Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3E1419C800111EF820881BF762E951A.roa
File: C3E1419C800111EF820881BF762E951A.roa (raw, json)
Hash identifier: CSMRcteGd1+haFP4xOfdwbVoJHBtnBq5GX8HB/tQpzA=
Subject key identifier: E7:E3:2B:74:99:1A:F8:EF:91:58:DC:05:A4:E8:A6:9F:BF:B3:C1:D4
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05D4
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3E1419C800111EF820881BF762E951A.roa
Signing time: Tue 01 Oct 2024 14:30:54 +0000
ROA not before: Tue 01 Oct 2024 14:30:51 +0000
ROA not after: Fri 25 Oct 2024 14:30:51 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Oct 1 14:30:51 2024 GMT
Not After : Oct 25 14:30:51 2024 GMT
Subject: CN=66fc079e-5b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:05:f8:ff:b0:18:68:d1:72:af:97:a0:4c:
8c:9a:75:85:be:f8:2b:af:aa:d2:fd:cf:1d:46:91:
66:20:54:6a:18:6e:92:94:e7:d2:84:8c:49:4e:76:
ba:64:24:7f:94:a9:a1:85:18:1e:e7:01:0f:27:c7:
db:b8:f8:80:78:8c:49:e6:9f:a3:57:e3:a2:f1:49:
83:5b:2b:ae:fa:93:4c:d4:e3:45:53:c2:e3:9e:c3:
3f:08:51:67:ed:52:34:ef:59:de:34:88:2d:ad:3a:
5f:36:e1:96:31:b4:eb:8c:ae:63:f8:1e:87:a7:2e:
ec:de:b2:1e:25:86:a6:58:50:5e:37:49:00:5a:fd:
32:9d:ee:f1:8b:65:9f:1e:e5:7e:64:6d:81:c7:fe:
c1:4e:04:92:0f:aa:64:43:52:41:9f:81:5b:13:4b:
46:bc:f9:37:10:16:5c:b0:3a:6e:e5:c8:2e:ff:6b:
fe:f7:dc:39:68:4f:16:34:df:f4:61:07:2d:8d:0a:
f6:70:be:8f:26:3a:a0:b8:97:9f:27:0a:5e:5a:33:
9f:88:4e:d9:29:12:de:89:0c:2a:bd:9e:61:a6:71:
c7:7e:fb:b5:4d:48:86:51:c6:fa:46:4b:c1:5f:59:
77:be:3b:97:f8:6a:8b:ea:e8:1f:c1:d7:33:55:b4:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:2B:74:99:1A:F8:EF:91:58:DC:05:A4:E8:A6:9F:BF:B3:C1:D4
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C3E1419C800111EF820881BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9d:6a:6e:9a:00:fb:2a:0f:7f:bd:8a:4a:c5:98:a0:c4:1d:
5d:73:87:70:6f:eb:87:d4:b3:f7:fd:6c:91:87:9d:c3:da:86:
e6:5a:3d:91:24:48:d6:b8:32:24:ec:ea:23:0e:9c:e6:2c:4a:
1d:dd:76:e1:07:c9:e0:9d:2d:1f:8b:8a:d0:e7:89:eb:90:a4:
82:9d:97:c5:73:3e:5d:ff:3f:19:60:a6:6a:1d:9b:d1:0e:ca:
78:0b:e6:03:f5:21:77:92:a8:54:e1:c2:7e:e4:ed:4b:df:6c:
35:50:ff:8f:62:08:b6:a9:0f:8e:a0:fb:a8:44:d6:ca:0b:16:
1c:b6:37:26:2f:73:71:64:90:ce:c6:f7:44:1c:bf:55:ed:64:
bd:0f:d8:56:9f:d0:70:0f:49:7f:e5:ae:ea:25:b3:c0:e7:33:
3b:a0:91:91:4d:4d:60:4f:7e:b9:51:81:8d:ff:25:c5:d2:55:
1c:b2:c2:9f:3a:39:a1:85:f6:a1:46:f7:b6:77:fd:fb:66:21:
72:5e:ce:88:3b:98:76:8d:c3:40:58:51:34:81:49:9f:3a:53:
38:1f:db:51:37:3c:08:c6:7d:b6:a4:f6:59:64:10:b2:e4:e8:
09:96:15:a9:6d:88:3d:69:a1:78:9a:99:8a:36:ac:73:1f:16:
89:63:3a:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDEwMDExNDMwNTFaFw0yNDEwMjUxNDMwNTFaMBgxFjAU
BgNVBAMTDTY2ZmMwNzllLTViNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjVgX4/7AYaNFyr5egTIyadYW++CuvqtL9zx1GkWYgVGoYbpKU59KEjElO
drpkJH+UqaGFGB7nAQ8nx9u4+IB4jEnmn6NX46LxSYNbK676k0zU40VTwuOewz8I
UWftUjTvWd40iC2tOl824ZYxtOuMrmP4HoenLuzesh4lhqZYUF43SQBa/TKd7vGL
ZZ8e5X5kbYHH/sFOBJIPqmRDUkGfgVsTS0a8+TcQFlywOm7lyC7/a/733DloTxY0
3/RhBy2NCvZwvo8mOqC4l58nCl5aM5+ITtkpEt6JDCq9nmGmccd++7VNSIZRxvpG
S8FfWXe+O5f4aovq6B/B1zNVtMQXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5+Mr
dJka+O+RWNwFpOimn7+zwdQwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0MzRTE0MTlDODAwMTExRUY4MjA4ODFCRjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbgwDQYJKoZIhvcNAQEL
BQADggEBAK+dam6aAPsqD3+9ikrFmKDEHV1zh3Bv64fUs/f9bJGHncPahuZaPZEk
SNa4MiTs6iMOnOYsSh3dduEHyeCdLR+LitDnieuQpIKdl8VzPl3/Pxlgpmodm9EO
yngL5gP1IXeSqFThwn7k7UvfbDVQ/49iCLapD46g+6hE1soLFhy2NyYvc3FkkM7G
90Qcv1XtZL0P2Faf0HAPSX/lruols8DnMzugkZFNTWBPfrlRgY3/JcXSVRyywp86
OaGF9qFG97Z3/ftmIXJezog7mHaNw0BYUTSBSZ86Uzgf21E3PAjGfbak9llkELLk
6AmWFaltiD1poXiamYo2rHMfFoljOv4=
-----END CERTIFICATE-----
Generated at Sat Oct 26 04:08:53 2024 by rpki-client on console-ams.rpki-client.org