Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFE47526BF5911ED99295EC6F1222468.roa
File: EFE47526BF5911ED99295EC6F1222468.roa (raw, json)
Hash identifier: lC3YgC2SWLvLcujz+0zULItACpiFbMNSSMGX1oVlBvs=
Subject key identifier: 08:C0:46:A5:24:BC:92:11:9D:60:ED:90:7C:1C:F5:94:0A:A0:A7:F2
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AC1
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFE47526BF5911ED99295EC6F1222468.roa
Signing time: Fri 10 Mar 2023 15:40:52 +0000
ROA not before: Fri 10 Mar 2023 15:40:48 +0000
ROA not after: Sun 10 Mar 2024 15:40:48 +0000
asID: 29802
IP address blocks: 102.129.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 10 15:40:48 2023 GMT
Not After : Mar 10 15:40:48 2024 GMT
Subject: CN=640b4f84-6265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:8c:50:4a:6c:2e:a4:05:a9:05:69:75:fa:
34:dc:a1:1e:61:75:57:eb:89:d2:25:2d:23:a0:2b:
2b:96:06:a5:d2:85:8a:a8:22:3f:87:8a:cb:37:f4:
9f:5f:2d:e2:8a:d8:aa:60:bb:27:d8:85:c7:1d:65:
ba:c7:f8:39:99:0b:c5:d9:e3:f1:9f:d2:3a:71:2b:
b1:31:1f:f5:29:66:91:76:bd:54:b2:2d:5b:9a:47:
bd:75:46:1d:99:d1:e9:47:42:9a:3a:c4:2f:42:a8:
97:1a:94:ce:27:f4:2f:08:a0:1b:f1:ff:86:cb:db:
4e:71:49:a9:a3:11:ee:9a:c5:6c:ac:a0:cb:76:58:
b9:6f:94:7c:ba:a8:87:10:8d:36:e2:ff:dc:ec:14:
0a:37:2b:20:db:f4:da:6d:4c:ff:ad:3c:e0:7d:a4:
08:ee:7b:a1:27:f0:6d:29:26:42:56:56:9f:bd:f0:
9f:a0:5c:db:fb:21:c4:98:92:d2:8f:1a:92:af:0b:
75:03:ba:98:f1:cc:14:b7:8a:0c:d4:8d:9c:f7:1b:
a9:82:fa:b3:5e:e3:51:93:2c:11:d8:f5:49:67:8b:
b8:2a:dd:0a:4b:71:c2:77:94:84:7a:ee:c7:95:43:
aa:b7:c0:bd:aa:da:9a:23:4c:3f:b2:75:8b:cd:ca:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:46:A5:24:BC:92:11:9D:60:ED:90:7C:1C:F5:94:0A:A0:A7:F2
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/EFE47526BF5911ED99295EC6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ae:e8:16:c1:43:f0:af:22:d7:64:5b:38:8c:98:f0:6e:83:
5e:50:26:a3:3f:a5:32:30:11:f2:13:e3:66:41:88:e8:4c:f4:
35:bd:57:5f:29:a8:a6:78:05:f9:ce:c3:87:e6:bb:61:9a:32:
a6:a4:65:0d:05:71:ae:b2:a9:74:39:9d:96:4b:8a:35:9f:23:
56:e9:b9:09:1d:e5:72:33:42:6c:47:a6:a1:3b:93:22:66:24:
ae:90:44:fe:d7:d6:78:fa:62:5e:68:3c:4b:20:75:88:06:86:
36:a7:9d:9d:c1:9f:c6:9c:80:5b:87:10:42:a0:ae:3f:15:00:
6d:31:2a:60:9c:f5:a2:5d:69:fb:dc:bb:6a:bd:c3:a3:42:5f:
ff:15:f1:03:9d:ca:58:03:03:5c:78:7b:3b:ef:f4:3a:72:f9:
88:fb:03:cc:3b:23:9a:fa:e2:61:1c:98:e7:5e:6c:f2:15:a0:
f0:af:63:ac:84:b6:cd:fd:1e:51:7b:50:9d:51:c4:10:f4:44:
e4:0a:39:b9:03:2f:b4:c2:17:83:3c:7e:b7:a4:1d:e0:a1:47:
49:d5:6c:c5:0f:88:c1:6e:db:77:f6:1a:0e:f6:e8:60:54:d3:
91:04:36:e9:bd:ca:90:96:ac:10:06:e2:34:85:1b:91:26:16:
be:a2:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 02:53:44 2024 by rpki-client on console-fra.rpki-client.org