Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
File: 8D9276EA21CE11ECBAEDFD45D8A014CE.roa (raw, json)
Hash identifier: tzlJZnHp53vL9Bm6Hn6zdq9LWu8AdbV/WQ2elYKEU4E=
Subject key identifier: D4:D7:CD:ED:4D:67:9A:E3:11:DC:E0:C1:C8:AB:66:35:D9:E9:BF:C6
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 1B
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
Signing time: Thu 30 Sep 2021 09:12:36 +0000
ROA not before: Thu 30 Sep 2021 09:12:33 +0000
ROA not after: Sat 30 Sep 2023 09:12:33 +0000
asID: 328327
IP address blocks: 102.140.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 09:12:33 2021 GMT
Not After : Sep 30 09:12:33 2023 GMT
Subject: CN=61557f84-be81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:a9:0e:7f:db:fe:08:90:d9:c9:1b:7a:c1:
60:17:21:59:a9:20:1b:04:1c:07:8f:0b:70:1e:d8:
0c:3b:f3:f9:a7:e6:6f:5b:84:ec:34:f4:4e:8f:4e:
e3:37:b9:d6:c3:d4:f4:bd:eb:c7:19:79:35:56:8d:
2e:3b:be:1a:21:07:8b:79:7e:a5:bb:be:05:6e:d7:
ad:96:b9:da:7e:09:c6:2c:5b:e7:77:93:ea:45:82:
c1:8b:33:6b:fd:c5:de:5a:a2:2a:d0:64:7a:cc:6d:
b1:a2:84:a0:9e:8e:48:09:6e:a7:b9:28:1d:d2:13:
85:ab:6a:50:81:4f:1d:8a:ab:71:5b:23:a4:16:f2:
5b:6f:0e:6f:fc:a0:53:88:9c:de:1a:4c:b4:d0:94:
b9:34:2c:ee:f1:df:f8:e2:11:52:b2:fd:bd:98:56:
7d:00:4c:ca:80:74:39:ee:bd:1f:4b:4e:b8:93:77:
a0:ba:4f:b1:15:ea:e3:c3:5f:72:bf:7b:4c:8d:7a:
d7:97:f2:11:cd:3f:01:91:0d:b6:2b:d9:19:07:a9:
cf:a3:f5:26:f1:d8:e1:3e:2b:7e:c3:48:df:4e:93:
7b:da:12:c7:a7:c4:64:e5:06:0a:4c:89:08:f8:7b:
fb:7d:62:01:fe:6b:5c:da:a0:ac:7a:40:a1:ef:bb:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D7:CD:ED:4D:67:9A:E3:11:DC:E0:C1:C8:AB:66:35:D9:E9:BF:C6
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/8D9276EA21CE11ECBAEDFD45D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.74.0/24
Signature Algorithm: sha256WithRSAEncryption
41:36:ce:d5:47:b7:ae:91:af:29:ee:4e:76:67:bd:29:54:71:
33:9d:ec:45:00:e2:5e:68:d1:8b:ff:71:96:7c:62:74:e1:d5:
78:94:f5:43:21:1d:53:ce:93:64:5b:47:de:67:42:1f:cb:f4:
f3:70:bf:94:ac:7d:b4:0a:93:f6:61:db:a1:8e:ec:26:61:28:
2b:92:92:3e:cd:a1:59:ef:92:88:47:00:a7:35:6c:4a:63:e8:
50:3a:61:ab:64:f1:86:84:ca:73:1a:4f:1a:74:5b:f8:c3:f9:
a4:28:f4:95:8e:08:94:bf:4d:64:dc:bc:04:64:a9:90:42:58:
4d:d1:81:27:b9:f5:a0:f1:77:34:aa:0b:29:26:3e:e0:82:42:
5e:f9:20:ec:51:8d:39:55:a6:28:82:d8:1e:61:73:d7:66:44:
1a:fb:1b:53:ce:2e:9a:51:80:78:b0:29:22:81:0a:ad:b1:59:
54:09:37:3c:cb:9d:54:1e:74:7e:12:90:2c:83:59:d1:1f:ac:
8c:3f:ab:26:ca:fb:58:68:bf:72:e1:b0:f4:29:8c:40:6f:19:
0a:8e:11:f4:57:51:73:30:51:13:1a:16:b8:9a:6b:83:b9:dd:
a5:7e:7c:3b:65:02:e4:05:93:6f:88:81:62:2c:e8:9f:45:cc:
2e:da:4e:74
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYy
MUMwNkFGMTEwLwYDVQQFEygxREQxNkZENjhCRkY3Q0FCMUFCOTFDNTVEQTYxRkMw
Q0RGRjQxNzQzMB4XDTIxMDkzMDA5MTIzM1oXDTIzMDkzMDA5MTIzM1owGDEWMBQG
A1UEAwwNNjE1NTdmODQtYmU4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOAmqQ5/2/4IkNnJG3rBYBchWakgGwQcB48LcB7YDDvz+afmb1uE7DT0To9O
4ze51sPU9L3rxxl5NVaNLju+GiEHi3l+pbu+BW7XrZa52n4Jxixb53eT6kWCwYsz
a/3F3lqiKtBkesxtsaKEoJ6OSAlup7koHdIThatqUIFPHYqrcVsjpBbyW28Ob/yg
U4ic3hpMtNCUuTQs7vHf+OIRUrL9vZhWfQBMyoB0Oe69H0tOuJN3oLpPsRXq48Nf
cr97TI1615fyEc0/AZENtivZGQepz6P1JvHY4T4rfsNI306Te9oSx6fEZOUGCkyJ
CPh7+31iAf5rXNqgrHpAoe+7tlMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTU183t
TWea4xHc4MHIq2Y12em/xjAfBgNVHSMEGDAWgBQd0W/Wi/98qxq5HFXaYfwM3/QX
QzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhBMDE0Q0UvSGRGdjFv
dl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvOEQ5Mjc2RUEyMUNFMTFFQ0JBRURGRDQ1RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGaMSjANBgkqhkiG9w0BAQsF
AAOCAQEAQTbO1Ue3rpGvKe5Odme9KVRxM53sRQDiXmjRi/9xlnxidOHVeJT1QyEd
U86TZFtH3mdCH8v083C/lKx9tAqT9mHboY7sJmEoK5KSPs2hWe+SiEcApzVsSmPo
UDphq2TxhoTKcxpPGnRb+MP5pCj0lY4IlL9NZNy8BGSpkEJYTdGBJ7n1oPF3NKoL
KSY+4IJCXvkg7FGNOVWmKILYHmFz12ZEGvsbU84umlGAeLApIoEKrbFZVAk3PMud
VB50fhKQLINZ0R+sjD+rJsr7WGi/cuGw9CmMQG8ZCo4R9FdRczBRExoWuJprg7nd
pX58O2UC5AWTb4iBYizon0XMLtpOdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org