Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
File: 26F4A978776A11EEAC03E77A4AD9E6FC.roa (raw, json)
Hash identifier: vQvaCr3nSkDbg9wO3IGX6zUZCIaraYiKCGY0D+dvWw4=
Subject key identifier: 38:09:7E:BA:C8:E6:37:42:3F:14:DD:72:7B:73:C9:11:48:3E:5F:CC
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0423
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 21:20:30 +0000
ROA not before: Mon 30 Oct 2023 21:20:27 +0000
ROA not after: Sun 19 Nov 2023 21:20:27 +0000
asID: 209242
IP address blocks: 102.177.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 30 21:20:27 2023 GMT
Not After : Nov 19 21:20:27 2023 GMT
Subject: CN=65401e1e-ffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:77:08:9c:7d:14:3f:19:19:74:d3:80:8a:
19:39:24:17:37:05:79:c1:95:e9:e9:be:4b:53:24:
b8:aa:0a:ac:5d:74:06:d3:9a:29:a6:43:a6:48:fa:
46:a9:71:ee:3d:d5:53:d2:0d:cc:a1:a1:08:22:0b:
26:29:c8:ed:d9:85:82:a3:18:d9:6c:f1:ee:1a:d3:
13:0b:d1:e4:2f:fa:bf:20:7a:7a:28:ae:b5:de:58:
c6:78:43:4a:bb:03:7b:10:25:34:68:d9:63:85:2d:
5e:d3:34:d4:1f:cd:c6:45:13:eb:04:47:ac:5e:a0:
bf:a0:25:e0:f8:db:c0:3a:7a:2a:43:01:66:2b:83:
3b:33:ef:b1:ba:5e:e4:a9:95:8a:a7:5a:a6:8b:5c:
99:45:7e:94:7f:70:ce:dc:01:d6:78:86:bf:31:e1:
96:aa:02:87:7d:11:5b:0b:01:e1:db:3a:c4:50:40:
fb:7d:6b:dd:a7:8b:bc:8d:f7:cf:87:8a:4d:21:89:
a0:df:2f:ff:55:b6:6f:dc:02:66:81:1c:ba:df:95:
07:fb:d0:ac:e6:96:cb:d9:0d:1e:b4:2a:46:aa:6e:
d4:ce:da:ab:13:8b:cb:de:73:4e:bd:d8:4a:43:c1:
16:f8:d2:e2:4f:22:cc:b5:bc:91:8b:1f:db:f7:2a:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:7E:BA:C8:E6:37:42:3F:14:DD:72:7B:73:C9:11:48:3E:5F:CC
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/26F4A978776A11EEAC03E77A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ee:94:e9:f0:06:63:e8:9d:6c:26:44:d7:d2:b9:47:89:87:
e1:59:6a:09:4e:4d:f6:ce:d7:c6:d5:80:55:62:18:fd:5e:9e:
32:0e:b6:e8:08:de:b8:0e:77:b4:f3:d2:e3:fe:a4:03:a5:87:
85:c4:b9:43:af:29:5e:61:37:81:5c:9f:28:9c:89:3d:bb:4a:
d6:03:91:65:ee:d8:61:eb:f8:5a:0d:4b:e4:9e:a4:86:bc:1e:
9d:8c:8a:c9:a9:51:3e:ee:4c:fc:c0:50:16:d1:c4:54:28:09:
00:f7:7f:14:cd:bc:58:62:1d:66:27:fc:ce:c5:bd:9a:6a:cc:
38:d3:0a:a0:39:62:29:00:5a:33:47:52:d1:f8:b9:c2:7b:76:
b2:84:c4:54:10:00:c6:fa:e7:13:2d:8a:50:f6:76:43:00:27:
1b:ea:41:cf:69:d7:56:e1:b6:33:b7:76:7c:a9:6c:b9:87:15:
2d:55:60:0a:59:91:b5:a0:99:13:49:6b:2e:d0:4b:33:19:7e:
e5:7c:88:cb:d2:26:d9:51:88:a3:ad:37:6d:f8:12:24:b0:8a:
13:ed:ed:6c:fc:e6:6b:f1:c4:af:6d:d3:a2:ed:d4:5a:b6:59:
b2:dd:9a:2e:15:8a:8e:41:76:6f:5b:91:8d:d9:72:b0:ac:c2:
12:3c:76:1d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMzEwMzAyMTIwMjdaFw0yMzExMTkyMTIwMjdaMBgxFjAU
BgNVBAMTDTY1NDAxZTFlLWZmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCJ3cInH0UPxkZdNOAihk5JBc3BXnBlenpvktTJLiqCqxddAbTmimmQ6ZI
+kapce491VPSDcyhoQgiCyYpyO3ZhYKjGNls8e4a0xML0eQv+r8genoorrXeWMZ4
Q0q7A3sQJTRo2WOFLV7TNNQfzcZFE+sER6xeoL+gJeD428A6eipDAWYrgzsz77G6
XuSplYqnWqaLXJlFfpR/cM7cAdZ4hr8x4ZaqAod9EVsLAeHbOsRQQPt9a92ni7yN
98+Hik0hiaDfL/9Vtm/cAmaBHLrflQf70KzmlsvZDR60KkaqbtTO2qsTi8vec069
2EpDwRb40uJPIsy1vJGLH9v3KkYnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOAl+
usjmN0I/FN1ye3PJEUg+X8wwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzI2RjRBOTc4Nzc2QTExRUVBQzAzRTc3QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbAwDQYJKoZIhvcNAQEL
BQADggEBAMbulOnwBmPonWwmRNfSuUeJh+FZaglOTfbO18bVgFViGP1enjIOtugI
3rgOd7Tz0uP+pAOlh4XEuUOvKV5hN4FcnyiciT27StYDkWXu2GHr+FoNS+SepIa8
Hp2MismpUT7uTPzAUBbRxFQoCQD3fxTNvFhiHWYn/M7FvZpqzDjTCqA5YikAWjNH
UtH4ucJ7drKExFQQAMb65xMtilD2dkMAJxvqQc9p11bhtjO3dnypbLmHFS1VYApZ
kbWgmRNJay7QSzMZfuV8iMvSJtlRiKOtN234EiSwihPt7Wz85mvxxK9t06Lt1Fq2
WbLdmi4Vio5Bdm9bkY3ZcrCswhI8dh0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org