Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6B79412E21CE11ECAB78C645D8A014CE.roa
File: 6B79412E21CE11ECAB78C645D8A014CE.roa (raw, json)
Hash identifier: 8mzh74jop2QMCIW+tnYYg8s19mKT0EGkotsGim9l2Sg=
Subject key identifier: 54:60:B3:A5:35:D1:AA:2C:C8:7D:E3:3C:26:B8:32:E3:9C:CD:1F:AA
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 19
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6B79412E21CE11ECAB78C645D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:11:39 +0000
ROA not before: Thu 30 Sep 2021 09:11:36 +0000
ROA not after: Sat 30 Sep 2023 09:11:36 +0000
asID: 328327
IP address blocks: 102.140.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:11:36 2021 GMT
Not After : Sep 30 09:11:36 2023 GMT
Subject: CN=61557f4b-34e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:18:61:b6:b2:3c:36:69:8a:63:ed:84:1c:
8e:8f:9f:03:a6:03:d8:d5:86:81:1b:c4:33:05:25:
12:d7:c4:d5:db:1a:c3:25:1b:a1:1b:1f:5c:52:4f:
e2:79:6a:da:82:c7:af:24:bd:10:73:2d:9c:40:e9:
35:7e:c6:53:27:54:be:2c:fe:e3:ef:7b:d2:67:32:
b1:f1:2a:0a:b4:ad:76:20:02:62:e6:aa:22:78:42:
13:07:7e:8e:a2:2a:0a:f0:db:86:ef:75:7e:08:ca:
6a:42:9c:87:29:4b:b6:71:5d:c4:5c:ce:44:23:62:
ec:19:ed:10:35:1f:75:41:43:9e:b3:89:cc:e3:be:
23:d3:3d:8d:ac:f5:e7:1f:d8:73:60:2e:9e:01:8c:
e9:55:5a:ec:79:81:a1:66:a0:aa:ea:a1:a0:19:db:
b8:43:27:cf:f6:66:5b:5b:c6:12:b1:64:53:37:d7:
4f:83:f6:80:a5:c5:f4:cc:c4:42:5e:28:99:f1:35:
6f:b3:6e:5c:df:52:f7:12:ee:2a:4e:02:e3:b3:de:
de:09:fb:79:59:0c:4e:2b:85:a2:dd:35:f1:9a:c9:
c4:86:ba:5c:e7:cd:fa:58:5e:36:70:ee:37:af:63:
6b:ad:e3:11:49:fb:ad:ab:15:ea:7d:56:c7:03:7a:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:B3:A5:35:D1:AA:2C:C8:7D:E3:3C:26:B8:32:E3:9C:CD:1F:AA
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/6B79412E21CE11ECAB78C645D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:9f:b5:5e:f1:1f:b6:9d:c9:9e:ef:d8:5f:4a:34:4d:e6:8a:
21:95:d6:b1:8d:2b:a3:85:c0:dc:68:ff:3c:22:f4:af:35:0c:
fd:58:f0:d1:cd:f6:97:cc:a4:6d:34:6e:82:8c:00:93:a5:ac:
29:33:9f:28:65:02:0e:38:e5:29:f0:b8:c6:8c:02:3b:66:c9:
1a:c2:9e:07:65:3e:bb:cb:e2:0e:b6:e2:cd:bd:26:12:12:95:
e8:c5:ea:c1:52:0f:c3:3b:92:17:a7:47:9f:3e:0f:74:b9:59:
0c:32:70:8e:1a:55:7a:23:f8:5a:f0:6e:08:95:d3:73:8a:91:
d9:22:39:26:ca:24:bd:68:ce:ed:33:cd:3b:bd:12:11:8b:22:
72:ae:0e:e8:67:cf:ac:6a:1d:79:33:90:df:1f:9b:24:6a:22:
ad:42:1a:54:8f:a5:17:30:3c:13:78:84:0f:75:81:18:e1:d9:
1d:3a:4e:fd:19:79:fe:50:e3:96:58:65:4e:d7:a5:1f:e9:cf:
d4:a6:27:4f:d6:de:c2:d1:70:40:d8:08:71:4a:67:a6:78:82:
66:cf:f8:0e:5b:03:a0:63:8b:c3:93:69:a7:a3:ff:17:b8:b9:
e8:93:48:2f:20:2d:6b:e9:11:c3:59:56:08:60:d8:a2:c6:2f:
d6:4b:ac:64
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYy
MUMwNkFGMTEwLwYDVQQFEygxREQxNkZENjhCRkY3Q0FCMUFCOTFDNTVEQTYxRkMw
Q0RGRjQxNzQzMB4XDTIxMDkzMDA5MTEzNloXDTIzMDkzMDA5MTEzNlowGDEWMBQG
A1UEAwwNNjE1NTdmNGItMzRlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOqkGGG2sjw2aYpj7YQcjo+fA6YD2NWGgRvEMwUlEtfE1dsawyUboRsfXFJP
4nlq2oLHryS9EHMtnEDpNX7GUydUviz+4+970mcysfEqCrStdiACYuaqInhCEwd+
jqIqCvDbhu91fgjKakKchylLtnFdxFzORCNi7BntEDUfdUFDnrOJzOO+I9M9jaz1
5x/Yc2AungGM6VVa7HmBoWagquqhoBnbuEMnz/ZmW1vGErFkUzfXT4P2gKXF9MzE
Ql4omfE1b7NuXN9S9xLuKk4C47Pe3gn7eVkMTiuFot018ZrJxIa6XOfN+lheNnDu
N69ja63jEUn7rasV6n1WxwN6Y8UCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRUYLOl
NdGqLMh94zwmuDLjnM0fqjAfBgNVHSMEGDAWgBQd0W/Wi/98qxq5HFXaYfwM3/QX
QzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhBMDE0Q0UvSGRGdjFv
dl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvNkI3OTQxMkUyMUNFMTFFQ0FCNzhDNjQ1RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGaMSDANBgkqhkiG9w0BAQsF
AAOCAQEAsZ+1XvEftp3Jnu/YX0o0TeaKIZXWsY0ro4XA3Gj/PCL0rzUM/Vjw0c32
l8ykbTRugowAk6WsKTOfKGUCDjjlKfC4xowCO2bJGsKeB2U+u8viDrbizb0mEhKV
6MXqwVIPwzuSF6dHnz4PdLlZDDJwjhpVeiP4WvBuCJXTc4qR2SI5JsokvWjO7TPN
O70SEYsicq4O6GfPrGodeTOQ3x+bJGoirUIaVI+lFzA8E3iED3WBGOHZHTpO/Rl5
/lDjllhlTtelH+nP1KYnT9bewtFwQNgIcUpnpniCZs/4DlsDoGOLw5Npp6P/F7i5
6JNILyAta+kRw1lWCGDYosYv1kusZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org