Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A1D70860391C11EF9BA64750762E951A.roa
File: A1D70860391C11EF9BA64750762E951A.roa (raw, json)
Hash identifier: nCppGNlMFoeoo7jQmL9ZtPuG32nnr27d/oq+O5NPkxU=
Subject key identifier: DF:4D:90:A5:71:CB:D5:46:E9:82:A3:35:D5:FC:0F:21:AA:3D:73:95
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 0551
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A1D70860391C11EF9BA64750762E951A.roa
Signing time: Wed 03 Jul 2024 09:14:21 +0000
ROA not before: Wed 03 Jul 2024 09:14:17 +0000
ROA not after: Fri 26 Jul 2024 09:14:17 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Jul 3 09:14:17 2024 GMT
Not After : Jul 26 09:14:17 2024 GMT
Subject: CN=6685166d-1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:50:c6:fe:9e:14:3d:4c:48:04:91:8e:c7:99:
16:41:52:05:57:da:5c:5a:63:f3:5f:59:f0:f9:8c:
36:e6:74:eb:78:96:17:3b:c9:38:29:f5:88:9d:ff:
8c:e5:e0:c6:28:1a:c9:dd:87:fe:43:36:20:74:d8:
88:ee:99:b3:c2:d4:90:60:e7:f1:a9:51:fb:97:9c:
d2:44:a4:33:fb:e7:cf:f7:af:8d:30:c0:58:53:83:
a8:09:de:45:be:fb:02:5d:6b:3d:65:9a:f5:42:be:
b8:ea:6f:d4:da:f7:b6:1e:44:68:24:03:6a:8b:0c:
49:98:e9:4d:02:e5:42:41:3e:6e:34:70:2e:49:06:
66:98:ea:3c:69:06:c0:14:73:6d:11:0e:2d:ab:9f:
5e:5a:49:2c:2d:37:ac:3f:88:e3:90:50:e6:15:75:
9e:9d:f0:11:a3:36:d4:fc:a1:50:7f:1a:7d:ed:66:
7a:4b:ab:45:25:63:7d:14:59:b7:eb:c5:69:a7:8a:
cf:9d:03:92:29:9c:16:f2:ab:cc:a0:1b:76:1a:97:
87:06:31:2b:a7:33:8c:77:3f:82:8d:21:0f:1b:e8:
78:82:0b:13:25:7f:47:a8:7e:e5:2e:59:60:3b:82:
c8:e0:02:16:ac:10:86:a0:d0:3b:88:0a:97:02:34:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:90:A5:71:CB:D5:46:E9:82:A3:35:D5:FC:0F:21:AA:3D:73:95
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A1D70860391C11EF9BA64750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
34:05:2b:6e:ca:0d:21:56:d6:23:9a:98:7f:1c:32:68:20:82:
2c:f2:e3:df:30:fa:fb:f6:56:10:af:16:c3:cf:39:90:37:b8:
d4:2f:83:f6:dc:4b:7a:1b:2e:4a:c8:42:9a:ec:ba:8f:ce:dd:
a0:7e:0a:ab:2e:1a:e5:6d:da:38:66:52:ea:76:27:f7:1a:24:
6d:c6:fc:ab:34:f2:7f:74:2c:77:64:78:ab:cb:f8:d2:aa:54:
47:44:66:56:af:07:10:da:de:10:71:e9:f6:bc:71:66:be:78:
bf:62:5a:76:6d:f1:5c:04:13:dc:5b:97:68:84:e3:7b:64:c6:
2b:58:69:dc:18:99:8b:40:78:db:5c:c0:28:22:1f:42:d0:81:
cf:97:5a:90:5a:ad:e0:85:01:fc:86:de:b7:1f:8e:f7:0f:e2:
cd:3d:d6:90:4e:d3:14:34:2c:e9:e4:9f:79:34:6f:07:b4:47:
cf:33:13:6d:7e:a5:eb:21:b1:bd:83:19:3e:f5:b6:12:f8:c6:
b5:9d:e8:34:83:9a:5a:7e:04:b3:4d:b5:97:f0:9a:9b:16:31:
35:c1:a7:3f:71:c9:d3:b3:68:64:f1:91:71:4b:58:b8:94:b8:
87:88:12:ff:8e:cb:8f:36:dc:bf:b8:68:c5:63:df:6d:3c:8a:
5d:19:32:3d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA3MDMwOTE0MTdaFw0yNDA3MjYwOTE0MTdaMBgxFjAU
BgNVBAMTDTY2ODUxNjZkLTFhNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrUMb+nhQ9TEgEkY7HmRZBUgVX2lxaY/NfWfD5jDbmdOt4lhc7yTgp9Yid
/4zl4MYoGsndh/5DNiB02IjumbPC1JBg5/GpUfuXnNJEpDP758/3r40wwFhTg6gJ
3kW++wJdaz1lmvVCvrjqb9Ta97YeRGgkA2qLDEmY6U0C5UJBPm40cC5JBmaY6jxp
BsAUc20RDi2rn15aSSwtN6w/iOOQUOYVdZ6d8BGjNtT8oVB/Gn3tZnpLq0UlY30U
WbfrxWmnis+dA5IpnBbyq8ygG3Yal4cGMSunM4x3P4KNIQ8b6HiCCxMlf0eofuUu
WWA7gsjgAhasEIag0DuICpcCNDxtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU302Q
pXHL1UbpgqM11fwPIao9c5UwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0ExRDcwODYwMzkxQzExRUY5QkE2NDc1MDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbgwDQYJKoZIhvcNAQEL
BQADggEBADQFK27KDSFW1iOamH8cMmgggizy498w+vv2VhCvFsPPOZA3uNQvg/bc
S3obLkrIQprsuo/O3aB+CqsuGuVt2jhmUup2J/caJG3G/Ks08n90LHdkeKvL+NKq
VEdEZlavBxDa3hBx6fa8cWa+eL9iWnZt8VwEE9xbl2iE43tkxitYadwYmYtAeNtc
wCgiH0LQgc+XWpBareCFAfyG3rcfjvcP4s091pBO0xQ0LOnkn3k0bwe0R88zE21+
peshsb2DGT71thL4xrWd6DSDmlp+BLNNtZfwmpsWMTXBpz9xydOzaGTxkXFLWLiU
uIeIEv+Oy4823L+4aMVj3208il0ZMj0=
-----END CERTIFICATE-----
Generated at Sat Jul 27 04:12:40 2024 by rpki-client on console-ams.rpki-client.org