Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
File: A6CBD14621CA11EC8BE41840D8A014CE.roa (raw, json)
Hash identifier: 6bVIwAA7c+QdDat3w72O8KEr1+WW/JiTHcBbydb5nE8=
Subject key identifier: 0D:F9:D7:65:2D:73:FD:97:C6:9C:C3:5A:C4:43:16:AB:73:A8:8B:59
Certificate issuer: /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial: 0F
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
Signing time: Thu 30 Sep 2021 08:44:41 +0000
ROA not before: Thu 30 Sep 2021 08:44:37 +0000
ROA not after: Sat 30 Sep 2023 08:44:37 +0000
asID: 328327
IP address blocks: 102.140.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Validity
Not Before: Sep 30 08:44:37 2021 GMT
Not After : Sep 30 08:44:37 2023 GMT
Subject: CN=615578f9-7d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:4f:08:fd:d8:4f:25:70:9a:e8:ec:23:6b:
8c:70:9c:b9:0d:b7:c6:5d:4a:95:50:77:48:c9:76:
f3:8b:03:72:8e:d9:62:ad:bb:4e:d6:04:fd:12:ed:
76:82:dc:e2:55:70:da:7e:dc:f5:b2:8e:44:9b:f8:
0c:79:45:bd:33:55:96:c6:91:4c:89:f0:dd:17:4a:
4f:8d:fe:d9:e0:7f:12:1a:b6:36:5a:99:45:55:6e:
e1:00:b5:df:be:c7:a6:6b:7c:a6:d8:f3:63:5a:2f:
69:39:6a:f1:03:50:4e:7a:9e:8a:85:a0:31:25:06:
e0:33:1a:2d:96:c8:ed:ea:0a:35:37:64:46:9b:95:
8b:8d:fe:a7:1b:8f:16:5e:2a:c4:ca:7c:63:be:9f:
f1:89:c7:29:76:b1:bb:21:a0:38:8e:33:ee:3d:10:
f0:ae:b4:35:48:01:af:04:e9:bb:40:c6:a0:83:b9:
39:6f:ef:b8:cf:5c:1b:4c:4b:71:57:6b:ed:60:04:
68:ba:af:ad:bb:0e:61:c0:d8:5e:f8:90:85:95:90:
46:bf:79:f9:c0:ae:3f:16:1f:bb:38:09:b2:e6:da:
4a:ca:56:c5:15:d3:7e:52:03:e1:cb:65:17:66:78:
c1:7e:03:d4:90:6f:b9:80:38:7b:c5:3c:22:37:30:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:D7:65:2D:73:FD:97:C6:9C:C3:5A:C4:43:16:AB:73:A8:8B:59
X509v3 Authority Key Identifier:
keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/A6CBD14621CA11EC8BE41840D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.140.67.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5f:91:35:65:1b:53:33:45:e4:05:6d:cf:d7:18:92:37:dc:
87:d9:69:99:d5:73:e1:b7:a9:15:d0:6b:fe:ab:cf:99:22:35:
d8:51:dc:6f:3e:87:e7:9d:6c:10:bd:ea:44:f8:af:bb:01:14:
37:53:c2:80:ba:30:b0:22:df:3c:88:f9:66:b7:b4:7a:c2:7f:
98:e8:80:f7:3b:41:00:4e:8a:e9:27:64:18:59:ef:77:7f:f6:
1e:c8:54:fa:5f:b9:5d:a2:4f:c3:10:2d:73:16:9a:e9:8e:8d:
22:cd:76:6d:08:ca:34:75:b9:19:df:dc:7c:2b:6e:4e:7a:1f:
78:8a:1e:90:7b:a2:9f:80:b8:6c:a2:a6:f8:53:13:58:52:96:
e9:3c:49:ff:6f:c2:56:03:3b:a3:3e:8a:f6:07:d9:3a:3e:49:
82:57:82:7c:a9:57:dd:67:5d:96:4a:9d:45:a4:a9:d8:f6:12:
6f:a2:f7:a4:f3:d2:90:3c:08:45:19:7e:56:75:72:12:06:cf:
e2:f6:16:06:2a:85:f5:0b:c8:f4:03:00:23:cf:b8:e9:05:ab:
d5:38:f4:45:51:ba:45:f0:d8:0c:19:72:14:69:90:37:b7:a4:
5b:80:4c:ea:e6:55:0a:8b:7c:37:3a:41:c0:2a:21:06:4d:7a:
74:aa:0c:1e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYy
MUMwNkFGMTEwLwYDVQQFEygxREQxNkZENjhCRkY3Q0FCMUFCOTFDNTVEQTYxRkMw
Q0RGRjQxNzQzMB4XDTIxMDkzMDA4NDQzN1oXDTIzMDkzMDA4NDQzN1owGDEWMBQG
A1UEAwwNNjE1NTc4ZjktN2Q2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOqhTwj92E8lcJro7CNrjHCcuQ23xl1KlVB3SMl284sDco7ZYq27TtYE/RLt
doLc4lVw2n7c9bKORJv4DHlFvTNVlsaRTInw3RdKT43+2eB/Ehq2NlqZRVVu4QC1
377Hpmt8ptjzY1ovaTlq8QNQTnqeioWgMSUG4DMaLZbI7eoKNTdkRpuVi43+pxuP
Fl4qxMp8Y76f8YnHKXaxuyGgOI4z7j0Q8K60NUgBrwTpu0DGoIO5OW/vuM9cG0xL
cVdr7WAEaLqvrbsOYcDYXviQhZWQRr95+cCuPxYfuzgJsubaSspWxRXTflID4ctl
F2Z4wX4D1JBvuYA4e8U8IjcwiO0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQN+ddl
LXP9l8acw1rEQxarc6iLWTAfBgNVHSMEGDAWgBQd0W/Wi/98qxq5HFXaYfwM3/QX
QzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhBMDE0Q0UvSGRGdjFv
dl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvQTZDQkQxNDYyMUNBMTFFQzhCRTQxODQwRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGaMQzANBgkqhkiG9w0BAQsF
AAOCAQEAml+RNWUbUzNF5AVtz9cYkjfch9lpmdVz4bepFdBr/qvPmSI12FHcbz6H
551sEL3qRPivuwEUN1PCgLowsCLfPIj5Zre0esJ/mOiA9ztBAE6K6SdkGFnvd3/2
HshU+l+5XaJPwxAtcxaa6Y6NIs12bQjKNHW5Gd/cfCtuTnofeIoekHuin4C4bKKm
+FMTWFKW6TxJ/2/CVgM7oz6K9gfZOj5JgleCfKlX3WddlkqdRaSp2PYSb6L3pPPS
kDwIRRl+VnVyEgbP4vYWBiqF9QvI9AMAI8+46QWr1Tj0RVG6RfDYDBlyFGmQN7ek
W4BM6uZVCot8NzpBwCohBk16dKoMHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org