Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CF867E52181611EF8D471F38017001B1.roa
File: CF867E52181611EF8D471F38017001B1.roa (raw, json)
Hash identifier: tZypd4+OcX5z4CP2wOGpxQp1ZZIGSY3Ek7/83jQLYmU=
Subject key identifier: 7A:19:F7:5C:62:3A:70:01:8A:63:4F:5F:8C:79:F8:49:0F:10:53:73
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 051A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CF867E52181611EF8D471F38017001B1.roa
Signing time: Wed 22 May 2024 08:39:32 +0000
ROA not before: Wed 22 May 2024 08:39:29 +0000
ROA not after: Tue 25 Jun 2024 08:39:29 +0000
asID: 200113
IP address blocks: 102.177.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 22 08:39:29 2024 GMT
Not After : Jun 25 08:39:29 2024 GMT
Subject: CN=664daf44-4136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:af:e3:9d:c5:75:0b:e5:37:ff:ae:8d:36:
c8:bf:f5:39:bd:92:0c:6a:26:5c:dd:b2:52:72:0c:
64:e0:3c:9e:18:25:dc:a1:6f:a7:78:b8:af:ac:5b:
f9:14:52:f2:04:82:d8:c4:30:b9:2b:76:8b:b3:60:
30:1b:dd:4b:e3:ca:81:62:13:c0:25:db:f6:e6:7e:
c7:18:1b:44:51:4e:10:c4:5b:a9:94:15:06:ec:a6:
16:4c:5e:e0:aa:dc:d4:aa:5d:e8:ce:f1:2a:dc:bf:
59:ad:bf:67:8e:a7:cd:e3:90:5a:14:2b:43:4a:eb:
08:4a:aa:16:55:7a:1b:2c:d8:1f:11:bb:bc:2f:1c:
ec:4b:d8:f3:90:73:a0:fc:67:f3:dd:72:78:ff:9f:
77:79:7c:35:69:d0:48:e8:52:95:0f:44:44:33:3f:
65:1d:d0:3c:86:d3:8a:80:dd:9d:a1:d1:4f:8c:be:
77:98:d1:fc:db:b0:9d:7a:ca:c2:72:93:18:b6:3c:
05:3b:e7:a3:ba:14:ad:e2:b2:12:03:52:7d:6a:9b:
db:86:5e:f4:75:61:82:10:fa:a7:5c:48:bb:77:b2:
24:cc:8f:32:37:fb:58:af:a5:9b:53:a3:cc:62:ba:
12:b7:9f:46:69:54:e0:12:be:34:b0:98:9a:50:f4:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:F7:5C:62:3A:70:01:8A:63:4F:5F:8C:79:F8:49:0F:10:53:73
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/CF867E52181611EF8D471F38017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d9:07:b2:5b:b2:65:1b:9a:c9:6a:be:07:11:e6:48:95:5e:
5c:9a:02:a4:c3:2a:4b:ba:68:ac:ca:67:e8:c7:16:e0:33:85:
75:ea:b9:ee:93:a4:b3:5e:29:f7:22:54:ea:61:08:18:95:83:
bd:7f:0b:e2:36:18:2c:cc:a4:50:a7:11:36:58:f7:65:e0:62:
5b:d2:7e:3c:16:9c:b3:39:b1:ea:59:6b:f4:d8:9b:c0:93:bc:
84:88:17:88:59:ab:00:10:22:63:5d:dc:5e:2f:48:c5:8a:e4:
7a:02:b6:4e:1a:2a:2d:5b:d8:7b:b4:18:45:e1:89:6e:c0:9b:
b9:23:5c:b9:05:78:29:01:05:69:19:30:16:b4:b4:e0:87:fb:
31:e9:f2:85:4d:19:30:9a:e8:60:ff:3b:7d:f6:97:2e:5c:79:
3a:db:19:1b:78:a9:06:bb:99:09:cc:b3:d9:8b:ae:a9:07:60:
5d:92:44:5f:7d:a3:8a:cc:ec:72:98:17:77:e4:f7:bb:5a:68:
26:e9:9e:8b:2e:fc:20:36:e7:d1:95:0d:55:5a:82:da:ad:c8:
82:cf:62:dc:e6:8a:ea:84:59:6c:1d:ed:55:a4:3c:1a:56:bf:
2d:2e:db:1d:10:1b:69:3e:e6:09:66:0e:bf:94:5d:c2:07:1d:
37:61:ec:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBRowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA1MjIwODM5MjlaFw0yNDA2MjUwODM5MjlaMBgxFjAU
BgNVBAMTDTY2NGRhZjQ0LTQxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC43a/jncV1C+U3/66NNsi/9Tm9kgxqJlzdslJyDGTgPJ4YJdyhb6d4uK+s
W/kUUvIEgtjEMLkrdouzYDAb3UvjyoFiE8Al2/bmfscYG0RRThDEW6mUFQbsphZM
XuCq3NSqXejO8Srcv1mtv2eOp83jkFoUK0NK6whKqhZVehss2B8Ru7wvHOxL2POQ
c6D8Z/Pdcnj/n3d5fDVp0EjoUpUPREQzP2Ud0DyG04qA3Z2h0U+MvneY0fzbsJ16
ysJykxi2PAU756O6FK3ishIDUn1qm9uGXvR1YYIQ+qdcSLt3siTMjzI3+1ivpZtT
o8xiuhK3n0ZpVOASvjSwmJpQ9D7tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUehn3
XGI6cAGKY09fjHn4SQ8QU3MwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0NGODY3RTUyMTgxNjExRUY4RDQ3MUYzODAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbgwDQYJKoZIhvcNAQEL
BQADggEBAFvZB7JbsmUbmslqvgcR5kiVXlyaAqTDKku6aKzKZ+jHFuAzhXXque6T
pLNeKfciVOphCBiVg71/C+I2GCzMpFCnETZY92XgYlvSfjwWnLM5sepZa/TYm8CT
vISIF4hZqwAQImNd3F4vSMWK5HoCtk4aKi1b2Hu0GEXhiW7Am7kjXLkFeCkBBWkZ
MBa0tOCH+zHp8oVNGTCa6GD/O332ly5ceTrbGRt4qQa7mQnMs9mLrqkHYF2SRF99
o4rM7HKYF3fk97taaCbpnosu/CA259GVDVVagtqtyILPYtzmiuqEWWwd7VWkPBpW
vy0u2x0QG2k+5glmDr+UXcIHHTdh7Nk=
-----END CERTIFICATE-----
Generated at Wed Jun 26 05:19:00 2024 by rpki-client on console-fra.rpki-client.org