Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFBC06EC467211EBA62E703EF8AEA228.roa
File: FFBC06EC467211EBA62E703EF8AEA228.roa (raw, json)
Hash identifier: CpclifEMA+lgKBXCSd6z+dbTEzCp75/4t2ECpcG9Zlk=
Subject key identifier: 1C:02:61:A7:33:4F:CD:CB:F5:98:42:CE:3D:D7:AB:9B:23:E5:E6:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0304
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFBC06EC467211EBA62E703EF8AEA228.roa
Signing time: Fri 25 Dec 2020 05:35:30 +0000
ROA not before: Fri 25 Dec 2020 05:35:25 +0000
ROA not after: Fri 02 Sep 2022 05:35:25 +0000
asID: 7922
IP address blocks: 102.129.134.0/24 maxlen: 24
102.129.140.0/23 maxlen: 24
102.165.11.0/24 maxlen: 24
102.165.13.0/24 maxlen: 24
102.165.14.0/24 maxlen: 24
102.165.36.0/22 maxlen: 24
102.165.50.0/23 maxlen: 24
102.165.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 25 05:35:25 2020 GMT
Not After : Sep 2 05:35:25 2022 GMT
Subject: CN=5fe57a22-a95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:b4:88:53:58:8d:45:42:5a:fb:4c:a1:14:
1e:cb:35:dd:04:44:d2:ca:55:48:f1:2f:0a:99:00:
be:52:43:a6:db:96:a9:95:cc:23:e9:be:86:d6:8e:
d8:34:c7:01:81:65:73:3b:81:11:34:d0:83:ba:83:
d9:76:35:b3:75:58:6e:23:0e:7b:c9:b5:9d:21:4f:
a0:1b:13:5c:0d:57:0b:8a:0d:20:4e:d9:bc:76:39:
dd:14:01:67:e2:5a:5b:02:0b:af:c5:a6:c8:ff:1d:
57:69:4f:41:08:55:5f:29:f7:4e:2a:56:2a:29:47:
e4:e3:28:ea:34:4e:ea:36:9b:28:57:63:37:54:16:
2d:90:4c:a7:38:7c:a3:8d:21:d6:34:5c:e4:60:cb:
b6:c4:d2:a0:8e:b4:d1:bf:41:30:85:87:05:6a:0b:
63:86:22:a8:1a:d5:e5:5f:6b:ee:17:3d:13:90:31:
41:2b:28:1f:db:64:77:57:81:0b:db:6f:27:97:79:
e2:46:9c:dc:b4:aa:aa:2a:f1:9f:89:e6:eb:a7:a9:
f4:00:6a:21:9d:69:98:6f:47:bf:f9:98:7d:ac:13:
46:11:5d:7e:43:22:10:ad:3c:46:f1:91:b5:07:ea:
16:c0:28:2c:e3:d6:ad:19:f0:80:53:fa:74:66:4b:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:61:A7:33:4F:CD:CB:F5:98:42:CE:3D:D7:AB:9B:23:E5:E6:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/FFBC06EC467211EBA62E703EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
102.129.140.0/23
102.165.11.0/24
102.165.13.0-102.165.14.255
102.165.36.0/22
102.165.50.0/23
102.165.56.0/22
Signature Algorithm: sha256WithRSAEncryption
66:d5:b4:12:16:4e:b3:73:40:5d:01:7e:a8:37:92:07:58:d4:
6f:ab:3c:93:6f:e0:60:ce:bb:ad:8e:88:81:02:5b:85:de:45:
af:fb:53:15:a1:49:3c:2b:ed:6a:cb:ee:13:6a:0c:c2:46:0a:
ee:0a:2f:03:d6:f8:ea:6b:7f:a8:45:e3:93:8c:57:51:79:7a:
7c:b5:4c:73:2d:95:58:42:ee:80:ab:1b:d6:94:db:a0:0c:58:
ca:8b:f5:8c:e0:3c:eb:d5:a4:71:ef:cc:25:97:43:92:30:9f:
3e:9e:5b:9a:b6:b6:74:81:5f:e1:d1:36:71:98:ad:d0:a9:27:
10:c0:15:25:02:47:a1:50:7c:2e:6d:af:a2:ac:0f:43:d4:67:
3f:5c:8e:b5:c8:eb:41:ea:95:11:d7:e0:bf:3a:3a:71:b5:5d:
12:e3:f2:36:8d:0f:33:95:b0:28:e7:fd:ea:2f:29:8f:33:59:
a8:d9:e0:07:6a:09:89:83:8e:b0:ad:8b:6e:9f:8a:1d:3f:93:
63:46:6d:2b:b8:b3:80:12:13:9a:ff:6d:d8:66:91:9b:35:fd:
f8:46:9b:46:35:a7:f8:09:07:22:cb:96:e1:2c:90:c0:7c:c2:
29:ce:af:ac:3b:83:8e:d3:14:ba:30:dd:7e:e9:20:50:48:6d:
cc:b5:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org