Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F751DE9EAD8511EBA4D7F92CF8AEA228.roa
File: F751DE9EAD8511EBA4D7F92CF8AEA228.roa (raw, json)
Hash identifier: bRRdI7FRF1ufGTTAL0SsVgBJAXSDfySiUj51gNQnKUE=
Subject key identifier: 96:72:B7:0C:D7:44:68:51:38:79:C5:37:AF:90:24:EB:0E:60:04:29
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03DE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F751DE9EAD8511EBA4D7F92CF8AEA228.roa
Signing time: Wed 05 May 2021 09:40:46 +0000
ROA not before: Wed 05 May 2021 09:40:41 +0000
ROA not after: Thu 05 May 2022 09:40:41 +0000
asID: 174
IP address blocks: 102.129.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 09:40:41 2021 GMT
Not After : May 5 09:40:41 2022 GMT
Subject: CN=6092681e-0f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:cc:2c:fe:e0:a0:d1:18:bc:52:96:9f:1e:
fb:95:f1:b5:bd:d5:87:34:07:ff:bd:35:5d:52:9c:
bf:76:a6:4a:81:8d:fb:95:5b:58:60:91:e1:97:f0:
bf:39:d4:75:eb:48:4d:02:1d:33:16:61:8e:dc:43:
ee:3a:cd:15:80:d4:c0:d0:8c:b4:af:1c:d9:e2:04:
a3:0f:c2:0d:39:c4:69:77:c8:f2:35:b8:2f:b5:14:
78:b5:a3:31:e2:57:0f:ff:d1:82:e9:5d:1c:da:a4:
f7:08:6a:77:fe:b6:6b:23:10:d7:53:ac:23:46:34:
5a:2d:49:b6:9b:b7:ac:4f:a3:8b:09:19:4b:03:f9:
df:5f:13:fc:77:09:fc:e4:62:0c:29:8c:28:6f:ab:
a6:6f:5f:ad:db:62:eb:b4:07:35:55:41:c8:c3:80:
74:dd:bc:c7:4c:fb:38:e5:8a:79:c0:0b:14:bb:26:
52:3d:6c:dd:51:2e:c7:65:58:5c:d5:22:7b:f2:f7:
5a:8a:d7:18:f9:3f:1d:38:54:3e:7e:6e:98:c3:55:
80:56:48:61:49:71:ec:1d:62:9b:3c:1a:1d:81:c2:
86:fa:40:12:f0:c4:b0:0e:fe:8f:7d:ff:a6:ad:21:
c1:28:d6:68:f5:81:b6:1d:1b:55:01:1b:ac:27:b9:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:72:B7:0C:D7:44:68:51:38:79:C5:37:AF:90:24:EB:0E:60:04:29
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F751DE9EAD8511EBA4D7F92CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.152.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:17:d9:68:ed:bc:db:2d:75:44:42:28:1c:0b:88:e3:eb:
ca:e2:ec:5c:25:61:13:f5:28:2a:cf:03:cc:06:3f:83:69:bd:
f6:3b:62:a2:27:cd:70:49:55:12:3d:93:e3:aa:6a:94:62:49:
b8:36:3c:77:e9:65:c5:05:1c:a1:fe:42:1a:ca:33:04:3f:ee:
2f:ba:2e:d2:97:40:2b:9b:33:4d:f4:cc:7f:dd:a0:91:89:ec:
95:9b:13:b3:11:b3:c3:b6:e1:36:bc:b8:28:e7:39:4e:8d:a5:
d9:8f:a1:60:80:d5:74:96:39:05:57:6e:f5:21:12:0f:9c:d7:
72:17:a8:98:6d:d0:69:07:5d:7d:f8:07:49:5e:cb:26:b0:16:
42:7e:c6:83:f7:c1:c2:4f:84:6b:f6:1f:e1:ae:f7:de:d3:42:
61:77:19:e9:2c:d1:36:44:be:b7:91:5e:2c:7f:15:8e:a8:cf:
62:91:19:1e:0d:79:32:90:ac:0a:59:e5:1f:bf:4d:e1:89:c9:
42:8f:0d:a2:4b:99:a9:08:f1:d4:b4:78:28:3b:7f:8d:f8:66:
a1:cd:e9:61:59:27:84:96:11:fe:1c:ba:32:b8:a7:b2:31:a6:
a2:5a:aa:ed:3d:1f:75:ca:0d:9c:38:c9:9c:84:a9:26:62:4e:
6e:05:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org