Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E09C0C468DFE11EDBC59E9E2F1222468.roa
File: E09C0C468DFE11EDBC59E9E2F1222468.roa (raw, json)
Hash identifier: O/4xMTQZDmh5BnARVJvh0y2Wmzk6tah5x3kCWkmLwL0=
Subject key identifier: 50:7B:79:1B:7D:56:51:31:1B:E0:3B:43:5D:99:B6:49:EE:E7:14:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 09BA
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E09C0C468DFE11EDBC59E9E2F1222468.roa
Signing time: Fri 06 Jan 2023 20:15:35 +0000
ROA not before: Fri 06 Jan 2023 20:15:31 +0000
ROA not after: Sat 06 Jan 2024 20:15:31 +0000
asID: 7018
IP address blocks: 102.129.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 6 20:15:31 2023 GMT
Not After : Jan 6 20:15:31 2024 GMT
Subject: CN=63b88167-4c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:38:19:99:bb:2a:02:f2:8e:6e:8f:6f:15:
a6:15:69:47:d6:51:3d:b8:21:62:0b:7d:ad:88:61:
b7:ca:20:f3:7d:67:71:2a:90:a4:52:2c:a2:15:46:
04:3d:28:ef:20:29:b4:47:9d:a5:fb:3c:88:f9:d3:
72:b7:b2:4f:67:30:76:8a:fd:68:15:b6:74:a5:39:
65:30:5a:77:5f:71:a2:2b:17:fd:82:57:6a:f4:89:
cc:25:b1:d1:fa:4f:57:f5:b5:9e:70:27:42:00:bd:
c2:2e:99:87:31:82:46:5c:c6:69:33:1d:28:31:34:
0c:7c:6d:07:04:82:0c:7a:cf:17:e5:31:ce:96:77:
a5:4e:e3:3a:82:da:db:ad:2e:7f:69:a8:70:1c:84:
67:fa:dd:e0:84:c4:e9:c5:6e:fd:ff:96:c1:de:99:
70:35:00:8b:8d:6c:54:41:50:66:d4:e4:ee:34:0b:
cf:ec:f6:73:2e:5f:ac:09:ce:1d:d4:4b:8c:53:af:
28:72:66:ab:70:3f:e5:0b:7d:da:f7:54:fa:79:0b:
85:26:ec:8f:09:9a:7e:5d:75:4a:30:01:03:e1:f5:
2c:36:11:cf:35:81:68:5f:0d:a2:87:e8:6f:1c:c0:
9d:40:c2:a2:8c:78:6e:51:a9:4b:2a:cd:8d:ce:bf:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:79:1B:7D:56:51:31:1B:E0:3B:43:5D:99:B6:49:EE:E7:14:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E09C0C468DFE11EDBC59E9E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:98:d8:54:8d:23:a6:b3:87:50:01:9b:02:34:ed:cd:0d:97:
db:47:15:ce:96:46:94:46:b0:18:74:43:ae:f6:1f:33:17:02:
3b:4b:17:9b:96:d1:b7:05:4f:43:93:98:15:ad:e1:4c:1f:25:
9f:94:c5:c1:52:d0:72:b0:d6:27:82:d6:23:b7:62:00:3c:b6:
f3:bd:5b:f5:6d:63:9c:65:dc:47:78:92:ea:48:5b:46:e2:72:
58:7b:7c:31:52:8f:e0:f7:ba:09:a1:ab:67:1f:e8:ee:41:b3:
cd:9d:4c:1a:c1:3a:15:9b:54:ca:2c:3f:e8:71:d1:75:4a:c3:
40:a3:65:4c:19:4f:01:87:a3:e5:fd:02:db:3e:a9:d7:61:5d:
7a:ff:0e:37:16:f7:15:da:44:19:bb:43:9e:3a:ef:e0:67:81:
cc:41:45:42:d9:31:53:ef:9c:e2:34:4d:a5:81:22:9d:c4:a5:
c6:eb:c8:fc:88:3e:41:36:20:b0:11:5d:da:e0:c8:1a:22:b5:
ba:0f:bb:f9:e9:44:30:f1:7f:72:48:10:95:4c:58:54:8a:e1:
cc:4c:d4:ad:d8:0a:d2:7e:37:6b:06:04:1e:bb:67:3c:67:41:
08:8e:70:1e:a1:e9:04:f0:88:c1:21:61:f9:ce:3e:c1:35:3d:
7d:94:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org