Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5D3255B2800111EF939345BD762E951A.roa
File: 5D3255B2800111EF939345BD762E951A.roa (raw, json)
Hash identifier: gYS7o0Rgj9N/L2k2YYq2XuHUp0MXJXtzvsKYNKFWMxQ=
Subject key identifier: FA:F8:21:2E:40:74:95:BB:03:54:BB:9E:6C:5F:CA:CA:B4:B4:6D:01
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05D2
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5D3255B2800111EF939345BD762E951A.roa
Signing time: Tue 01 Oct 2024 14:28:02 +0000
ROA not before: Tue 01 Oct 2024 14:27:58 +0000
ROA not after: Fri 25 Oct 2024 14:27:58 +0000
asID: 211826
IP address blocks: 102.177.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:27:58 2024 GMT
Not After : Oct 25 14:27:58 2024 GMT
Subject: CN=66fc06f2-8aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:b6:17:97:fb:0e:e2:04:72:e3:3f:fa:64:
e7:f4:95:1d:9f:78:eb:c3:de:43:d8:52:21:b8:92:
2e:98:41:ee:56:fb:d9:0a:13:b8:92:52:9f:33:ad:
ce:41:c1:56:c8:81:ce:76:49:6a:84:78:0f:19:37:
c4:de:05:4a:89:f2:23:0d:d7:38:0c:6d:2d:de:1a:
f5:32:48:b9:5e:96:48:c6:8d:b9:2f:36:c6:d8:f6:
f8:d4:f4:3b:20:0a:0a:ab:78:71:e1:b3:c7:b5:c9:
12:8f:92:4e:87:f7:f1:54:c9:db:26:a7:19:00:f7:
35:66:9d:41:56:3a:f7:0b:ef:08:8e:bf:4d:3e:3e:
31:aa:ae:cb:d8:c0:fa:50:7e:cd:42:ac:79:1a:22:
89:b3:c3:51:3b:4b:8f:d2:77:7e:d6:56:8e:3a:12:
63:38:ef:91:20:c4:03:17:e8:4c:02:2d:a5:0a:5a:
9a:d8:ae:7b:73:3f:06:a5:24:12:77:0f:7f:24:fd:
b2:c7:65:e4:4d:f2:94:9d:a8:9e:ca:85:d8:bc:84:
e7:3a:46:f4:4b:99:7f:86:6b:67:54:81:ad:80:02:
71:2b:b4:c2:0f:29:8f:03:c0:d6:31:53:d5:e6:fb:
a0:20:2c:45:58:3b:62:5b:49:f7:22:93:39:ef:4b:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:21:2E:40:74:95:BB:03:54:BB:9E:6C:5F:CA:CA:B4:B4:6D:01
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/5D3255B2800111EF939345BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.177.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b9:7b:98:e6:31:89:e1:89:a4:53:59:84:53:6c:f8:28:53:
2f:45:bf:17:0b:b4:f8:66:28:77:8a:7e:f9:e9:95:c9:6b:90:
2d:bd:e0:9a:ca:75:86:4c:e2:d2:9b:8e:33:2d:a1:20:a0:36:
ef:8d:ae:13:0c:82:8b:50:ea:1d:ca:d3:a1:5e:47:9d:5e:fb:
58:46:45:94:76:32:e3:9b:6b:57:e8:01:8a:59:b7:40:a5:f1:
a4:c7:f1:5b:03:b9:55:78:46:cb:bf:af:bc:ef:c5:e4:5c:7e:
9f:f2:41:0d:1c:78:19:9c:b2:77:fc:e1:15:11:69:26:4e:3b:
6f:b0:f4:9e:8b:0a:f7:5c:17:10:3c:b6:39:8c:fb:1b:f7:24:
b1:cc:70:a0:a0:c5:6a:2d:2f:09:9e:41:35:c0:fa:d0:6b:c1:
3b:7a:58:d9:1c:2e:a3:44:6c:ef:2a:b6:6b:e7:5e:2d:ab:89:
3b:3a:a6:c5:65:62:e3:dd:5b:0b:7a:30:a3:de:a5:cf:a1:3d:
b0:86:21:d6:7a:2f:d6:a0:d1:e1:a8:dc:b7:73:ee:83:d1:e1:
37:ca:3c:41:c8:da:23:99:18:a9:c9:1c:85:4e:18:ba:b2:8d:
00:e8:99:b5:15:99:52:36:0a:45:33:fe:06:a6:22:54:38:c7:
b7:dc:c7:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDEwMDExNDI3NThaFw0yNDEwMjUxNDI3NThaMBgxFjAU
BgNVBAMTDTY2ZmMwNmYyLThhYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUUrYXl/sO4gRy4z/6ZOf0lR2feOvD3kPYUiG4ki6YQe5W+9kKE7iSUp8z
rc5BwVbIgc52SWqEeA8ZN8TeBUqJ8iMN1zgMbS3eGvUySLlelkjGjbkvNsbY9vjU
9DsgCgqreHHhs8e1yRKPkk6H9/FUydsmpxkA9zVmnUFWOvcL7wiOv00+PjGqrsvY
wPpQfs1CrHkaIomzw1E7S4/Sd37WVo46EmM475EgxAMX6EwCLaUKWprYrntzPwal
JBJ3D38k/bLHZeRN8pSdqJ7Khdi8hOc6RvRLmX+Ga2dUga2AAnErtMIPKY8DwNYx
U9Xm+6AgLEVYO2JbSfcikznvS9+ZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+vgh
LkB0lbsDVLuebF/KyrS0bQEwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzVEMzI1NUIyODAwMTExRUY5MzkzNDVCRDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbEwDQYJKoZIhvcNAQEL
BQADggEBABC5e5jmMYnhiaRTWYRTbPgoUy9FvxcLtPhmKHeKfvnplclrkC294JrK
dYZM4tKbjjMtoSCgNu+NrhMMgotQ6h3K06FeR51e+1hGRZR2MuOba1foAYpZt0Cl
8aTH8VsDuVV4Rsu/r7zvxeRcfp/yQQ0ceBmcsnf84RURaSZOO2+w9J6LCvdcFxA8
tjmM+xv3JLHMcKCgxWotLwmeQTXA+tBrwTt6WNkcLqNEbO8qtmvnXi2riTs6psVl
YuPdWwt6MKPepc+hPbCGIdZ6L9ag0eGo3Ldz7oPR4TfKPEHI2iOZGKnJHIVOGLqy
jQDombUVmVI2CkUz/gamIlQ4x7fcx1I=
-----END CERTIFICATE-----
Generated at Sat Oct 26 04:08:53 2024 by rpki-client on console-ams.rpki-client.org