Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D902B61A9B4611ED8E6325B2F1222468.roa
File: D902B61A9B4611ED8E6325B2F1222468.roa (raw, json)
Hash identifier: qodOqYl2qS6LDtRWvK/JXr+upYeyeAUmL1B9zqJWhhE=
Subject key identifier: C8:AF:04:6E:B3:68:95:C9:5B:D2:2D:52:F8:10:C6:0D:0B:1B:82:49
Certificate issuer: /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial: 06
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D902B61A9B4611ED8E6325B2F1222468.roa
Signing time: Mon 23 Jan 2023 17:53:31 +0000
ROA not before: Mon 23 Jan 2023 17:53:27 +0000
ROA not after: Tue 23 Jan 2024 17:53:27 +0000
asID: 329027
IP address blocks: 102.213.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Validity
Not Before: Jan 23 17:53:27 2023 GMT
Not After : Jan 23 17:53:27 2024 GMT
Subject: CN=63cec99b-680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:4f:2e:a5:43:fa:53:2a:c4:be:d0:61:92:
10:d9:e7:78:69:e7:ac:6e:be:46:f5:29:39:fc:a0:
6a:84:41:dc:6e:91:fc:2d:76:43:72:ca:7c:a5:66:
05:a5:4f:ab:0b:24:7b:75:ba:0f:51:df:99:43:64:
49:e4:91:0c:3a:31:a3:e6:45:b0:a5:b1:4c:56:98:
50:87:26:74:a3:54:76:4c:fa:3d:6b:1e:8d:a4:c7:
0e:23:ff:f0:c9:e6:ac:42:43:01:7d:bc:40:00:cc:
f3:e9:7d:a6:44:15:7e:e8:73:df:b1:f6:e5:05:87:
ef:be:fd:53:53:9c:97:0a:26:1b:d7:1e:22:70:bf:
23:b7:0d:75:75:1d:a0:ba:9c:c2:29:8f:06:8d:64:
41:a9:7e:46:0f:4c:9c:a1:3f:c4:a1:95:a4:1a:e8:
d3:87:b9:56:63:01:26:22:07:e2:d7:85:c7:e5:bb:
04:b5:8f:46:4b:c9:c2:a5:3d:d7:40:17:fe:0a:6e:
e2:b1:5e:43:f1:9d:14:c0:bf:84:bb:de:bd:22:62:
3f:f2:84:a2:b1:c8:dd:ef:fa:ed:19:d0:d6:56:ce:
6a:e0:0f:04:df:e8:cf:07:41:63:0c:c7:d4:fd:fd:
2c:53:9d:15:f1:1a:10:d2:5a:e8:a2:bb:6f:34:f0:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:04:6E:B3:68:95:C9:5B:D2:2D:52:F8:10:C6:0D:0B:1B:82:49
X509v3 Authority Key Identifier:
keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/D902B61A9B4611ED8E6325B2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.213.44.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ca:cb:39:c8:e1:89:60:ef:20:a9:a9:c5:c5:52:76:a4:31:
e7:46:3a:8f:9f:a6:92:93:e3:33:36:bf:4d:97:4d:1c:b0:25:
c1:d3:f3:ca:72:a7:1e:fe:fb:71:aa:ae:40:71:da:83:15:68:
c4:cc:ea:f0:0e:34:1c:1d:03:57:15:fb:7c:c2:e3:8a:f6:06:
93:87:b2:47:d8:26:31:17:48:86:03:6c:43:a0:78:6d:ab:90:
2f:c5:47:77:03:56:f5:47:cd:57:8f:5d:02:8f:43:ee:06:ad:
2b:3a:16:e7:7c:3b:2c:c3:c1:2b:1c:78:58:38:ad:19:a8:3d:
72:a7:b9:01:c0:70:09:28:6f:e6:c8:95:61:98:24:61:46:54:
1c:0f:db:be:1a:9b:eb:2b:64:17:ad:e9:20:f8:0c:d1:b7:d6:
79:9e:7e:45:7b:ec:a0:73:3e:c9:82:12:4c:b1:45:1a:9c:89:
09:ad:ac:df:26:40:2b:d6:b9:f6:03:e1:05:10:11:3a:81:e5:
36:7b:41:29:b6:9c:95:15:8e:bf:51:e0:23:bf:e3:4b:7f:ed:
17:52:0d:e1:23:76:25:c0:5f:ae:b6:3c:93:d6:fb:4d:bd:86:
f6:a6:a6:65:19:35:83:10:de:f4:12:5b:5b:3b:38:90:87:1f:
93:24:e6:d6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY0
NEZGMEFGMTEwLwYDVQQFEyhFODlFRkUzNTFFNjAyNTJBMjYyNTZEOERFRThGNjlF
NzcyNENBRDVBMB4XDTIzMDEyMzE3NTMyN1oXDTI0MDEyMzE3NTMyN1owGDEWMBQG
A1UEAwwNNjNjZWM5OWItNjgwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANhRTy6lQ/pTKsS+0GGSENnneGnnrG6+RvUpOfygaoRB3G6R/C12Q3LKfKVm
BaVPqwske3W6D1HfmUNkSeSRDDoxo+ZFsKWxTFaYUIcmdKNUdkz6PWsejaTHDiP/
8MnmrEJDAX28QADM8+l9pkQVfuhz37H25QWH7779U1OclwomG9ceInC/I7cNdXUd
oLqcwimPBo1kQal+Rg9MnKE/xKGVpBro04e5VmMBJiIH4teFx+W7BLWPRkvJwqU9
10AX/gpu4rFeQ/GdFMC/hLvevSJiP/KEorHI3e/67RnQ1lbOauAPBN/ozwdBYwzH
1P39LFOdFfEaENJa6KK7bzTwfocCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTIrwRu
s2iVyVvSLVL4EMYNCxuCSTAfBgNVHSMEGDAWgBTonv41HmAlKiYlbY3uj2nnckyt
WjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDRGRjAvNzQ1RjYyNDA5QjQ1MTFFRDkzQzk1MEFFRjEyMjI0NjgvNko3LU5S
NWdKU29tSlcyTjdvOXA1M0pNclZvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNko3LU5SNWdKU29tSlcyTjdvOXA1M0pNclZvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDRGRjAvNzQ1RjYyNDA5QjQ1MTFFRDkzQzk1MEFFRjEy
MjI0NjgvRDkwMkI2MUE5QjQ2MTFFRDhFNjMyNUIyRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbVLDANBgkqhkiG9w0BAQsF
AAOCAQEAF8rLOcjhiWDvIKmpxcVSdqQx50Y6j5+mkpPjMza/TZdNHLAlwdPzynKn
Hv77caquQHHagxVoxMzq8A40HB0DVxX7fMLjivYGk4eyR9gmMRdIhgNsQ6B4bauQ
L8VHdwNW9UfNV49dAo9D7gatKzoW53w7LMPBKxx4WDitGag9cqe5AcBwCShv5siV
YZgkYUZUHA/bvhqb6ytkF63pIPgM0bfWeZ5+RXvsoHM+yYISTLFFGpyJCa2s3yZA
K9a59gPhBRAROoHlNntBKbaclRWOv1HgI7/jS3/tF1IN4SN2JcBfrrY8k9b7Tb2G
9qamZRk1gxDe9BJbWzs4kIcfkyTm1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org