Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/816643B2776A11EEAC0BD67B4AD9E6FC.roa
File: 816643B2776A11EEAC0BD67B4AD9E6FC.roa (raw, json)
Hash identifier: 4pmJwCnaySAzxpLo88EgtEkdP7WYmWAEXRYpGkigNBM=
Subject key identifier: AF:F1:84:07:DC:92:D7:2C:82:84:FC:63:1F:42:A1:9B:C0:F8:7E:DC
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0427
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/816643B2776A11EEAC0BD67B4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 21:23:02 +0000
ROA not before: Mon 30 Oct 2023 21:22:58 +0000
ROA not after: Sat 25 Nov 2023 21:22:58 +0000
asID: 23470
IP address blocks: 102.177.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 30 21:22:58 2023 GMT
Not After : Nov 25 21:22:58 2023 GMT
Subject: CN=65401eb6-f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:71:6b:2c:8e:79:f8:a3:3a:a7:84:8f:e5:
af:71:2c:62:14:6e:22:71:54:d6:56:48:f9:94:c6:
2b:75:ba:96:de:24:97:41:bf:69:96:fa:f4:8d:ac:
b6:d2:84:b0:29:d6:57:5c:27:21:12:f6:72:ad:9f:
37:cb:f1:ba:2b:de:81:f9:85:e4:24:0c:af:44:99:
2d:ee:df:1a:73:9d:7f:30:32:b3:2f:88:05:7e:50:
8d:ec:cd:3f:bc:70:b5:74:b8:a9:e8:73:ff:02:70:
43:51:9b:f8:ba:41:04:9c:a9:aa:e7:41:27:a0:31:
7c:09:8f:75:58:6c:10:a5:9c:60:06:d5:c6:92:07:
7b:94:46:9b:ab:dd:24:a4:cf:1e:53:fd:d0:8e:6a:
c5:ef:eb:ca:b0:84:4d:ea:7a:0a:d1:cb:5f:1c:be:
ec:e2:47:49:9d:cc:d1:50:f5:2b:ea:74:c7:3a:b8:
fa:81:77:f2:16:db:f2:de:7d:c9:33:db:b8:44:09:
af:c0:35:e6:17:6b:48:70:86:bd:c4:7e:80:41:d0:
18:fc:f6:c6:e9:80:70:23:48:e5:98:68:1c:bf:04:
a1:ab:f7:42:44:0a:16:d2:7a:46:eb:d4:08:93:b4:
ed:c3:26:ae:ad:b0:ec:b7:78:ce:e0:5e:ef:34:46:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:84:07:DC:92:D7:2C:82:84:FC:63:1F:42:A1:9B:C0:F8:7E:DC
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/816643B2776A11EEAC0BD67B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.181.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b0:c1:5f:49:c3:8e:cd:3f:0c:6a:e5:d9:b3:b1:c9:a4:49:
89:aa:06:cf:4d:cb:8f:ed:01:f3:c1:58:95:e6:11:e2:99:e2:
68:e2:eb:25:1f:49:b8:89:08:07:9c:47:cb:7a:c1:2b:52:df:
af:71:49:42:62:5e:84:4d:18:c0:1c:e7:16:66:78:9c:3c:24:
da:68:a8:23:1a:cf:6b:f9:99:ff:bd:28:c6:a5:19:04:ff:5a:
92:bb:a7:62:82:a1:29:8d:64:49:8e:c9:91:6e:b7:4f:73:62:
7d:d4:04:ff:7b:52:de:42:93:77:99:23:14:9e:32:89:bd:3b:
12:d0:0a:51:fd:cd:39:6b:2e:8e:7e:c2:8f:95:c7:d4:aa:5c:
69:8d:e1:21:30:ce:3c:c7:13:07:35:a6:4a:ea:4b:3b:88:f7:
39:d6:c4:f9:2e:48:5e:df:82:1e:39:e9:9a:e0:d0:13:20:d3:
62:4f:41:bb:37:d5:53:dc:ab:a8:fb:75:45:90:c8:07:a6:57:
94:75:86:66:bf:80:69:c5:d5:62:e5:44:a7:f7:e9:75:2e:c8:
01:a1:43:f0:14:be:92:04:74:09:3d:70:94:15:30:4a:ed:7a:
8c:4c:5b:3a:18:1c:fe:6a:11:7b:ff:41:5f:5d:b6:bb:4e:19:
3d:0c:a0:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMzEwMzAyMTIyNThaFw0yMzExMjUyMTIyNThaMBgxFjAU
BgNVBAMTDTY1NDAxZWI2LWYwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjR3FrLI55+KM6p4SP5a9xLGIUbiJxVNZWSPmUxit1upbeJJdBv2mW+vSN
rLbShLAp1ldcJyES9nKtnzfL8bor3oH5heQkDK9EmS3u3xpznX8wMrMviAV+UI3s
zT+8cLV0uKnoc/8CcENRm/i6QQScqarnQSegMXwJj3VYbBClnGAG1caSB3uURpur
3SSkzx5T/dCOasXv68qwhE3qegrRy18cvuziR0mdzNFQ9SvqdMc6uPqBd/IW2/Le
fckz27hECa/ANeYXa0hwhr3EfoBB0Bj89sbpgHAjSOWYaBy/BKGr90JEChbSekbr
1AiTtO3DJq6tsOy3eM7gXu80RnEVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUr/GE
B9yS1yyChPxjH0Khm8D4ftwwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzgxNjY0M0IyNzc2QTExRUVBQzBCRDY3QjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbUwDQYJKoZIhvcNAQEL
BQADggEBABuwwV9Jw47NPwxq5dmzscmkSYmqBs9Ny4/tAfPBWJXmEeKZ4mji6yUf
SbiJCAecR8t6wStS369xSUJiXoRNGMAc5xZmeJw8JNpoqCMaz2v5mf+9KMalGQT/
WpK7p2KCoSmNZEmOyZFut09zYn3UBP97Ut5Ck3eZIxSeMom9OxLQClH9zTlrLo5+
wo+Vx9SqXGmN4SEwzjzHEwc1pkrqSzuI9znWxPkuSF7fgh456Zrg0BMg02JPQbs3
1VPcq6j7dUWQyAemV5R1hma/gGnF1WLlRKf36XUuyAGhQ/AUvpIEdAk9cJQVMErt
eoxMWzoYHP5qEXv/QV9dtrtOGT0MoCk=
-----END CERTIFICATE-----
Generated at Sun Nov 26 02:18:07 2023 by rpki-client on console-ams.rpki-client.org