Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/AD80C142EB7711EBAAD1621FD8A014CE.roa
File: AD80C142EB7711EBAAD1621FD8A014CE.roa (raw, json)
Hash identifier: wZUInLYCKpTDr6gXd0xcQV1P6auZs5i4Ii8Cqz4bwok=
Subject key identifier: 0A:08:E4:30:26:F1:E4:B1:9E:14:2A:50:2C:A8:B9:ED:66:5C:82:FF
Certificate issuer: /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial: 02
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/AD80C142EB7711EBAAD1621FD8A014CE.roa
Signing time: Fri 23 Jul 2021 05:34:53 +0000
ROA not before: Fri 23 Jul 2021 05:34:49 +0000
ROA not after: Sun 23 Jul 2023 05:34:49 +0000
asID: 328840
IP address blocks: 102.220.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Validity
Not Before: Jul 23 05:34:49 2021 GMT
Not After : Jul 23 05:34:49 2023 GMT
Subject: CN=60fa54fd-79d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:1c:63:17:c3:2f:48:98:7a:e1:41:f4:61:
a5:70:83:d2:fb:dc:bb:3a:69:55:ae:9a:43:19:25:
37:21:81:8f:d6:d0:3d:39:2c:94:a6:d6:24:c0:96:
bd:b2:a4:34:c2:34:b7:24:35:6f:8d:2c:41:db:66:
6e:7a:93:af:2a:8b:07:3a:2e:94:b8:a4:3a:4d:bd:
ec:53:27:61:55:90:df:f2:ca:35:36:d7:b5:1e:15:
69:0d:a7:5c:bf:52:ef:44:53:dc:35:94:12:ea:6f:
90:29:51:15:c8:74:3d:2f:b9:d7:78:6e:e4:54:b3:
1b:ce:bc:c4:03:2c:f0:31:82:fe:76:8f:98:40:ef:
39:49:f7:8a:d8:c5:02:b6:2e:54:02:62:93:c5:af:
5a:d2:86:8c:3e:13:2b:74:f0:a4:e5:58:88:91:a3:
c1:ae:09:86:17:5b:a5:6b:b1:95:f0:98:52:d2:2b:
c3:a7:1e:f8:04:bc:2f:00:76:a8:91:09:a6:25:6f:
38:90:c2:4a:e0:61:dc:50:0d:22:e7:84:ca:9a:f9:
68:73:70:a1:07:7a:2c:b6:e6:9b:d4:ed:c6:01:9e:
2b:67:05:fa:16:5b:6c:65:54:e2:60:f3:10:e6:b8:
5d:1b:8e:b1:0a:8d:1d:dd:81:c5:b3:d0:8b:fb:5a:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:E4:30:26:F1:E4:B1:9E:14:2A:50:2C:A8:B9:ED:66:5C:82:FF
X509v3 Authority Key Identifier:
keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/AD80C142EB7711EBAAD1621FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.16.0/22
Signature Algorithm: sha256WithRSAEncryption
77:08:ea:df:b1:ee:34:be:2e:77:da:02:41:26:f4:ab:45:6a:
5d:cd:c0:8c:bd:d5:3f:f5:e0:e9:7f:f9:3f:94:eb:70:66:94:
f8:51:83:d8:ef:c5:32:c7:4c:a0:96:db:90:ca:26:1e:f0:30:
ad:6d:17:96:34:4e:fb:c5:8d:35:65:95:c5:9d:34:cd:f2:ec:
25:c4:a8:37:41:04:5f:92:95:10:5a:72:c6:6f:9e:95:5b:9b:
d7:7f:fa:af:e7:19:64:17:6b:8a:a4:c2:22:ac:a4:9e:14:88:
02:f6:70:3b:8b:58:49:7c:61:9c:8f:0e:fb:0e:67:9e:1e:d0:
d7:34:16:2f:80:4c:f7:0a:78:50:76:19:27:97:cb:78:d5:38:
fe:fd:ad:ca:08:86:28:61:c7:8b:06:35:4d:60:7f:1a:c4:3e:
52:b5:0a:2c:d8:09:67:0f:61:22:0e:a9:86:7b:e4:26:e4:fd:
7d:cc:89:3d:65:45:fc:df:c0:3a:de:a1:2a:3a:f1:69:7e:20:
4e:58:ce:64:da:f1:be:3e:a8:47:d3:23:d2:88:05:1c:99:59:
e9:44:f2:c5:f9:14:3e:37:81:3e:19:06:69:37:52:1f:77:f5:
8b:e0:19:54:d6:ca:e0:57:7e:d2:35:b7:4d:19:f6:6b:75:d1:
a0:71:97:9e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY5
NjBFN0FGMTEwLwYDVQQFEygxRjREQjlBQzZCNjMxMDhBMTlCRENEQkVFQ0ZGNDQ5
ODQyQzhENkEwMB4XDTIxMDcyMzA1MzQ0OVoXDTIzMDcyMzA1MzQ0OVowGDEWMBQG
A1UEAwwNNjBmYTU0ZmQtNzlkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM4DHGMXwy9ImHrhQfRhpXCD0vvcuzppVa6aQxklNyGBj9bQPTkslKbWJMCW
vbKkNMI0tyQ1b40sQdtmbnqTryqLBzoulLikOk297FMnYVWQ3/LKNTbXtR4VaQ2n
XL9S70RT3DWUEupvkClRFch0PS+513hu5FSzG868xAMs8DGC/naPmEDvOUn3itjF
ArYuVAJik8WvWtKGjD4TK3TwpOVYiJGjwa4JhhdbpWuxlfCYUtIrw6ce+AS8LwB2
qJEJpiVvOJDCSuBh3FANIueEypr5aHNwoQd6LLbmm9TtxgGeK2cF+hZbbGVU4mDz
EOa4XRuOsQqNHd2BxbPQi/tads0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBQKCOQw
JvHksZ4UKlAsqLntZlyC/zAfBgNVHSMEGDAWgBQfTbmsa2MQihm9zb7s/0SYQsjW
oDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhBMDE0Q0UvSDAyNXJH
dGpFSW9admMyLTdQOUVtRUxJMXFBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSDAyNXJHdGpFSW9admMyLTdQOUVtRUxJMXFBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTYwRTcvMUMwQUU2M0VFQjc3MTFFQjgwREU3QzFFRDhB
MDE0Q0UvQUQ4MEMxNDJFQjc3MTFFQkFBRDE2MjFGRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbcEDANBgkqhkiG9w0BAQsF
AAOCAQEAdwjq37HuNL4ud9oCQSb0q0VqXc3AjL3VP/Xg6X/5P5TrcGaU+FGD2O/F
MsdMoJbbkMomHvAwrW0XljRO+8WNNWWVxZ00zfLsJcSoN0EEX5KVEFpyxm+elVub
13/6r+cZZBdriqTCIqyknhSIAvZwO4tYSXxhnI8O+w5nnh7Q1zQWL4BM9wp4UHYZ
J5fLeNU4/v2tygiGKGHHiwY1TWB/GsQ+UrUKLNgJZw9hIg6phnvkJuT9fcyJPWVF
/N/AOt6hKjrxaX4gTljOZNrxvj6oR9Mj0ogFHJlZ6UTyxfkUPjeBPhkGaTdSH3f1
i+AZVNbK4Fd+0jW3TRn2a3XRoHGXng==
-----END CERTIFICATE-----
Generated at Mon Jul 24 01:57:10 2023 by rpki-client on console-fra.rpki-client.org