Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F550A9AA49D311EC8CDB1651D8A014CE.roa
File: F550A9AA49D311EC8CDB1651D8A014CE.roa (raw, json)
Hash identifier: 3j+qoIXNJeRU0UPicgKyGOFKekM57I0E+r3Z4FRdDMI=
Subject key identifier: 0D:31:E0:0E:90:35:A5:97:3D:E4:4C:D4:E5:35:8C:89:72:6E:DE:73
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 055F
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F550A9AA49D311EC8CDB1651D8A014CE.roa
Signing time: Sat 20 Nov 2021 07:32:04 +0000
ROA not before: Sat 20 Nov 2021 07:32:01 +0000
ROA not after: Sun 20 Nov 2022 07:32:01 +0000
asID: 62579
IP address blocks: 102.129.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375 (0x55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 20 07:32:01 2021 GMT
Not After : Nov 20 07:32:01 2022 GMT
Subject: CN=6198a474-0a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:1c:bb:ff:c7:c3:4f:de:c3:de:98:fa:82:
d6:0f:79:1d:81:fb:3b:5d:18:d2:85:83:00:53:52:
c0:86:fa:b2:39:a3:10:44:92:c8:e2:e6:de:3f:6c:
94:43:a9:2a:44:37:15:4c:67:eb:c7:55:a9:0e:98:
e3:4d:fa:ef:4c:4d:e5:65:64:5a:73:ab:15:85:5f:
f9:1c:a5:09:b9:57:73:ce:46:13:8c:9e:8a:36:52:
4a:93:c9:a5:58:e6:6f:7e:0e:b9:02:a5:41:e3:00:
18:87:a5:09:80:6f:ad:bb:5d:54:6e:2a:cb:02:96:
ce:64:40:44:85:1d:13:62:ad:5e:90:89:5f:15:2a:
7f:4d:d3:89:8b:54:35:56:37:c4:0f:c6:6b:16:3d:
6b:93:2b:1a:71:0f:c0:54:82:3b:96:03:98:37:25:
e9:eb:0f:53:80:59:37:40:71:b0:45:39:6b:d2:24:
15:b9:f9:fd:1d:8e:12:fa:fb:60:c4:eb:ac:47:b9:
dc:8d:fc:7e:b2:87:b1:2d:2c:e3:9e:da:4b:ec:d5:
e0:0a:38:03:26:fb:fc:06:84:0b:3c:ca:45:7d:c3:
78:fa:c5:55:33:e3:80:39:60:b5:0a:8c:6b:15:c0:
6f:5b:83:23:ff:7b:34:3f:c1:be:57:50:51:56:14:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:E0:0E:90:35:A5:97:3D:E4:4C:D4:E5:35:8C:89:72:6E:DE:73
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F550A9AA49D311EC8CDB1651D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6d:3a:e3:38:d3:76:48:9f:f7:1e:83:df:12:f3:bc:3a:df:
0a:2b:78:89:ee:7f:c2:6a:60:b1:6b:81:73:f9:84:87:18:1d:
d4:d1:c7:8b:a5:56:8a:92:28:79:b5:31:d8:8f:13:48:d3:ea:
e4:75:12:36:02:3c:50:a6:30:50:b9:16:70:a8:e6:1f:cd:99:
6f:2c:00:e4:99:87:63:bf:0d:0a:d7:0a:c5:c3:eb:f6:de:4b:
5a:41:d1:e3:7f:03:32:01:4f:4f:95:ae:d8:72:f5:15:1f:f9:
b0:62:2f:2c:06:85:5b:3d:5a:ce:d0:f8:bc:59:7a:8d:ce:b6:
47:c9:2c:00:af:f9:e1:e1:91:5c:8e:f6:b9:a4:ad:64:ee:25:
84:a3:2f:91:b6:48:89:48:ab:18:d0:03:b2:f5:80:10:79:25:
e5:c7:e5:a8:d1:fc:8d:67:02:18:f4:89:72:ee:97:24:7a:13:
20:ee:73:4d:3a:cc:8c:84:9f:74:b7:47:85:de:59:ff:dd:ef:
d7:bc:34:a2:bc:b2:d3:f3:2f:c7:e4:a3:ab:6c:e8:e9:aa:a8:
d6:02:ae:7f:a2:34:2b:0c:6f:59:7c:d8:af:eb:51:c2:cc:9a:
75:76:21:a2:66:62:ff:e8:d5:17:7b:1b:b6:a3:35:85:00:34:
43:0a:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org