Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F023137EC60F11ECB0902681F1222468.roa
File: F023137EC60F11ECB0902681F1222468.roa (raw, json)
Hash identifier: 9zOw7TJdfpKGHdEqLtFARDle/fxkGl5V049LBNA+UNQ=
Subject key identifier: E2:EC:C0:6A:A6:BF:B6:73:AC:A5:B6:CE:B8:6C:F3:5F:5B:C0:82:30
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 063F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F023137EC60F11ECB0902681F1222468.roa
Signing time: Wed 27 Apr 2022 09:53:50 +0000
ROA not before: Wed 27 Apr 2022 09:53:46 +0000
ROA not after: Thu 27 Apr 2023 09:53:46 +0000
asID: 174
IP address blocks: 102.129.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599 (0x63f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 27 09:53:46 2022 GMT
Not After : Apr 27 09:53:46 2023 GMT
Subject: CN=626912ae-17f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:fe:79:78:29:ee:82:02:b7:d1:cf:ab:1b:
e9:e1:38:9e:8e:cf:73:5f:bb:9f:83:2a:37:5e:85:
d4:4c:7c:29:21:1c:5b:4c:49:94:5f:d3:51:ff:9d:
fb:a0:f5:0d:95:d3:68:ae:0d:5a:52:4d:78:59:b9:
bf:43:91:1c:65:c9:e1:b2:dd:d5:b9:8d:02:ce:88:
4f:2a:05:4e:1f:c6:f3:51:80:de:4c:be:69:40:43:
1d:aa:10:a1:14:00:c9:95:4e:86:94:54:f5:ae:45:
d1:fa:31:59:66:54:d5:1e:e4:74:ca:3a:1b:29:05:
50:6f:a6:4f:12:08:fc:fe:7b:3b:df:fb:4b:8a:a3:
d6:d6:b7:01:bd:49:4b:dc:a5:ae:a6:c0:8f:28:55:
17:6c:c3:57:14:3f:1f:a9:51:b2:2c:a3:cb:6f:57:
ab:4c:b4:7d:5c:f6:fe:88:12:e8:df:e5:c0:36:84:
01:0e:fc:42:b0:cf:4b:2b:f4:af:4b:dc:96:86:7a:
41:e2:9f:1e:04:59:f6:ff:d7:ca:93:59:ca:6f:ad:
fe:32:c3:a6:48:71:1f:6d:1c:d9:e3:ac:6c:0a:03:
3a:72:71:1e:9b:52:ad:86:fb:b7:d9:0e:fc:74:32:
7b:3d:44:9f:df:78:75:81:b3:8d:a6:5b:ed:a0:59:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:C0:6A:A6:BF:B6:73:AC:A5:B6:CE:B8:6C:F3:5F:5B:C0:82:30
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F023137EC60F11ECB0902681F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.152.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:0c:96:ee:22:07:1c:89:c8:c2:dd:59:9a:ac:15:45:93:5e:
96:9c:93:4e:5c:55:5d:5c:5f:0d:a9:ef:40:a1:2f:86:1a:c9:
2f:be:51:d3:96:1b:39:62:f1:d7:e3:5c:83:71:d0:2b:49:e0:
e0:7d:0d:d2:76:5c:55:64:ee:55:bb:1e:fd:d5:67:4e:c5:20:
e2:5e:ea:84:7c:b4:ce:c4:51:51:3d:21:ba:82:ce:20:1e:4d:
b5:23:d9:ee:49:0d:6a:15:5b:2a:42:e2:43:21:47:45:f3:18:
4c:b3:a2:ba:54:1e:6d:bd:d9:76:b0:cf:e8:c1:2f:de:7f:ff:
a7:1b:ab:f2:35:e8:af:d5:66:34:e7:ac:d1:06:c4:65:73:e6:
e1:d4:05:5e:6c:40:65:e2:75:fe:1e:d5:4a:cc:42:10:ac:62:
1e:04:8c:21:71:07:df:8e:8b:ce:9c:7f:01:86:4d:5b:5b:cc:
b9:b1:e5:7f:44:a7:62:aa:88:40:1a:56:55:34:5c:64:d3:62:
1d:db:e1:6e:dc:1c:f1:2f:85:2d:da:76:a8:82:d9:8f:3f:8e:
bf:ea:e0:c7:37:21:02:c9:84:f5:5e:38:15:df:4b:d5:86:83:
18:fa:07:5c:0a:5e:d4:cf:01:01:48:2e:98:0d:33:f8:69:0f:
35:e3:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org