Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
File: 8C03F68CE54211EB8F227D59F8AEA228.roa (raw, json)
Hash identifier: TiIlD/zbU7xfBk6L/vLaLQySDIFJh8iDzIICAHVXg+w=
Subject key identifier: 79:14:32:98:92:20:C1:09:FB:6C:B2:24:FD:5F:5A:67:A9:4B:74:D3
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 6B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
Signing time: Thu 15 Jul 2021 07:59:15 +0000
ROA not before: Thu 15 Jul 2021 07:59:10 +0000
ROA not after: Fri 29 Jul 2022 07:59:10 +0000
asID: 22724
IP address blocks: 102.177.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 15 07:59:10 2021 GMT
Not After : Jul 29 07:59:10 2022 GMT
Subject: CN=60efead3-8c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:3b:94:25:9b:52:ae:b4:57:9b:81:3d:ef:
fc:10:23:2b:e4:51:7b:6b:34:dd:ed:ad:94:40:85:
c7:d6:8d:a4:33:ab:e1:5a:a3:07:36:82:64:40:3c:
6e:79:a0:86:31:25:89:e0:c6:fd:7f:5e:9c:93:a9:
e7:fb:1e:1e:d1:48:05:e3:ec:ef:6d:db:92:5f:e6:
86:87:76:79:01:2b:bc:f9:4a:b6:87:b4:6c:08:6d:
2d:e4:ce:ee:61:ea:ac:d9:5c:95:9c:ae:98:ef:1e:
2e:aa:4c:17:07:29:5e:27:a5:20:b5:e6:15:99:02:
c8:18:b8:ec:5b:04:16:6f:57:4e:a4:cd:e0:3c:c6:
55:8b:db:57:7f:e9:03:95:33:21:9e:d5:0a:6c:95:
38:dc:55:3b:94:fc:bf:72:24:7c:72:a2:9d:27:e3:
ac:82:86:ca:39:b0:4b:23:86:2f:4b:da:28:c1:61:
db:c4:5a:fd:6f:b4:3f:f5:a9:84:5a:e4:01:79:e6:
d3:76:81:89:26:e3:0e:27:a2:c6:2c:a5:35:c5:58:
bd:16:21:44:85:24:69:67:25:79:9e:61:ce:cc:5e:
b2:60:cc:3d:c4:b9:5e:d2:f7:a7:63:85:df:da:5e:
bb:95:30:ba:b1:56:78:5a:90:4c:6b:3b:28:a3:61:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:32:98:92:20:C1:09:FB:6C:B2:24:FD:5F:5A:67:A9:4B:74:D3
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/8C03F68CE54211EB8F227D59F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.160.0/20
Signature Algorithm: sha256WithRSAEncryption
58:54:28:56:b6:37:a9:55:cd:fd:ba:dc:3b:b1:1c:6a:1e:99:
68:c8:90:45:1b:58:e1:f5:98:7a:2a:59:37:e9:bf:f1:ca:08:
10:e1:62:86:1f:b5:5c:b3:a8:46:ac:a6:9b:a8:26:57:39:5d:
f5:05:4a:99:a4:e7:71:c0:31:d5:30:b7:28:11:69:db:a5:5b:
6a:da:da:d5:33:0c:bf:30:3d:d5:6f:e5:ef:ca:21:20:31:c8:
92:1a:00:15:97:5e:76:e1:ce:87:7c:d1:7b:8f:c3:e2:ff:06:
63:36:f3:e6:f8:fd:91:01:b1:ec:4f:cf:c0:67:de:11:c6:26:
bd:25:b0:40:79:fc:63:c0:44:63:39:f0:37:fd:40:1b:e8:53:
90:3d:c9:0a:0b:03:b0:06:d3:cc:c6:17:e9:fd:37:33:7d:6e:
71:22:b5:68:a9:39:54:a2:8d:33:45:56:e3:21:6b:11:e2:f5:
35:6a:f9:5f:53:7c:cd:b2:9f:7a:31:e6:a1:6a:07:a3:23:98:
07:d7:5b:3e:99:51:94:0f:c3:1f:d0:00:82:71:fa:95:3f:03:
e0:65:fd:44:3b:17:05:56:aa:9e:9f:8c:18:9e:f5:3f:91:8e:
4f:2a:76:30:81:b2:76:33:1f:31:dd:5d:fa:6d:bb:3a:20:b2:
0d:b6:6a:ca
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBazANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
REZBNEFGMTEwLwYDVQQFEyg5N0M5MEUyNTIxMkQ4ODdDRjlFMURFNkZEREY1NTFC
QTgxMkZBMTM5MB4XDTIxMDcxNTA3NTkxMFoXDTIyMDcyOTA3NTkxMFowGDEWMBQG
A1UEAxMNNjBlZmVhZDMtOGMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO08O5Qlm1KutFebgT3v/BAjK+RRe2s03e2tlECFx9aNpDOr4VqjBzaCZEA8
bnmghjElieDG/X9enJOp5/seHtFIBePs723bkl/mhod2eQErvPlKtoe0bAhtLeTO
7mHqrNlclZyumO8eLqpMFwcpXielILXmFZkCyBi47FsEFm9XTqTN4DzGVYvbV3/p
A5UzIZ7VCmyVONxVO5T8v3IkfHKinSfjrIKGyjmwSyOGL0vaKMFh28Ra/W+0P/Wp
hFrkAXnm03aBiSbjDieixiylNcVYvRYhRIUkaWcleZ5hzsxesmDMPcS5XtL3p2OF
39peu5UwurFWeFqQTGs7KKNhBwUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBR5FDKY
kiDBCftssiT9X1pnqUt00zAfBgNVHSMEGDAWgBSXyQ4lIS2IfPnh3m/d9VG6gS+h
OTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhBRUEyMjgvbDhrT0pT
RXRpSHo1NGQ1djNmVlJ1b0V2b1RrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbDhrT0pTRXRpSHo1NGQ1djNmVlJ1b0V2b1RrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0RGQTQvMDhCOEQ4MjA5M0FDMTFFQkIxRDJBODMyRjhB
RUEyMjgvOEMwM0Y2OENFNTQyMTFFQjhGMjI3RDU5RjhBRUEyMjgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGaxoDANBgkqhkiG9w0BAQsF
AAOCAQEAWFQoVrY3qVXN/brcO7Ecah6ZaMiQRRtY4fWYeipZN+m/8coIEOFihh+1
XLOoRqymm6gmVzld9QVKmaTnccAx1TC3KBFp26Vbatra1TMMvzA91W/l78ohIDHI
khoAFZdeduHOh3zRe4/D4v8GYzbz5vj9kQGx7E/PwGfeEcYmvSWwQHn8Y8BEYznw
N/1AG+hTkD3JCgsDsAbTzMYX6f03M31ucSK1aKk5VKKNM0VW4yFrEeL1NWr5X1N8
zbKfejHmoWoHoyOYB9dbPplRlA/DH9AAgnH6lT8D4GX9RDsXBVaqnp+MGJ71P5GO
Typ2MIGydjMfMd1d+m27OiCyDbZqyg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org