Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
File: DBF43F062DB911ED880CE1B4F1222468.roa (raw, json)
Hash identifier: m3Qq8RG6bAQm4ptXk4g+dQAxUDbzs1SbakCs3g08j/s=
Subject key identifier: B1:2E:59:DF:B4:C4:26:43:B0:7D:D6:6D:78:D6:2D:3F:78:6B:63:86
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 022F
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
Signing time: Tue 06 Sep 2022 07:59:40 +0000
ROA not before: Tue 06 Sep 2022 07:59:35 +0000
ROA not after: Mon 31 Jul 2023 07:59:35 +0000
asID: 22724
IP address blocks: 102.177.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 6 07:59:35 2022 GMT
Not After : Jul 31 07:59:35 2023 GMT
Subject: CN=6316fdec-3d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:28:2a:63:03:5a:2c:96:04:73:3b:ca:e3:
ea:7c:06:52:14:42:8b:14:b4:b5:f4:30:79:cf:37:
a3:0d:c6:21:f3:94:b9:64:fe:45:81:e3:8a:7f:63:
b0:58:b0:bf:23:0e:a4:ff:6e:73:84:dc:45:bb:9c:
37:99:ee:78:cc:68:93:99:0d:42:78:93:51:4a:6f:
7e:d7:a8:ad:10:0e:f9:97:0d:72:48:d4:bd:c7:89:
2b:e9:88:a7:87:3c:a6:32:ff:e0:d6:22:bf:c2:3f:
de:d9:af:d6:a8:45:88:99:ca:7e:e8:6b:56:71:ed:
62:4b:7b:04:df:14:14:48:36:92:a7:57:7f:85:59:
35:d3:7b:4e:9a:e7:ed:1c:e7:86:de:29:91:bf:05:
e1:3e:d9:66:44:64:54:6b:55:86:89:4a:18:87:2a:
93:07:8d:7b:f1:0c:cf:a2:18:55:41:52:13:35:09:
47:6a:46:03:60:99:c4:ea:70:0b:73:11:86:fe:ef:
63:50:13:b4:bd:e4:cc:eb:8f:aa:f2:70:4c:66:80:
8a:3f:ad:0a:83:52:60:2a:23:e5:b8:75:bc:78:33:
b0:6a:52:da:9e:cc:ac:e6:f2:1f:bc:98:4d:e3:99:
92:5d:3e:58:51:b8:a0:d3:79:4d:35:74:d3:1a:82:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:59:DF:B4:C4:26:43:B0:7D:D6:6D:78:D6:2D:3F:78:6B:63:86
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DBF43F062DB911ED880CE1B4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:ac:76:d2:78:f3:27:84:f2:a9:4e:c3:b1:74:0d:c4:61:
53:47:b2:79:85:f6:18:40:c1:5f:e1:a0:48:21:00:c3:ef:43:
47:c0:c8:1f:95:67:31:e7:74:b2:a6:b2:a3:52:f1:99:7a:5e:
9e:69:5a:ba:a9:48:2b:39:f5:04:5a:4b:fb:7b:d8:3c:d8:e7:
49:15:4f:2e:d0:fb:79:5a:ca:15:96:c1:6c:5f:cc:9f:5d:75:
1a:8d:a9:1a:6a:c7:92:d1:35:06:e1:8b:67:ac:42:b4:ef:ca:
5e:2a:ec:3b:09:48:44:4a:25:35:bd:28:c8:14:38:6c:f6:e8:
26:1e:28:93:49:a4:7f:b3:a4:7d:26:ad:16:53:08:82:ca:b9:
72:bc:ea:6e:e1:5c:31:e9:c6:5c:9b:1e:f1:aa:d6:6e:ee:af:
7f:c8:58:96:f2:5f:67:32:92:80:29:27:61:54:1d:f5:67:52:
44:69:a4:a8:80:06:8d:e9:9e:e5:a2:cc:2c:c4:d0:96:bc:9d:
9d:d8:97:cf:55:8e:ae:f1:a9:ad:44:45:76:02:ae:4a:92:5e:
54:f0:17:74:cb:8d:08:20:4e:6e:a1:b6:0d:74:d4:f6:84:df:
4e:c0:fa:43:12:55:66:dd:ca:54:1e:fb:77:a9:c4:c2:4d:0a:
16:39:c7:05
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yMjA5MDYwNzU5MzVaFw0yMzA3MzEwNzU5MzVaMBgxFjAU
BgNVBAMMDTYzMTZmZGVjLTNkMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDY+CgqYwNaLJYEczvK4+p8BlIUQosUtLX0MHnPN6MNxiHzlLlk/kWB44p/
Y7BYsL8jDqT/bnOE3EW7nDeZ7njMaJOZDUJ4k1FKb37XqK0QDvmXDXJI1L3HiSvp
iKeHPKYy/+DWIr/CP97Zr9aoRYiZyn7oa1Zx7WJLewTfFBRINpKnV3+FWTXTe06a
5+0c54beKZG/BeE+2WZEZFRrVYaJShiHKpMHjXvxDM+iGFVBUhM1CUdqRgNgmcTq
cAtzEYb+72NQE7S95Mzrj6rycExmgIo/rQqDUmAqI+W4dbx4M7BqUtqezKzm8h+8
mE3jmZJdPlhRuKDTeU01dNMagnNRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsS5Z
37TEJkOwfdZteNYtP3hrY4YwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0RCRjQzRjA2MkRCOTExRUQ4ODBDRTFCNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsaYwDQYJKoZIhvcNAQEL
BQADggEBAGvurHbSePMnhPKpTsOxdA3EYVNHsnmF9hhAwV/hoEghAMPvQ0fAyB+V
ZzHndLKmsqNS8Zl6Xp5pWrqpSCs59QRaS/t72DzY50kVTy7Q+3layhWWwWxfzJ9d
dRqNqRpqx5LRNQbhi2esQrTvyl4q7DsJSERKJTW9KMgUOGz26CYeKJNJpH+zpH0m
rRZTCILKuXK86m7hXDHpxlybHvGq1m7ur3/IWJbyX2cykoApJ2FUHfVnUkRppKiA
Bo3pnuWizCzE0Ja8nZ3Yl89Vjq7xqa1ERXYCrkqSXlTwF3TLjQggTm6htg101PaE
307A+kMSVWbdylQe+3epxMJNChY5xwU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org