Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6326AFCE136C11EFA6F7D932017001B1.roa
File: 6326AFCE136C11EFA6F7D932017001B1.roa (raw, json)
Hash identifier: zLkJ2zfy4lEfwbdPWcNahmrALo+OdrncjUNfAxtrCqQ=
Subject key identifier: 83:53:83:AC:66:8E:D1:7E:A8:9A:64:1D:E1:4C:5F:44:EF:F7:C0:0A
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0501
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6326AFCE136C11EFA6F7D932017001B1.roa
Signing time: Thu 16 May 2024 10:09:31 +0000
ROA not before: Thu 16 May 2024 10:09:28 +0000
ROA not after: Fri 24 May 2024 10:09:28 +0000
asID: 23470
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 16 10:09:28 2024 GMT
Not After : May 24 10:09:28 2024 GMT
Subject: CN=6645db5b-4ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:73:66:c1:85:d6:4c:ae:b8:f1:35:05:39:
8d:56:de:f6:4b:de:74:f1:20:d7:1f:5f:15:e3:95:
44:3c:44:1f:4a:a6:c3:5b:2d:65:c3:f7:e9:e8:62:
fe:76:df:d2:80:11:7d:c2:aa:5d:dc:e3:5d:c1:1f:
b7:e7:ce:25:5a:d7:fb:4c:53:3d:ed:1f:2b:11:7f:
4c:02:14:ce:e7:fc:7b:5e:6f:fa:7c:39:ba:d7:95:
3b:e2:49:f9:e9:34:57:d0:4f:f6:2f:e8:00:22:69:
71:62:a4:c9:37:2a:d0:4c:83:97:75:8c:ef:8d:aa:
4c:a8:b0:18:f5:c2:a1:b4:80:0a:0b:71:9c:08:9c:
6f:4f:c4:2e:93:d9:53:09:d4:84:25:f8:c9:5c:2d:
c5:6f:95:d7:35:82:e3:3a:39:7a:af:40:f5:15:d3:
66:e0:3e:e6:b5:08:16:df:72:a2:ac:e1:3f:36:0f:
97:2b:dd:2b:c0:f7:10:c4:67:33:ce:df:61:ca:76:
4a:9e:ad:73:54:0a:08:a7:8c:80:4e:3c:8e:d5:fa:
11:f8:3b:b0:2f:5c:f3:82:f6:91:3c:56:89:ca:f1:
b8:80:40:81:69:cb:af:47:0c:b1:cf:45:ff:56:24:
9a:13:2b:df:95:08:b4:bc:60:00:b5:47:b3:c9:de:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:83:AC:66:8E:D1:7E:A8:9A:64:1D:E1:4C:5F:44:EF:F7:C0:0A
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6326AFCE136C11EFA6F7D932017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6a:67:3d:f3:c3:c8:ea:6d:dc:30:cd:ee:50:03:8c:0b:c2:
c7:2f:61:e5:d1:1d:3d:18:b9:41:cb:44:05:2a:40:48:6e:df:
c3:93:84:2c:2c:e6:e7:1f:2a:b2:ba:3f:08:22:05:5b:3e:02:
2c:2a:79:09:ba:2b:1c:ea:65:29:03:e7:a5:ad:13:43:9b:8d:
90:25:63:5d:40:09:ee:ac:e7:64:1d:a3:7a:8b:a9:ba:b8:2c:
67:93:98:b3:2c:bd:7b:37:03:62:8a:76:15:e2:05:f6:19:79:
86:9d:e5:0c:68:4f:ec:99:bf:8c:c3:4d:83:4a:df:e5:c6:59:
a7:4b:27:8e:9d:ed:ba:39:b2:87:02:80:51:8e:b5:28:3c:e1:
c8:38:f0:09:2c:3d:17:ec:8a:72:bc:7d:29:8b:48:50:76:6a:
e4:c4:41:1c:93:21:79:96:ef:e0:8c:1b:5d:73:b6:2c:a0:cd:
39:b6:1b:b2:92:52:33:73:fb:76:ee:d3:01:70:bd:f5:b9:29:
85:24:af:08:3e:99:85:ec:04:7e:3b:54:fa:fa:e0:5d:06:76:
d7:12:2f:ff:be:0b:62:81:e7:77:b1:0a:2c:b5:c1:51:70:57:
87:07:bc:13:63:9c:0f:41:30:f9:5c:33:12:9d:92:dc:f8:e6:
e1:1a:9e:4c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA1MTYxMDA5MjhaFw0yNDA1MjQxMDA5MjhaMBgxFjAU
BgNVBAMTDTY2NDVkYjViLTRlYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5f3NmwYXWTK648TUFOY1W3vZL3nTxINcfXxXjlUQ8RB9KpsNbLWXD9+no
Yv5239KAEX3Cql3c413BH7fnziVa1/tMUz3tHysRf0wCFM7n/Hteb/p8ObrXlTvi
SfnpNFfQT/Yv6AAiaXFipMk3KtBMg5d1jO+NqkyosBj1wqG0gAoLcZwInG9PxC6T
2VMJ1IQl+MlcLcVvldc1guM6OXqvQPUV02bgPua1CBbfcqKs4T82D5cr3SvA9xDE
ZzPO32HKdkqerXNUCginjIBOPI7V+hH4O7AvXPOC9pE8VonK8biAQIFpy69HDLHP
Rf9WJJoTK9+VCLS8YAC1R7PJ3nVpAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUg1OD
rGaO0X6ommQd4UxfRO/3wAowHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzYzMjZBRkNFMTM2QzExRUZBNkY3RDkzMjAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbUwDQYJKoZIhvcNAQEL
BQADggEBAI5qZz3zw8jqbdwwze5QA4wLwscvYeXRHT0YuUHLRAUqQEhu38OThCws
5ucfKrK6PwgiBVs+AiwqeQm6KxzqZSkD56WtE0ObjZAlY11ACe6s52Qdo3qLqbq4
LGeTmLMsvXs3A2KKdhXiBfYZeYad5QxoT+yZv4zDTYNK3+XGWadLJ46d7bo5socC
gFGOtSg84cg48AksPRfsinK8fSmLSFB2auTEQRyTIXmW7+CMG11ztiygzTm2G7KS
UjNz+3bu0wFwvfW5KYUkrwg+mYXsBH47VPr64F0GdtcSL/++C2KB53exCiy1wVFw
V4cHvBNjnA9BMPlcMxKdktz45uEankw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org