Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/98FDA87C918E11EBB9AFB777F8AEA228.roa
File: 98FDA87C918E11EBB9AFB777F8AEA228.roa (raw, json)
Hash identifier: D3nf1HC2jvXjKD/G0Q1xBV++hccL9Bb1St7dI7oDzJc=
Subject key identifier: 07:5F:25:95:96:ED:BB:91:53:64:90:01:48:49:3A:54:6C:05:9A:16
Certificate issuer: /CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Certificate serial: 08
Authority key identifier: 7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/98FDA87C918E11EBB9AFB777F8AEA228.roa
Signing time: Tue 30 Mar 2021 19:32:00 +0000
ROA not before: Tue 30 Mar 2021 19:31:56 +0000
ROA not after: Thu 30 Mar 2023 19:31:56 +0000
asID: 328813
IP address blocks: 102.220.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3618519AF/serialNumber=7BD8A2D0454D6263E227FA7EEA6A1F865AF02406
Validity
Not Before: Mar 30 19:31:56 2021 GMT
Not After : Mar 30 19:31:56 2023 GMT
Subject: CN=60637cb0-e1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:e6:4a:af:e4:e7:a9:18:44:24:40:83:b9:
a9:be:47:26:14:b8:41:b1:5a:22:24:54:e9:81:58:
71:ee:df:0f:ce:6b:bd:ee:b5:16:e8:4f:e5:81:73:
2f:f0:30:2b:4b:77:59:e5:8e:ff:57:b3:21:e0:0a:
4b:3b:40:54:d6:73:4f:7a:60:23:86:9d:b4:3a:8c:
f7:dc:57:e0:fe:69:b6:12:5d:96:a3:71:f9:cf:a9:
b7:b0:93:45:07:9d:f7:da:29:d4:6e:88:f1:e1:bb:
69:04:35:7a:0e:e1:98:16:84:ca:c2:f0:d3:16:e7:
c5:ba:bd:fc:49:ea:74:10:cf:c0:71:de:aa:91:f9:
cf:e0:ce:9e:73:67:6d:af:3b:53:c8:02:31:6a:dc:
4c:c8:80:18:7f:3d:2b:6c:52:d2:95:d6:97:a5:be:
10:f8:ae:a5:b7:be:93:69:b6:43:00:21:c3:6e:f7:
5f:2d:dc:2f:01:a6:09:0b:34:cb:23:8b:eb:be:ef:
7d:17:5e:d4:14:2b:de:2e:81:4b:00:ad:14:47:5d:
c9:33:9e:cb:85:51:64:90:6f:0f:5d:b0:77:c3:ba:
43:f9:f9:d3:cf:6b:13:62:18:7c:7c:cf:94:6e:22:
ee:cc:67:50:16:e9:e1:6a:7c:2f:f7:4a:f5:a4:49:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:25:95:96:ED:BB:91:53:64:90:01:48:49:3A:54:6C:05:9A:16
X509v3 Authority Key Identifier:
keyid:7B:D8:A2:D0:45:4D:62:63:E2:27:FA:7E:EA:6A:1F:86:5A:F0:24:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/e9ii0EVNYmPiJ_p-6mofhlrwJAY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e9ii0EVNYmPiJ_p-6mofhlrwJAY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618519/2BFB6B42916111EB9B0F954AF8AEA228/98FDA87C918E11EBB9AFB777F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.203.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:72:ff:ed:e5:f4:41:f3:08:88:67:2f:b9:94:b5:90:bc:f0:
38:62:6d:51:1a:67:5d:2d:90:ff:08:9f:24:88:58:77:c2:20:
3d:01:a7:67:9b:eb:c5:a3:c3:c2:6a:4a:c4:f1:22:06:50:c5:
f2:2b:38:ce:d8:d2:d3:7b:b4:0d:c0:9f:46:98:c2:76:07:95:
0f:07:62:5c:8a:c0:b8:f2:5a:33:2b:7e:17:71:23:fc:be:c0:
ca:52:18:c8:eb:31:4c:ed:9a:83:f4:1b:a5:aa:4f:31:52:4a:
6c:21:5d:97:8c:ed:ce:6d:c3:5e:e7:41:49:06:e2:72:9f:02:
8c:bb:22:9f:e1:35:72:40:66:0f:3b:dd:eb:7b:d5:ad:07:67:
89:a1:95:7e:b5:37:42:a2:a4:88:dc:a9:6c:8e:e5:3c:95:8b:
2c:f6:79:c7:37:ca:bc:28:11:ab:5a:b2:63:39:20:f4:a3:fb:
60:92:e0:34:24:86:02:4c:e7:48:3d:9c:5c:ac:85:3c:d1:b9:
3c:26:5c:bc:6c:84:14:56:61:d7:36:b3:fb:ae:40:86:f6:ba:
89:05:df:c4:d2:47:b7:20:83:d0:50:eb:7a:8c:f5:59:3e:e0:
ed:c2:0f:e5:22:31:03:45:9c:92:0d:06:aa:0c:5c:4f:8d:19:
1a:ff:02:f5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
ODUxOUFGMTEwLwYDVQQFEyg3QkQ4QTJEMDQ1NEQ2MjYzRTIyN0ZBN0VFQTZBMUY4
NjVBRjAyNDA2MB4XDTIxMDMzMDE5MzE1NloXDTIzMDMzMDE5MzE1NlowGDEWMBQG
A1UEAxMNNjA2MzdjYjAtZTFiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrs5kqv5OepGEQkQIO5qb5HJhS4QbFaIiRU6YFYce7fD85rve61FuhP5YFz
L/AwK0t3WeWO/1ezIeAKSztAVNZzT3pgI4adtDqM99xX4P5pthJdlqNx+c+pt7CT
RQed99op1G6I8eG7aQQ1eg7hmBaEysLw0xbnxbq9/EnqdBDPwHHeqpH5z+DOnnNn
ba87U8gCMWrcTMiAGH89K2xS0pXWl6W+EPiupbe+k2m2QwAhw273Xy3cLwGmCQs0
yyOL677vfRde1BQr3i6BSwCtFEddyTOey4VRZJBvD12wd8O6Q/n5089rE2IYfHzP
lG4i7sxnUBbp4Wp8L/dK9aRJYPUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQHXyWV
lu27kVNkkAFISTpUbAWaFjAfBgNVHSMEGDAWgBR72KLQRU1iY+In+n7qah+GWvAk
BjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTg1MTkvMkJGQjZCNDI5MTYxMTFFQjlCMEY5NTRBRjhBRUEyMjgvZTlpaTBF
Vk5ZbVBpSl9wLTZtb2ZobHJ3SkFZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZTlpaTBFVk5ZbVBpSl9wLTZtb2ZobHJ3SkFZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTg1MTkvMkJGQjZCNDI5MTYxMTFFQjlCMEY5NTRBRjhB
RUEyMjgvOThGREE4N0M5MThFMTFFQkI5QUZCNzc3RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbcyzANBgkqhkiG9w0BAQsF
AAOCAQEAqnL/7eX0QfMIiGcvuZS1kLzwOGJtURpnXS2Q/wifJIhYd8IgPQGnZ5vr
xaPDwmpKxPEiBlDF8is4ztjS03u0DcCfRpjCdgeVDwdiXIrAuPJaMyt+F3Ej/L7A
ylIYyOsxTO2ag/QbpapPMVJKbCFdl4ztzm3DXudBSQbicp8CjLsin+E1ckBmDzvd
63vVrQdniaGVfrU3QqKkiNypbI7lPJWLLPZ5xzfKvCgRq1qyYzkg9KP7YJLgNCSG
AkznSD2cXKyFPNG5PCZcvGyEFFZh1zaz+65Ahva6iQXfxNJHtyCD0FDreoz1WT7g
7cIP5SIxA0Wckg0GqgxcT40ZGv8C9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org