Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E65D0B6ACAE211ECA7B518ABF1222468.roa
File: E65D0B6ACAE211ECA7B518ABF1222468.roa (raw, json)
Hash identifier: 1BSYKVgPbF0SpmzeecbtybVtiYIYE9+SaIhOORIrrQI=
Subject key identifier: C2:B1:85:1B:69:26:6A:A3:F3:72:8F:BC:66:0C:48:03:7C:D7:C0:A9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 064B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E65D0B6ACAE211ECA7B518ABF1222468.roa
Signing time: Tue 03 May 2022 13:14:02 +0000
ROA not before: Tue 03 May 2022 13:13:58 +0000
ROA not after: Fri 03 May 2024 13:13:58 +0000
asID: 1239
IP address blocks: 102.129.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 3 13:13:58 2022 GMT
Not After : May 3 13:13:58 2024 GMT
Subject: CN=62712a9a-0b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:c4:24:b6:6f:c4:59:48:53:26:af:c7:7e:
dc:cc:9f:9f:1b:f2:33:a3:8e:e0:81:8b:88:7f:bd:
be:4b:25:92:23:d2:eb:91:03:31:18:2a:13:3b:26:
b5:9a:76:da:33:35:4d:06:e5:8f:a2:73:08:d9:0a:
5e:82:20:64:10:f4:22:86:e7:b6:3d:41:4d:5e:2b:
d8:8f:dc:b9:ef:3d:67:25:7b:e1:c0:ee:8b:e5:aa:
69:51:da:8c:ab:1c:d8:c3:3a:04:f7:76:40:33:d1:
98:c4:5d:05:1f:3f:2c:42:ef:d3:41:ba:b7:09:39:
9a:33:c5:4c:39:a2:cd:03:c0:af:52:4c:33:27:cc:
97:97:9a:93:fd:33:9f:6f:cc:2a:dd:ca:c4:dd:3d:
a1:a4:80:32:26:31:0b:4e:6b:60:2b:94:89:76:06:
0e:7c:01:c5:c1:83:b7:8a:fe:16:89:cd:31:ca:e8:
29:a8:0b:ef:94:85:1f:bd:0f:51:16:ab:ba:ff:35:
0c:1f:aa:62:22:88:95:15:01:ab:4f:e7:a5:b0:d8:
fc:03:e1:eb:f2:44:f6:5f:8b:82:8c:37:90:f0:dc:
84:5e:c5:4b:39:98:eb:38:91:2a:b2:f5:eb:7a:da:
11:52:aa:90:e1:02:ae:28:85:b5:3f:ab:a0:c6:86:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:85:1B:69:26:6A:A3:F3:72:8F:BC:66:0C:48:03:7C:D7:C0:A9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E65D0B6ACAE211ECA7B518ABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.216.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9e:de:4a:bb:f7:c8:87:69:5a:d1:78:27:6f:ca:8c:9f:80:
57:ef:0f:ad:f8:08:3e:1a:4f:08:2c:8c:71:f3:d9:24:31:39:
09:77:d1:98:09:3b:3a:34:a7:a9:38:89:14:51:64:b2:8e:9d:
b4:28:37:0b:b8:53:19:c5:8f:05:21:d7:a7:83:0a:d8:d2:c5:
1a:23:e2:4b:76:1a:17:6c:69:34:21:b9:98:1e:ad:e2:4a:50:
fb:d7:91:b0:d4:ad:44:ef:52:15:00:74:ac:5b:41:df:63:de:
71:8e:31:e8:bc:12:77:8a:3f:ac:e8:9f:b2:b6:6d:13:48:96:
d9:77:29:1b:09:0b:f1:35:9b:2c:eb:a0:92:bc:0e:fb:58:83:
2d:c5:5e:b4:57:9b:cc:17:48:cf:00:30:d3:55:a9:a9:f9:fb:
be:25:b6:e7:78:a3:fb:ea:f2:e5:0d:90:4d:39:30:2f:b7:b2:
1f:24:11:b5:ab:6f:fd:d9:d5:fd:00:65:cc:7c:43:89:62:8b:
04:2c:fe:a5:89:cc:18:b9:6b:d3:06:08:22:aa:23:d3:60:6d:
66:23:f5:48:14:b9:55:ea:69:f2:66:be:1d:7c:54:35:4e:f4:
15:66:3c:f7:d0:d2:1d:35:42:c6:78:89:06:6d:82:44:68:84:
c8:33:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org