Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA62B6F4467211EBBCCA203EF8AEA228.roa
File: BA62B6F4467211EBBCCA203EF8AEA228.roa (raw, json)
Hash identifier: ngvLYiWckP3DBaOmDOXwMg9KEArZ6fS0DpRy0gNrlUA=
Subject key identifier: CD:3B:FA:E0:24:FE:6A:F0:64:C2:29:A8:AC:43:DC:17:AD:61:BC:38
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0302
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA62B6F4467211EBBCCA203EF8AEA228.roa
Signing time: Fri 25 Dec 2020 05:33:34 +0000
ROA not before: Fri 25 Dec 2020 05:33:30 +0000
ROA not after: Fri 02 Sep 2022 05:33:30 +0000
asID: 26636
IP address blocks: 102.129.134.0/24 maxlen: 24
102.129.140.0/23 maxlen: 24
102.165.11.0/24 maxlen: 24
102.165.13.0/24 maxlen: 24
102.165.14.0/24 maxlen: 24
102.165.36.0/22 maxlen: 24
102.165.50.0/23 maxlen: 24
102.165.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 25 05:33:30 2020 GMT
Not After : Sep 2 05:33:30 2022 GMT
Subject: CN=5fe579ad-4153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:4e:d7:3e:c6:1b:13:ba:15:54:00:ca:89:
b6:5c:be:e1:d1:a1:3a:b7:ed:0a:0f:f9:0e:8e:ec:
cf:ca:7b:34:2a:08:72:e5:db:30:d5:9c:4b:01:59:
fb:63:c7:17:8e:df:35:c0:c8:bf:cf:e8:66:9c:d1:
cd:6d:de:1e:f1:55:c8:db:29:d7:28:63:83:9b:19:
9f:8b:66:ee:6c:d0:9f:ba:b3:ee:72:e1:e1:fb:44:
53:b6:c8:62:73:42:57:27:f3:fc:fb:11:b5:ba:d2:
01:91:c5:18:c7:80:af:ce:84:a2:e0:02:ff:88:20:
64:df:fd:89:43:e5:ad:45:86:a8:46:9c:e2:64:df:
c8:57:87:25:2e:fd:f1:34:53:9d:ea:9e:26:3b:a9:
8b:1d:4f:9a:16:05:87:ce:e8:ae:24:12:3b:f0:e3:
25:02:e3:36:47:d1:1d:02:c3:5e:2e:58:a4:08:49:
84:17:dc:2a:97:d9:d4:dd:ab:d6:3f:91:e7:4b:17:
04:e0:41:5c:15:0e:d4:a7:db:63:3d:13:ae:0a:c4:
a7:31:1f:e5:3d:76:52:6b:82:05:83:30:8a:92:5c:
da:c2:36:5f:d2:0c:6a:25:f6:99:27:42:06:5d:0c:
72:54:75:67:b2:a1:53:98:0f:29:d9:bc:19:7d:d3:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:FA:E0:24:FE:6A:F0:64:C2:29:A8:AC:43:DC:17:AD:61:BC:38
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BA62B6F4467211EBBCCA203EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.134.0/24
102.129.140.0/23
102.165.11.0/24
102.165.13.0-102.165.14.255
102.165.36.0/22
102.165.50.0/23
102.165.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:bf:19:11:00:ff:7e:e3:37:2e:aa:41:29:9b:cf:a1:a8:e6:
aa:56:6e:77:4b:71:dc:af:15:80:81:06:c2:bc:fa:94:25:0f:
57:1f:76:95:d6:25:41:92:f5:ab:22:f0:be:6e:79:3d:c6:87:
89:68:01:5c:28:55:a9:61:8d:a4:55:36:46:7e:d7:b7:60:69:
68:c9:00:78:95:c2:99:4a:b5:1d:32:e2:43:48:b2:e6:58:5a:
9e:41:f8:51:20:96:7a:6e:69:6f:09:f3:db:ef:fb:23:7e:23:
95:ff:29:c0:09:6e:a5:09:28:74:a6:c9:b9:83:9c:5e:8e:23:
11:ff:f6:a5:24:99:69:fb:5b:00:1b:24:4c:09:38:b6:4b:8d:
af:27:e5:01:fd:46:8a:1e:52:1a:8c:5b:36:5f:cb:c7:93:70:
4b:1f:66:ca:a9:2b:73:04:95:85:92:c5:2a:c7:33:aa:31:40:
d3:9c:70:a7:14:e6:9e:d7:ae:f7:16:60:f8:f5:49:59:91:bd:
09:78:ee:04:1b:a1:bd:1a:02:3c:a7:08:ac:c1:df:b6:48:8d:
c8:7c:97:0f:c9:8f:a6:73:0b:22:dd:25:04:07:4e:92:8f:8a:
0c:87:05:68:07:cb:07:04:e5:e3:71:79:0d:a2:fd:a1:57:5d:
68:09:de:e3
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMDEyMjUwNTMzMzBaFw0yMjA5MDIwNTMzMzBaMBgxFjAU
BgNVBAMTDTVmZTU3OWFkLTQxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg6U7XPsYbE7oVVADKibZcvuHRoTq37QoP+Q6O7M/KezQqCHLl2zDVnEsB
WftjxxeO3zXAyL/P6Gac0c1t3h7xVcjbKdcoY4ObGZ+LZu5s0J+6s+5y4eH7RFO2
yGJzQlcn8/z7EbW60gGRxRjHgK/OhKLgAv+IIGTf/YlD5a1FhqhGnOJk38hXhyUu
/fE0U53qniY7qYsdT5oWBYfO6K4kEjvw4yUC4zZH0R0Cw14uWKQISYQX3CqX2dTd
q9Y/kedLFwTgQVwVDtSn22M9E64KxKcxH+U9dlJrggWDMIqSXNrCNl/SDGol9pkn
QgZdDHJUdWeyoVOYDynZvBl900P3AgMBAAGjggLRMIICzTAdBgNVHQ4EFgQUzTv6
4CT+avBkwimorEPcF61hvDgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0JBNjJCNkY0NDY3MjExRUJCQ0NBMjAzRUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwSwYIKwYBBQUHAQcBAf8EPDA6MDgEAgABMDIDBABmgYYDBAFmgYwDBABmpQsw
DAMEAGalDQMEAGalDgMEAmalJAMEAWalMgMEAmalODANBgkqhkiG9w0BAQsFAAOC
AQEAOr8ZEQD/fuM3LqpBKZvPoajmqlZud0tx3K8VgIEGwrz6lCUPVx92ldYlQZL1
qyLwvm55PcaHiWgBXChVqWGNpFU2Rn7Xt2BpaMkAeJXCmUq1HTLiQ0iy5lhankH4
USCWem5pbwnz2+/7I34jlf8pwAlupQkodKbJuYOcXo4jEf/2pSSZaftbABskTAk4
tkuNryflAf1Gih5SGoxbNl/Lx5NwSx9myqkrcwSVhZLFKsczqjFA05xwpxTmnteu
9xZg+PVJWZG9CXjuBBuhvRoCPKcIrMHftkiNyHyXD8mPpnMLIt0lBAdOko+KDIcF
aAfLBwTl43F5DaL9oVddaAne4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org