Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3A1F759A2DB611ED8F758DABF1222468.roa
File: 3A1F759A2DB611ED8F758DABF1222468.roa (raw, json)
Hash identifier: vrfGTxA7WR7Zgfk+P/7Wy3xErHDR5Ymf0Vokfrchl1o=
Subject key identifier: 3E:47:4A:01:BB:CB:AF:49:6E:8A:20:28:DD:FE:4B:4C:71:EF:DD:0D
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0223
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3A1F759A2DB611ED8F758DABF1222468.roa
Signing time: Tue 06 Sep 2022 07:33:40 +0000
ROA not before: Tue 06 Sep 2022 07:33:36 +0000
ROA not after: Mon 31 Jul 2023 07:33:36 +0000
asID: 22724
IP address blocks: 102.177.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 07:33:36 2022 GMT
Not After : Jul 31 07:33:36 2023 GMT
Subject: CN=6316f7d4-70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:90:c8:52:d9:74:27:39:82:d7:90:0e:a7:
cf:10:8a:7b:87:99:d3:a8:c0:37:f9:e3:e8:dc:17:
8e:45:2e:d5:c0:0a:ed:d2:32:97:28:72:e7:bb:52:
ac:e2:72:4a:d6:c5:c3:02:d5:37:12:78:7f:36:1a:
c4:5d:70:4a:b8:66:22:7b:42:98:68:e9:af:78:47:
4a:06:f2:34:7d:21:4c:f4:54:29:b9:f7:cb:fa:66:
dc:ed:63:5e:57:86:14:36:1e:02:db:75:89:e6:5a:
10:d2:ef:9a:ba:80:fb:80:c5:b9:01:a4:8b:96:b1:
4e:db:51:96:cb:fa:97:e1:10:0f:db:6b:2d:a3:38:
17:b4:40:c1:e8:40:90:59:96:6f:68:16:7c:ff:30:
9e:28:4b:6f:48:a8:f2:02:b5:bd:20:a3:da:fc:77:
73:bd:82:1b:18:e7:ed:5e:03:11:b2:91:15:cc:98:
f7:0d:fb:4c:e9:c2:dc:91:cb:ff:7e:0d:9e:0d:4f:
2c:26:06:7b:c0:e5:f8:20:af:f5:aa:d4:7c:57:5f:
e8:6d:1d:71:45:19:13:08:bc:e6:a6:67:e7:0b:23:
df:b1:d1:23:c5:4d:ab:fc:0b:69:91:bf:51:21:be:
1c:ae:b2:76:d6:f8:11:32:1a:d1:d3:68:34:56:da:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:4A:01:BB:CB:AF:49:6E:8A:20:28:DD:FE:4B:4C:71:EF:DD:0D
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3A1F759A2DB611ED8F758DABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c6:2e:7d:ff:e4:64:be:65:c5:bd:34:c9:3b:48:1d:20:d1:
72:3f:e6:ac:60:6d:24:bf:71:30:dd:6d:e4:4c:2a:e2:05:88:
e5:9c:b0:be:e9:4e:71:5a:89:0a:d2:ea:ff:2b:65:4f:d3:74:
36:10:e6:b4:a6:66:60:1f:3b:2e:20:90:81:35:42:83:50:04:
4f:bf:ac:d1:92:14:90:6e:9e:be:cf:f7:6e:8b:27:73:eb:d3:
b9:df:d3:f4:06:d2:5f:9c:28:c1:61:0e:6d:f7:52:4f:43:63:
62:9b:59:14:ec:77:a1:32:37:d0:09:60:05:25:7d:fb:89:1a:
50:37:f0:b2:62:40:00:92:07:ed:3b:91:fc:4a:7c:22:52:9f:
7d:46:15:9a:19:c5:a1:58:42:89:c4:42:e8:58:46:a1:d8:a8:
8c:68:80:70:07:79:7c:c7:93:49:aa:22:5f:4c:7c:c4:81:d0:
17:08:9b:84:a5:ef:40:68:66:45:a5:74:6f:4c:2f:28:45:0e:
09:7d:6d:14:f5:d8:59:66:60:8a:35:cb:bb:e2:73:76:64:2c:
81:69:96:20:43:82:6d:ea:9d:92:00:59:1c:cf:1a:e5:4d:fd:
a9:f3:df:7f:cf:18:28:29:b8:69:a6:44:af:2d:71:da:7b:d8:
f1:31:3a:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMjA5MDYwNzMzMzZaFw0yMzA3MzEwNzMzMzZaMBgxFjAU
BgNVBAMMDTYzMTZmN2Q0LTcwZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnP5DIUtl0JzmC15AOp88QinuHmdOowDf54+jcF45FLtXACu3SMpcocue7
UqzickrWxcMC1TcSeH82GsRdcEq4ZiJ7Qpho6a94R0oG8jR9IUz0VCm598v6Ztzt
Y15XhhQ2HgLbdYnmWhDS75q6gPuAxbkBpIuWsU7bUZbL+pfhEA/bay2jOBe0QMHo
QJBZlm9oFnz/MJ4oS29IqPICtb0go9r8d3O9ghsY5+1eAxGykRXMmPcN+0zpwtyR
y/9+DZ4NTywmBnvA5fggr/Wq1HxXX+htHXFFGRMIvOamZ+cLI9+x0SPFTav8C2mR
v1EhvhyusnbW+BEyGtHTaDRW2s9BAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPkdK
AbvLr0luiiAo3f5LTHHv3Q0wHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzNBMUY3NTlBMkRCNjExRUQ4Rjc1OERBQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsaAwDQYJKoZIhvcNAQEL
BQADggEBACHGLn3/5GS+ZcW9NMk7SB0g0XI/5qxgbSS/cTDdbeRMKuIFiOWcsL7p
TnFaiQrS6v8rZU/TdDYQ5rSmZmAfOy4gkIE1QoNQBE+/rNGSFJBunr7P926LJ3Pr
07nf0/QG0l+cKMFhDm33Uk9DY2KbWRTsd6EyN9AJYAUlffuJGlA38LJiQACSB+07
kfxKfCJSn31GFZoZxaFYQonEQuhYRqHYqIxogHAHeXzHk0mqIl9MfMSB0BcIm4Sl
70BoZkWldG9MLyhFDgl9bRT12FlmYIo1y7vic3ZkLIFpliBDgm3qnZIAWRzPGuVN
/anz33/PGCgpuGmmRK8tcdp72PExOpo=
-----END CERTIFICATE-----
Generated at Mon Jul 31 15:47:36 2023 by rpki-client on console-fra.rpki-client.org