Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4BCC2B9E391C11EFBC84FA4B762E951A.roa
File: 4BCC2B9E391C11EFBC84FA4B762E951A.roa (raw, json)
Hash identifier: FJcMaLvhBrnFTxOZCCbDi6OaNGJR9pHQ3Cr8ncnKkt4=
Subject key identifier: 6F:31:A0:52:7E:70:39:9C:02:2E:89:17:47:AE:35:B3:2C:36:79:AE
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 054D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4BCC2B9E391C11EFBC84FA4B762E951A.roa
Signing time: Wed 03 Jul 2024 09:11:57 +0000
ROA not before: Wed 03 Jul 2024 09:11:53 +0000
ROA not after: Sun 04 Aug 2024 09:11:53 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 3 09:11:53 2024 GMT
Not After : Aug 4 09:11:53 2024 GMT
Subject: CN=668515dc-f233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:56:34:64:a6:c7:63:11:5b:d3:a3:6b:1f:
90:cf:2c:ad:bc:1f:1c:7b:67:c7:9c:1f:22:f7:88:
2b:e6:06:89:1d:58:6a:79:6b:dd:fa:8a:a2:a7:38:
ae:4a:c9:33:9e:87:49:9d:b5:8c:63:5b:3d:a5:c7:
01:89:59:98:92:92:63:db:35:33:c2:84:7c:1f:4b:
48:38:6a:0a:55:10:c9:07:4e:7e:a2:86:6f:f6:88:
9a:66:9e:19:cc:d6:27:5b:8b:bb:dc:7a:eb:63:69:
82:c4:29:e2:3a:4b:34:cb:b7:57:07:24:a0:f0:54:
11:5c:95:e6:16:e6:c2:e3:a8:a4:2e:13:89:53:b6:
57:23:6f:f6:61:74:c1:86:8c:f6:1a:38:63:b2:b3:
d2:4c:f0:00:b6:12:72:85:fe:1e:1d:6e:e2:51:ef:
19:8d:99:f6:0b:4b:c1:f8:87:d9:fb:d2:50:b5:26:
7e:66:8f:32:72:fa:66:d5:c9:98:0a:42:8a:c5:09:
67:af:35:9b:47:a8:9c:b2:82:4d:a6:bd:75:dd:7d:
39:cf:19:3a:97:87:84:1f:42:7d:b9:84:8c:1a:80:
4f:5e:e8:70:17:24:ec:a1:af:bf:3a:c7:d7:72:1d:
f7:b4:6f:bb:23:d6:ff:77:4a:c2:48:43:15:27:18:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:A0:52:7E:70:39:9C:02:2E:89:17:47:AE:35:B3:2C:36:79:AE
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/4BCC2B9E391C11EFBC84FA4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5e:e2:0a:be:b5:4f:66:9d:68:13:af:4e:3d:1e:8c:27:b8:
ff:c7:7a:c8:e9:7b:3c:bf:2a:eb:50:e8:e7:e8:0b:26:63:2c:
ad:6d:fc:c4:f9:c3:6d:bc:8c:e8:8a:cc:61:64:62:b4:11:f8:
75:79:96:0d:ad:00:29:bc:74:90:bd:1e:bc:22:87:81:e9:ca:
f0:8d:58:f4:92:89:80:14:97:25:9b:da:d6:18:2f:05:8f:da:
8e:19:d8:a0:1b:b0:a1:04:3f:1d:a2:87:e1:1a:d9:85:f5:f9:
2e:af:11:fc:07:54:2b:68:97:b3:5d:90:be:2f:af:05:f4:99:
11:9b:de:8b:ab:56:9d:54:d0:ab:04:08:ef:ae:76:77:01:18:
9c:fb:2b:d5:0c:d1:c9:e6:95:5b:b0:36:24:57:8f:92:35:17:
60:eb:46:0a:71:dd:41:c6:57:95:e0:e8:89:13:da:bf:93:c2:
b8:ee:7c:c1:dc:c5:1a:ea:3c:a9:ba:62:c4:64:01:0f:b3:84:
cf:eb:0b:16:36:65:0a:ed:3c:98:75:77:2c:b8:00:23:fc:f5:
fb:4c:f8:fa:e8:0a:d3:97:f2:dd:70:df:1f:30:86:65:9d:e7:
e8:3f:bd:1e:63:97:bc:10:04:2c:78:35:0a:f1:08:43:f2:0c:
f2:ec:98:de
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA3MDMwOTExNTNaFw0yNDA4MDQwOTExNTNaMBgxFjAU
BgNVBAMTDTY2ODUxNWRjLWYyMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSe1Y0ZKbHYxFb06NrH5DPLK28Hxx7Z8ecHyL3iCvmBokdWGp5a936iqKn
OK5KyTOeh0mdtYxjWz2lxwGJWZiSkmPbNTPChHwfS0g4agpVEMkHTn6ihm/2iJpm
nhnM1idbi7vceutjaYLEKeI6SzTLt1cHJKDwVBFcleYW5sLjqKQuE4lTtlcjb/Zh
dMGGjPYaOGOys9JM8AC2EnKF/h4dbuJR7xmNmfYLS8H4h9n70lC1Jn5mjzJy+mbV
yZgKQorFCWevNZtHqJyygk2mvXXdfTnPGTqXh4QfQn25hIwagE9e6HAXJOyhr786
x9dyHfe0b7sj1v93SsJIQxUnGEE3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbzGg
Un5wOZwCLokXR641syw2ea4wHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzRCQ0MyQjlFMzkxQzExRUZCQzg0RkE0Qjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb8wDQYJKoZIhvcNAQEL
BQADggEBAHte4gq+tU9mnWgTr049HownuP/Hesjpezy/KutQ6OfoCyZjLK1t/MT5
w228jOiKzGFkYrQR+HV5lg2tACm8dJC9Hrwih4HpyvCNWPSSiYAUlyWb2tYYLwWP
2o4Z2KAbsKEEPx2ih+Ea2YX1+S6vEfwHVCtol7NdkL4vrwX0mRGb3ourVp1U0KsE
CO+udncBGJz7K9UM0cnmlVuwNiRXj5I1F2DrRgpx3UHGV5Xg6IkT2r+TwrjufMHc
xRrqPKm6YsRkAQ+zhM/rCxY2ZQrtPJh1dyy4ACP89ftM+ProCtOX8t1w3x8whmWd
5+g/vR5jl7wQBCx4NQrxCEPyDPLsmN4=
-----END CERTIFICATE-----
Generated at Mon Aug 5 03:21:46 2024 by rpki-client on console-fra.rpki-client.org