Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
File: 6240505C2DBC11ED9CA47FBBF1222468.roa (raw, json)
Hash identifier: 4NCiqk5qQOvEBRlTU25SOuZHmgzcCKTUJADc/5pZAkk=
Subject key identifier: 98:B8:C5:47:25:8D:88:56:AE:23:EE:C0:F8:44:EE:18:E7:D3:14:16
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 023B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
Signing time: Tue 06 Sep 2022 08:17:44 +0000
ROA not before: Tue 06 Sep 2022 08:17:41 +0000
ROA not after: Mon 31 Jul 2023 08:17:41 +0000
asID: 22724
IP address blocks: 102.177.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 08:17:41 2022 GMT
Not After : Jul 31 08:17:41 2023 GMT
Subject: CN=63170228-3f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:7a:aa:20:06:94:0a:2c:1e:0f:1e:d5:29:
3e:d9:97:a6:ba:9b:74:b4:b4:aa:de:7f:83:1a:7f:
29:8d:b8:90:8c:c3:f9:63:bd:e2:ce:53:ac:85:41:
51:93:b0:26:73:c5:44:9f:76:4e:4a:57:d3:f4:f0:
07:a1:ec:3d:2c:2a:4b:7d:bc:bb:be:ce:a7:0f:b9:
a8:bb:62:33:a8:24:d1:a7:4c:0c:b5:c3:60:82:dd:
ee:46:31:76:66:b6:e0:08:89:b4:f1:b6:66:77:a3:
fe:3a:49:74:eb:31:f9:3b:47:b2:2d:01:a7:0d:de:
8c:53:ca:1e:3d:b3:f2:4c:df:60:08:b6:d2:9d:55:
20:3b:32:bb:03:87:e3:7f:b8:81:35:52:d2:cc:e9:
8d:6d:d1:2b:29:81:6c:b3:29:7f:97:88:65:01:ac:
c5:e6:d3:42:a6:f8:fa:11:6a:2c:11:9e:65:c1:04:
e4:0e:26:1c:43:ee:32:e7:03:72:21:c5:e2:4d:2f:
5c:ec:d8:d1:e5:f3:57:5d:a1:17:ad:09:6a:ef:13:
11:c4:21:fa:59:92:22:07:7c:cc:6d:7c:86:c6:dc:
2c:50:e0:85:49:d6:7c:cd:7d:d3:2b:17:2a:fe:87:
a0:78:e3:81:fb:56:dc:34:30:47:c9:39:28:84:c7:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:C5:47:25:8D:88:56:AE:23:EE:C0:F8:44:EE:18:E7:D3:14:16
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6240505C2DBC11ED9CA47FBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.171.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9e:dc:bc:2a:2a:64:6a:c6:2c:1d:79:4e:d3:5f:cd:f9:35:
99:14:d7:04:dc:d9:66:89:11:db:56:ca:b0:55:4f:83:34:eb:
20:ae:3f:25:85:3e:02:56:78:3a:a9:c9:f8:d6:c5:43:eb:e6:
80:56:52:b2:f7:10:e2:bc:ec:61:8d:d9:d1:01:95:cb:66:f1:
2f:15:84:42:76:99:40:9a:66:31:76:12:19:db:89:00:11:fe:
f1:cd:71:63:e6:e9:8e:3e:95:66:1f:84:19:8c:79:72:6b:5d:
6b:58:4b:30:9c:f4:2a:ad:9d:ab:9a:ac:d5:5f:76:85:7e:14:
7c:56:9c:20:88:e2:1c:5c:4c:82:95:14:1f:79:00:78:1b:ce:
af:51:11:8b:99:f6:32:d8:72:f2:d6:0b:24:04:a2:96:94:22:
8a:2a:a5:49:e2:e4:aa:07:24:04:83:d4:ae:dc:8b:73:81:c2:
e7:3d:ad:57:9e:a1:f5:49:30:89:e2:46:1f:90:1b:d1:e2:51:
fe:fc:41:ee:10:20:c1:c4:d7:35:0a:78:e5:72:a3:9c:49:cc:
a6:50:fe:13:e5:91:2e:4d:35:6f:49:08:76:a7:41:5a:73:43:
de:f6:7f:f5:90:b2:bc:d8:f6:d5:c4:2b:b6:20:14:47:30:cd:
e9:1b:e4:e2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAjswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMjA5MDYwODE3NDFaFw0yMzA3MzEwODE3NDFaMBgxFjAU
BgNVBAMMDTYzMTcwMjI4LTNmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKbXqqIAaUCiweDx7VKT7Zl6a6m3S0tKref4MafymNuJCMw/ljveLOU6yF
QVGTsCZzxUSfdk5KV9P08Aeh7D0sKkt9vLu+zqcPuai7YjOoJNGnTAy1w2CC3e5G
MXZmtuAIibTxtmZ3o/46SXTrMfk7R7ItAacN3oxTyh49s/JM32AIttKdVSA7MrsD
h+N/uIE1UtLM6Y1t0SspgWyzKX+XiGUBrMXm00Km+PoRaiwRnmXBBOQOJhxD7jLn
A3IhxeJNL1zs2NHl81ddoRetCWrvExHEIfpZkiIHfMxtfIbG3CxQ4IVJ1nzNfdMr
Fyr+h6B444H7Vtw0MEfJOSiExxx3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUmLjF
RyWNiFauI+7A+ETuGOfTFBYwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzYyNDA1MDVDMkRCQzExRUQ5Q0E0N0ZCQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsaswDQYJKoZIhvcNAQEL
BQADggEBAEme3LwqKmRqxiwdeU7TX835NZkU1wTc2WaJEdtWyrBVT4M06yCuPyWF
PgJWeDqpyfjWxUPr5oBWUrL3EOK87GGN2dEBlctm8S8VhEJ2mUCaZjF2EhnbiQAR
/vHNcWPm6Y4+lWYfhBmMeXJrXWtYSzCc9CqtnauarNVfdoV+FHxWnCCI4hxcTIKV
FB95AHgbzq9REYuZ9jLYcvLWCyQEopaUIooqpUni5KoHJASD1K7ci3OBwuc9rVee
ofVJMIniRh+QG9HiUf78Qe4QIMHE1zUKeOVyo5xJzKZQ/hPlkS5NNW9JCHanQVpz
Q972f/WQsrzY9tXEK7YgFEcwzekb5OI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org