Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF515992E26011ECBEC60091F1222468.roa
File: FF515992E26011ECBEC60091F1222468.roa (raw, json)
Hash identifier: OjJy6bFHDWemfbXRUHWvsqcMWdKsRE62sELfiBacdRA=
Subject key identifier: 44:2E:4B:6D:15:1F:00:57:A1:D0:8E:B2:D8:0E:CE:85:7F:43:65:9D
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 067B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF515992E26011ECBEC60091F1222468.roa
Signing time: Thu 02 Jun 2022 10:44:37 +0000
ROA not before: Thu 02 Jun 2022 10:44:33 +0000
ROA not after: Sun 02 Jun 2024 10:44:33 +0000
asID: 40676
IP address blocks: 102.129.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 2 10:44:33 2022 GMT
Not After : Jun 2 10:44:33 2024 GMT
Subject: CN=62989495-86f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:41:4d:44:4c:04:17:c6:6e:55:73:b1:a2:
24:58:6b:9c:0b:d4:c2:88:7a:51:29:f4:3e:1e:38:
60:fa:89:df:79:e1:0b:5c:77:b9:62:e9:48:a1:f8:
0c:f9:fb:6a:31:0c:ee:6f:d1:68:c3:d3:44:e5:b0:
a0:3d:10:fd:c0:c5:58:fc:72:1e:15:ed:a1:02:b2:
44:f9:29:97:03:5c:ba:17:c2:54:6f:46:0a:9c:31:
0a:fe:1f:93:61:d3:48:9d:ed:83:42:d5:cf:99:33:
67:90:d6:09:75:17:40:2d:91:b6:e9:fd:4f:b8:3e:
d4:43:f9:aa:ef:b1:5d:99:63:f9:ee:22:81:fc:3d:
7f:a4:e9:dc:6d:49:0e:61:2d:35:7d:49:57:d8:08:
e4:68:57:ee:39:7d:b9:5c:c7:eb:e4:6c:84:64:a0:
79:1e:54:6e:19:27:ca:d6:3d:98:0b:91:a6:bd:e8:
e9:9e:a4:b0:cb:aa:30:88:c2:93:df:d0:8c:8d:10:
75:c6:4c:c8:b0:70:1b:8b:4c:72:6c:2b:1d:fa:14:
87:e6:d8:53:8c:f9:74:7d:1f:fb:72:51:4b:18:f4:
cd:c6:7c:37:a2:3b:ad:56:b4:93:1c:d2:18:c0:fa:
ba:36:a0:a0:f5:64:f8:61:f6:1a:92:16:ee:57:24:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:4B:6D:15:1F:00:57:A1:D0:8E:B2:D8:0E:CE:85:7F:43:65:9D
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF515992E26011ECBEC60091F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.130.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6d:01:4d:32:a1:fc:2e:1e:09:2e:46:f0:3a:1d:55:cb:4a:
d7:8a:59:10:52:c8:53:83:74:4c:e9:95:64:0c:5e:e8:a3:83:
d9:e8:3c:4f:3b:07:a6:05:c4:20:c4:a0:05:86:2f:d3:35:f3:
f4:b2:58:bc:68:81:99:4b:aa:c9:be:48:4c:d7:bd:40:19:f5:
ab:37:4f:4d:53:6a:50:6e:ea:8a:77:40:15:45:b8:ae:b3:74:
fd:27:66:fa:b3:a7:f3:d6:92:ad:a8:a5:c6:09:60:8e:67:58:
73:3c:5e:38:7d:ed:76:fb:45:08:a5:2f:ff:b2:02:50:f3:b1:
56:18:7a:c4:94:c3:5b:0d:2a:35:48:dd:85:91:30:02:e7:d1:
d3:1b:25:5c:6f:de:12:1e:3d:06:00:55:f7:4d:cb:1a:80:dd:
42:4c:db:15:aa:19:ce:60:f7:3c:51:ef:33:76:d7:21:6c:02:
d5:db:65:e3:c0:8a:bc:99:b0:84:57:7e:78:2c:42:77:da:6c:
e0:3b:15:f8:05:63:e3:af:c8:28:05:5f:f4:61:a7:73:10:df:
91:48:86:a5:4a:aa:fa:4a:88:38:56:2d:5d:a2:b0:bc:ab:5e:
65:09:fa:4f:31:58:5e:3d:a8:60:87:cf:77:7f:48:ae:4d:60:
d8:51:a7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org