Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF7EB382DC3411EDA9F5E300306D8C1D.roa
File: FF7EB382DC3411EDA9F5E300306D8C1D.roa (raw, json)
Hash identifier: Sd8CsOp7DNY/eWKypUtI26Py6JHw4XBcGJ4aoEjCfdA=
Subject key identifier: 3E:15:D0:F9:A6:86:FA:B0:82:13:55:EA:08:E1:78:C1:A8:11:43:9B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0B14
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF7EB382DC3411EDA9F5E300306D8C1D.roa
Signing time: Sun 16 Apr 2023 08:59:30 +0000
ROA not before: Sun 16 Apr 2023 08:59:25 +0000
ROA not after: Tue 16 Apr 2024 08:59:25 +0000
asID: 135752
IP address blocks: 102.129.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Apr 16 08:59:25 2023 GMT
Not After : Apr 16 08:59:25 2024 GMT
Subject: CN=643bb8f2-04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:08:a4:d9:79:1f:4c:d3:72:24:66:23:de:
72:27:d2:02:f3:3e:00:dd:3a:ab:34:af:c4:ad:19:
aa:6a:4f:af:29:88:22:78:c2:19:c8:38:a3:61:3b:
a7:37:b1:fb:b3:56:21:ff:11:5c:2f:60:51:db:15:
f6:c2:cf:d0:d4:4d:ff:1a:fc:b8:67:0f:8e:35:23:
78:f9:3e:14:9a:2c:3c:da:c8:17:88:af:65:10:33:
f0:7f:2f:43:70:1a:53:f1:d7:b8:33:37:f8:86:36:
8f:1c:b3:3f:c1:39:b4:9f:07:fb:9e:fc:5e:9d:9e:
03:34:ba:5a:05:88:f7:1c:69:5b:c4:e7:02:e6:37:
63:9c:c8:97:20:c5:83:26:62:86:89:61:c3:86:79:
72:f0:9f:d1:26:ff:dc:37:2d:4a:ff:8d:07:68:ae:
3d:ea:77:9a:56:bb:f4:2f:f9:67:e0:4d:f4:74:7a:
51:ef:92:ea:f3:47:8f:5c:f4:d3:89:91:ad:87:94:
2f:ed:18:4f:7d:86:4b:53:90:58:96:5b:1a:e0:47:
a2:fe:4a:14:84:d2:90:57:70:dc:49:94:97:80:6c:
eb:63:1e:7b:a7:f0:ce:7e:f2:0b:f7:80:7c:3c:7b:
ad:25:ca:90:e5:51:f9:7f:c8:ca:38:46:12:9c:cb:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:D0:F9:A6:86:FA:B0:82:13:55:EA:08:E1:78:C1:A8:11:43:9B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FF7EB382DC3411EDA9F5E300306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.207.0/24
Signature Algorithm: sha256WithRSAEncryption
76:59:78:60:c9:71:43:85:ed:a4:65:e1:cf:aa:82:35:6b:77:
71:37:0f:65:3b:bf:72:4a:56:e1:80:e1:13:52:19:05:32:af:
c1:08:03:7c:a0:c2:50:f4:6f:02:68:27:08:84:12:6a:cd:89:
16:48:20:03:2d:19:91:0e:cf:16:d9:71:45:08:9b:d8:30:24:
29:0a:d6:41:66:03:00:ed:a4:d0:0f:11:c8:1a:0c:b7:22:af:
75:00:97:7f:96:12:90:48:2e:20:71:d8:65:1d:c5:48:27:05:
3e:27:11:96:4d:de:b4:c7:10:81:45:f4:6b:e5:c9:4a:b8:fa:
b1:64:51:57:fa:90:4b:5c:87:ff:3f:38:32:a1:f4:06:92:fd:
09:32:08:76:15:b0:9e:7d:68:25:a4:1d:e6:b5:53:a2:8d:04:
3d:f8:d7:d8:93:b5:1c:60:b9:60:32:81:3c:d5:29:7f:d1:ef:
43:04:46:b5:fd:72:07:35:a6:f9:8a:7f:6a:b8:17:87:0d:4a:
61:59:cb:f6:2e:9e:a8:de:a3:58:69:ee:1e:69:2f:13:ee:72:
0f:27:36:7a:51:50:98:03:41:7e:d5:b1:a9:9d:19:1a:0b:22:
89:0b:27:f3:ad:8b:bc:2d:25:46:d0:8e:5a:3b:90:86:94:74:
ec:0d:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org