Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E37E28634D911ED8100E7B6F1222468.roa
File: 9E37E28634D911ED8100E7B6F1222468.roa (raw, json)
Hash identifier: /XLI+bi66XGkZlYVhrz9lRPPFrgUEMCB2IzD722DBQg=
Subject key identifier: 61:12:5A:0D:93:21:DE:6B:E5:B9:8E:21:8E:38:E3:F9:9E:A4:CC:D4
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 024C
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E37E28634D911ED8100E7B6F1222468.roa
Signing time: Thu 15 Sep 2022 09:34:39 +0000
ROA not before: Thu 15 Sep 2022 09:34:35 +0000
ROA not after: Wed 20 Sep 2023 09:34:35 +0000
asID: 19437
IP address blocks: 102.177.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 15 09:34:35 2022 GMT
Not After : Sep 20 09:34:35 2023 GMT
Subject: CN=6322f1ae-e7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:65:93:72:8d:b6:6e:69:20:ac:87:66:30:
61:70:c7:80:37:6a:e4:28:2e:3f:1a:b9:24:f8:24:
89:42:8a:55:1c:00:f2:74:9d:12:8f:ee:65:a4:30:
8c:54:fb:0b:d8:ec:0a:5d:74:1d:da:f5:c7:23:29:
36:82:d8:46:05:7e:8f:b0:cb:9a:71:8a:37:50:ba:
26:e6:35:93:3d:2e:31:f4:d9:97:15:d6:cc:be:01:
9e:7d:18:62:ef:fb:31:88:7d:eb:25:ed:34:03:f4:
0c:5e:24:6b:87:1f:01:82:ad:df:99:33:74:d0:52:
cc:57:8e:8f:cc:be:fb:40:d1:c8:d6:99:2c:e3:30:
e7:88:75:64:f5:00:df:7b:2f:ed:c8:5b:63:7b:e7:
63:b0:95:6f:b3:3c:81:9b:92:65:b2:70:e2:a2:9f:
3c:bf:2f:58:e9:3a:97:9e:7d:52:6b:40:ed:ed:ba:
54:f4:2a:61:66:ba:14:55:e7:4b:ce:91:34:4a:09:
c5:b0:c9:77:97:ef:8d:4c:6d:30:fb:1f:c2:f5:4c:
d9:10:12:5b:45:e6:72:6d:d0:c8:9b:0f:a8:b2:64:
3a:25:5d:bb:f1:eb:bd:a3:76:a4:86:f6:64:8c:66:
61:c6:fa:13:81:a4:5b:f9:c0:bf:cb:1a:69:12:6c:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:5A:0D:93:21:DE:6B:E5:B9:8E:21:8E:38:E3:F9:9E:A4:CC:D4
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/9E37E28634D911ED8100E7B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:4f:c0:a0:9e:a8:3b:65:5a:f1:60:f9:06:ae:87:65:fe:ad:
ab:e5:b6:1a:9f:e3:0e:a6:05:3a:91:3b:a2:75:d6:ee:db:89:
73:29:f9:aa:04:5e:41:aa:a3:3b:74:f9:43:bd:98:4f:09:27:
15:ad:96:57:c3:19:2a:f6:16:33:e1:de:e5:9c:06:e4:c0:c3:
88:6c:7e:6f:b4:14:5f:68:46:c2:b9:4c:3b:06:9d:02:2a:0e:
c4:0e:c1:00:b5:a8:ac:9c:a8:48:de:32:df:36:9c:f7:a7:6c:
2d:74:5b:37:1b:5e:6c:e3:bc:8e:75:75:df:b2:87:3b:d1:e8:
ac:b9:ea:46:42:49:68:20:0c:cb:41:56:dd:d8:29:bc:42:de:
ed:56:e1:ba:0f:16:da:0c:fa:b2:f3:8c:99:c2:d4:c7:f6:25:
30:c5:a8:93:66:da:48:2b:f1:65:fc:45:53:91:54:60:f2:dd:
95:7a:7c:07:67:df:55:37:82:e0:c9:c5:eb:49:c5:d7:5e:93:
a8:83:a9:f4:92:a5:0f:bc:e6:1b:95:7d:25:10:2f:c4:78:05:
aa:e9:57:79:9e:48:c3:89:a7:58:07:ac:02:36:ec:1c:a1:8e:
f0:27:c9:7c:3f:43:bf:26:60:6e:94:ef:80:9f:4c:95:7e:49:
7a:07:8f:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMjA5MTUwOTM0MzVaFw0yMzA5MjAwOTM0MzVaMBgxFjAU
BgNVBAMMDTYzMjJmMWFlLWU3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+q2WTco22bmkgrIdmMGFwx4A3auQoLj8auST4JIlCilUcAPJ0nRKP7mWk
MIxU+wvY7ApddB3a9ccjKTaC2EYFfo+wy5pxijdQuibmNZM9LjH02ZcV1sy+AZ59
GGLv+zGIfesl7TQD9AxeJGuHHwGCrd+ZM3TQUsxXjo/MvvtA0cjWmSzjMOeIdWT1
AN97L+3IW2N752OwlW+zPIGbkmWycOKinzy/L1jpOpeefVJrQO3tulT0KmFmuhRV
50vOkTRKCcWwyXeX741MbTD7H8L1TNkQEltF5nJt0MibD6iyZDolXbvx672jdqSG
9mSMZmHG+hOBpFv5wL/LGmkSbIclAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYRJa
DZMh3mvluY4hjjjj+Z6kzNQwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzlFMzdFMjg2MzREOTExRUQ4MTAwRTdCNkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANmsbAwDQYJKoZIhvcNAQEL
BQADggEBAAtPwKCeqDtlWvFg+Qauh2X+ravlthqf4w6mBTqRO6J11u7biXMp+aoE
XkGqozt0+UO9mE8JJxWtllfDGSr2FjPh3uWcBuTAw4hsfm+0FF9oRsK5TDsGnQIq
DsQOwQC1qKycqEjeMt82nPenbC10WzcbXmzjvI51dd+yhzvR6Ky56kZCSWggDMtB
Vt3YKbxC3u1W4boPFtoM+rLzjJnC1Mf2JTDFqJNm2kgr8WX8RVORVGDy3ZV6fAdn
31U3guDJxetJxddek6iDqfSSpQ+85huVfSUQL8R4BarpV3meSMOJp1gHrAI27Byh
jvAnyXw/Q78mYG6U74CfTJV+SXoHj2s=
-----END CERTIFICATE-----
Generated at Thu Sep 21 01:45:53 2023 by rpki-client on console-fra.rpki-client.org