:f2:40:79:31:8a:52:a9:f4:31:60:
af:82:07:ca:b1:86:24:2a:16:ed:e5:a0:14:c5:a0:
fe:dc:11:8c:6e:f7:35:0b:59:b5:23:43:2c:f6:56:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B0:21:25:7B:28:13:70:5B:7D:A5:56:CA:B0:FF:2F:8E:64:35:E8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/D7D4B242585E11EC8DC87BD65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.227.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:61:e2:fa:c6:1f:c3:8b:e8:3b:5d:2b:4c:8a:e0:3b:57:5e:
ff:c1:28:17:32:d0:49:cf:62:e3:56:df:56:71:28:ea:be:bc:
6b:68:7e:18:0e:11:43:55:44:93:b8:cd:c3:f0:81:bc:0c:6d:
10:f0:ad:3c:5f:d2:6a:3a:6f:21:74:d3:92:42:13:23:00:8c:
50:79:3f:66:14:ff:f7:dd:3f:79:25:a5:77:2c:29:06:c7:1c:
a6:fa:ab:19:d8:21:63:93:7c:03:40:73:65:7c:eb:7e:54:a1:
3a:a2:d8:f4:4a:ef:f0:ad:e9:ea:b9:51:53:c0:fa:5f:e5:fc:
f4:f5:cb:eb:20:f9:e0:d1:e3:8d:cb:84:b6:f5:a6:d1:98:38:
9c:57:a0:d3:99:a0:1c:0d:cd:28:b6:e3:ad:49:f2:03:e4:f5:
52:4f:6a:00:6f:39:ed:4b:1f:ca:5f:f3:66:d5:fd:9a:69:80:
fc:a9:a0:98:97:bd:64:bc:d3:8e:3c:bc:b5:cf:48:39:d8:3b:
63:6b:a3:6f:41:11:a8:87:cc:20:e3:6b:03:24:32:1f:62:92:
b9:aa:a2:25:68:e2:21:a9:52:fe:b9:37:a6:59:c7:17:ad:2a:
68:5c:b8:ef:6d:23:a9:24:04:ac:b2:7e:a7:44:95:33:a8:e8:
f3:43:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org