Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/978526FA6F8511EE8618A44E4AD9E6FC.roa
File: 978526FA6F8511EE8618A44E4AD9E6FC.roa (raw, json)
Hash identifier: /4D82jVI96I4DazSGVLHdwzbEXSYkuRU4ezX9psSxpA=
Subject key identifier: 93:4B:DE:67:4E:CC:37:1D:76:DD:84:99:77:5F:BE:B6:5E:F2:3E:97
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0414
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/978526FA6F8511EE8618A44E4AD9E6FC.roa
Signing time: Fri 20 Oct 2023 20:16:46 +0000
ROA not before: Fri 20 Oct 2023 20:16:43 +0000
ROA not after: Wed 22 Nov 2023 20:16:43 +0000
asID: 208949
IP address blocks: 102.177.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 20 20:16:43 2023 GMT
Not After : Nov 22 20:16:43 2023 GMT
Subject: CN=6532e02e-7ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:51:88:e7:ab:8a:fb:ab:b9:52:25:90:4c:
d2:15:6e:16:12:73:2d:18:95:b6:27:62:43:e7:18:
16:82:37:1b:85:6f:a8:b5:5a:bd:71:35:ec:f2:e2:
ea:c6:dc:96:61:8f:28:83:dd:6b:85:4a:1f:14:17:
46:43:0e:09:ab:4b:97:7b:7d:be:75:69:0c:13:b0:
73:16:54:44:5f:4c:87:96:1f:0f:d7:73:2a:2c:d2:
53:67:ad:fd:19:d3:03:12:82:25:99:9f:53:bf:38:
8a:7f:7f:3f:18:ff:0a:9f:95:17:c8:ab:9a:35:ec:
79:06:ff:34:85:c9:a1:23:e4:af:c7:76:1a:d3:97:
e5:f5:72:ec:53:a6:84:26:67:62:81:89:3c:bf:15:
80:82:83:98:03:38:c1:0f:04:31:b2:bb:78:c8:71:
07:3f:a7:44:b2:88:47:88:c4:0c:b8:ec:4e:4c:f2:
9d:a0:9a:9e:76:2b:e8:65:55:6c:8f:dc:0c:b3:11:
e6:9d:65:55:29:e4:35:a8:a1:c7:3c:fa:4d:8b:51:
93:79:dc:f6:19:d0:a8:10:a7:34:bb:21:ab:16:c5:
30:e2:4e:37:fe:68:f2:83:a7:c7:25:00:d6:42:a9:
c5:0e:4f:a2:5a:56:bb:36:d0:6a:3b:06:f8:52:9c:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:DE:67:4E:CC:37:1D:76:DD:84:99:77:5F:BE:B6:5E:F2:3E:97
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/978526FA6F8511EE8618A44E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:65:55:66:9a:0d:11:3d:7e:9e:21:75:95:ae:a2:f2:18:6f:
a7:25:7d:0f:c2:7f:c5:e3:4e:b9:5b:c7:fd:29:71:37:38:ed:
5c:10:06:f0:0d:40:c8:47:f9:17:06:2a:c5:b9:72:fc:f3:be:
04:bc:bf:27:ce:20:16:b3:d9:f0:47:2b:25:77:52:5d:78:c4:
81:03:ca:92:8e:d9:96:ee:87:65:28:8f:f6:c7:34:a3:b0:9b:
0f:72:01:d6:da:bd:c3:52:0c:ae:90:38:71:ab:8f:36:0c:15:
e8:ed:ba:37:22:1f:27:98:48:57:06:db:dd:c4:a4:a0:28:d6:
eb:80:b8:49:31:2d:a4:db:27:82:c5:ab:cd:2e:51:76:2f:9c:
c1:0a:38:6c:ce:42:8e:c8:8c:e0:47:89:13:24:8e:6a:70:c9:
6a:c7:0d:a5:0a:08:03:ed:96:4e:dd:b8:bd:1a:55:d7:e3:aa:
6f:f5:bf:d7:ef:74:db:1b:72:a8:bb:ed:c2:c5:b7:37:6a:68:
bc:74:44:ed:10:b8:45:9d:0b:d1:b8:36:a5:3f:60:cb:13:9d:
bc:1a:a2:ae:fd:2d:2c:e5:10:0d:c8:09:5b:a7:d4:8a:c9:8e:
19:d7:27:4e:33:b9:bd:f7:e9:6f:89:66:d6:3e:1f:06:d0:5d:
fd:60:18:65
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMzEwMjAyMDE2NDNaFw0yMzExMjIyMDE2NDNaMBgxFjAU
BgNVBAMTDTY1MzJlMDJlLTdhZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeRlGI56uK+6u5UiWQTNIVbhYScy0YlbYnYkPnGBaCNxuFb6i1Wr1xNezy
4urG3JZhjyiD3WuFSh8UF0ZDDgmrS5d7fb51aQwTsHMWVERfTIeWHw/Xcyos0lNn
rf0Z0wMSgiWZn1O/OIp/fz8Y/wqflRfIq5o17HkG/zSFyaEj5K/HdhrTl+X1cuxT
poQmZ2KBiTy/FYCCg5gDOMEPBDGyu3jIcQc/p0SyiEeIxAy47E5M8p2gmp52K+hl
VWyP3AyzEeadZVUp5DWoocc8+k2LUZN53PYZ0KgQpzS7IasWxTDiTjf+aPKDp8cl
ANZCqcUOT6JaVrs20Go7BvhSnIvvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUk0ve
Z07MNx123YSZd1++tl7yPpcwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4Lzk3ODUyNkZBNkY4NTExRUU4NjE4QTQ0RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbwwDQYJKoZIhvcNAQEL
BQADggEBADtlVWaaDRE9fp4hdZWuovIYb6clfQ/Cf8XjTrlbx/0pcTc47VwQBvAN
QMhH+RcGKsW5cvzzvgS8vyfOIBaz2fBHKyV3Ul14xIEDypKO2Zbuh2Uoj/bHNKOw
mw9yAdbavcNSDK6QOHGrjzYMFejtujciHyeYSFcG293EpKAo1uuAuEkxLaTbJ4LF
q80uUXYvnMEKOGzOQo7IjOBHiRMkjmpwyWrHDaUKCAPtlk7duL0aVdfjqm/1v9fv
dNsbcqi77cLFtzdqaLx0RO0QuEWdC9G4NqU/YMsTnbwaoq79LSzlEA3ICVun1IrJ
jhnXJ04zub336W+JZtY+HwbQXf1gGGU=
-----END CERTIFICATE-----
Generated at Thu Nov 23 01:55:33 2023 by rpki-client on console-fra.rpki-client.org