Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B1CB7B58387C11EE9EC7DD164AD9E6FC.roa
File: B1CB7B58387C11EE9EC7DD164AD9E6FC.roa (raw, json)
Hash identifier: Jq8H56PIN9WUfuqI3q7u2ZaheMQ0CZh1kQyGWzSj+oQ=
Subject key identifier: 0F:46:AF:18:3E:D8:04:C8:08:C7:5E:92:00:FF:FE:2F:BB:C4:AE:E8
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 03B5
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B1CB7B58387C11EE9EC7DD164AD9E6FC.roa
Signing time: Fri 11 Aug 2023 19:24:30 +0000
ROA not before: Fri 11 Aug 2023 19:24:27 +0000
ROA not after: Mon 05 Feb 2024 19:24:27 +0000
asID: 29684
IP address blocks: 102.177.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Aug 11 19:24:27 2023 GMT
Not After : Feb 5 19:24:27 2024 GMT
Subject: CN=64d68aee-bdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:52:9c:ee:b5:0a:c1:f8:c3:52:51:d3:50:
ed:9e:b9:ca:5c:ed:1a:bb:1f:b6:06:8a:a5:65:ee:
38:dc:02:77:b9:f2:1c:63:5a:92:f6:44:b8:00:48:
8f:e8:5a:87:50:66:86:8a:89:93:ca:c6:a0:95:4c:
55:17:5a:3f:4f:d9:61:b7:84:82:06:1e:7d:54:79:
13:9b:51:d6:28:d6:ef:96:bc:99:5b:6b:3b:75:ea:
b9:a5:53:e2:f1:6f:45:d7:00:f9:6a:6e:52:e6:98:
44:28:d6:ea:89:f1:9d:0b:7e:00:13:d3:e5:9d:4b:
82:88:88:1c:81:5d:6a:3c:59:68:0a:c1:bb:8f:4d:
74:80:f0:8f:9d:0d:7a:6b:41:be:5c:f5:6b:c5:b3:
6d:b0:d2:c9:7f:29:50:3a:80:5e:93:b2:64:3e:8c:
bd:9c:48:d9:3c:94:8d:38:d0:c9:56:96:a4:55:90:
55:f4:53:ae:62:c4:bb:69:63:4b:81:fd:4b:7d:32:
f8:b0:92:25:ee:4e:78:f3:c3:8f:19:d3:7f:9c:a7:
d4:4f:51:55:85:c1:56:98:a1:cc:70:e0:e7:57:80:
5e:3f:52:40:08:d4:42:96:f6:78:0d:30:8d:08:e1:
b7:9c:bd:02:38:d3:64:c2:a5:54:c8:df:24:5e:1c:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:AF:18:3E:D8:04:C8:08:C7:5E:92:00:FF:FE:2F:BB:C4:AE:E8
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/B1CB7B58387C11EE9EC7DD164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6b:36:06:ec:af:88:14:0e:a5:09:b6:37:25:02:05:0a:78:
20:12:e5:88:a6:07:9c:0c:dd:a9:4e:10:f7:49:a5:cd:3f:df:
e7:fe:0f:2c:5c:61:2c:78:b6:21:65:1f:6f:52:3b:3a:58:aa:
d3:a8:37:6d:64:09:07:dd:ec:8d:f0:9d:27:0d:ed:f1:17:73:
49:4f:02:17:a6:5f:4e:0d:9c:ae:8d:09:1e:5c:e8:26:ca:03:
fb:58:4b:43:94:23:86:8f:51:4b:7f:c0:7c:b9:81:93:f1:25:
49:40:8c:a4:2e:fd:09:5c:54:42:35:9c:0b:41:fe:19:a2:ff:
5d:02:b7:a9:77:85:5c:b7:7d:9d:88:72:79:f3:6b:48:09:d2:
9a:5b:5a:c3:99:99:e6:61:b7:01:58:b3:24:11:6d:30:c4:33:
be:9e:81:12:4e:99:f4:8a:59:64:ca:5f:ad:73:11:94:9c:b4:
d5:e0:bc:af:d4:83:41:1c:59:79:d8:f4:40:56:3e:bd:05:9b:
9d:96:0d:27:9c:2b:51:10:8c:bf:d0:56:ba:3a:24:35:b5:c0:
e0:c7:e0:94:06:64:ce:60:3a:47:a2:dc:0c:d3:b6:af:55:90:
82:4b:48:da:e2:98:d6:29:a3:01:48:4a:e9:5b:c9:a2:5a:60:
6a:a7:a5:6c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMzA4MTExOTI0MjdaFw0yNDAyMDUxOTI0MjdaMBgxFjAU
BgNVBAMTDTY0ZDY4YWVlLWJkZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC20VKc7rUKwfjDUlHTUO2eucpc7Rq7H7YGiqVl7jjcAne58hxjWpL2RLgA
SI/oWodQZoaKiZPKxqCVTFUXWj9P2WG3hIIGHn1UeRObUdYo1u+WvJlbazt16rml
U+Lxb0XXAPlqblLmmEQo1uqJ8Z0LfgAT0+WdS4KIiByBXWo8WWgKwbuPTXSA8I+d
DXprQb5c9WvFs22w0sl/KVA6gF6TsmQ+jL2cSNk8lI040MlWlqRVkFX0U65ixLtp
Y0uB/Ut9MviwkiXuTnjzw48Z03+cp9RPUVWFwVaYocxw4OdXgF4/UkAI1EKW9ngN
MI0I4becvQI402TCpVTI3yReHKJ9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD0av
GD7YBMgIx16SAP/+L7vErugwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0IxQ0I3QjU4Mzg3QzExRUU5RUM3REQxNjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb4wDQYJKoZIhvcNAQEL
BQADggEBAJ1rNgbsr4gUDqUJtjclAgUKeCAS5YimB5wM3alOEPdJpc0/3+f+Dyxc
YSx4tiFlH29SOzpYqtOoN21kCQfd7I3wnScN7fEXc0lPAhemX04NnK6NCR5c6CbK
A/tYS0OUI4aPUUt/wHy5gZPxJUlAjKQu/QlcVEI1nAtB/hmi/10Ct6l3hVy3fZ2I
cnnza0gJ0ppbWsOZmeZhtwFYsyQRbTDEM76egRJOmfSKWWTKX61zEZSctNXgvK/U
g0EcWXnY9EBWPr0Fm52WDSecK1EQjL/QVro6JDW1wODH4JQGZM5gOkei3AzTtq9V
kIJLSNrimNYpowFISulbyaJaYGqnpWw=
-----END CERTIFICATE-----
Generated at Tue Feb 6 03:05:38 2024 by rpki-client on console-fra.rpki-client.org