Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/30FD7800695511EEABE2C07D4AD9E6FC.roa
File: 30FD7800695511EEABE2C07D4AD9E6FC.roa (raw, json)
Hash identifier: Ub55YO+iMT5w7q5sjK0wSNOWC9dsN/ADSP+FbpOHd0Q=
Subject key identifier: 71:0E:CB:0D:1A:63:02:63:73:19:E3:4B:57:2D:08:BE:F4:DA:6D:A9
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 01EB
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/30FD7800695511EEABE2C07D4AD9E6FC.roa
Signing time: Thu 12 Oct 2023 23:15:11 +0000
ROA not before: Fri 13 Oct 2023 23:15:08 +0000
ROA not after: Fri 13 Oct 2023 23:15:08 +0000
asID: 25818
IP address blocks: 102.177.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 13 23:15:08 2023 GMT
Not After : Oct 13 23:15:08 2023 GMT
Subject: CN=65287dff-c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:33:85:4e:fe:81:52:a5:97:13:f0:c1:7d:
6a:b7:cc:47:81:73:5c:58:2e:55:e6:89:d6:88:77:
46:68:57:e5:e4:9e:9e:51:27:46:7a:8f:bc:4b:3a:
87:a9:4a:0f:ee:4b:74:ab:5d:db:ba:25:dd:fc:6f:
54:94:09:38:25:09:de:9e:48:67:29:89:ff:16:91:
17:44:ac:3a:d4:c6:3d:99:48:39:a8:20:ed:ac:ad:
4c:e5:da:21:a9:48:27:4f:e5:87:36:85:74:46:49:
e1:2f:76:e5:eb:79:44:c0:d5:87:81:8c:7e:a2:5d:
aa:94:ff:a3:32:52:2c:96:ef:d7:63:dc:33:fb:27:
ae:b8:36:00:83:9c:cc:bd:ab:d9:91:76:48:16:84:
1e:85:08:e7:12:69:b3:4d:3f:a1:db:6e:1a:de:d3:
ff:1a:71:c7:d0:d9:5e:4b:79:ef:2b:37:66:26:6a:
bd:6d:0c:cf:49:78:3f:52:c2:77:a7:43:93:0d:37:
b6:e8:06:79:7b:ea:63:07:c8:67:be:10:04:99:55:
ab:1d:2d:c0:0c:01:0f:0f:d9:07:9c:59:9a:cf:48:
77:39:73:b6:59:cf:ab:17:f3:ad:94:3c:f4:7d:5a:
9e:86:e6:31:fc:40:fc:67:0a:08:e4:af:5d:f2:44:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:CB:0D:1A:63:02:63:73:19:E3:4B:57:2D:08:BE:F4:DA:6D:A9
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/30FD7800695511EEABE2C07D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:84:6f:49:55:33:42:e6:ea:29:57:bd:9b:e2:03:d7:80:be:
82:61:3d:04:08:22:5e:cd:8c:94:e8:cc:6d:90:4f:21:8e:d0:
3f:6d:85:31:85:6d:74:62:3b:08:49:71:16:f9:a1:f6:19:c5:
00:fc:73:a3:13:6f:7e:0b:f9:3e:ab:52:94:fc:f2:43:0c:ec:
a9:cb:eb:78:ab:8b:3b:6f:9a:b2:31:56:7d:59:cf:40:13:55:
21:a6:ec:ff:b3:4a:7e:3f:f7:df:06:03:5d:d7:ce:a5:c2:db:
8b:c3:7d:19:21:85:79:cd:a4:10:59:1a:24:a3:ef:d6:e1:fa:
68:fa:66:23:2e:20:ba:71:50:03:64:c6:c7:05:a5:f6:e5:51:
26:5f:ee:c2:13:e7:77:ec:7d:5b:23:04:0f:f7:de:1a:ec:6e:
f8:82:58:48:39:c8:c6:b0:33:6d:07:89:82:06:60:99:c8:4f:
57:4e:ea:6b:a8:d8:f2:84:5d:ad:b5:e2:f0:78:dd:4c:fa:b9:
ff:4f:95:49:79:1a:62:b9:d9:7a:bf:75:bf:91:b5:a2:3e:84:
cb:5a:e3:dc:d4:7d:79:75:3c:72:9b:95:0a:65:2c:ed:22:fc:
05:67:d2:cd:ad:07:1b:10:4c:3a:3a:f9:0a:c6:45:58:b6:d3:
6f:86:09:20
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAeswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yMzEwMTMyMzE1MDhaFw0yMzEwMTMyMzE1MDhaMBgxFjAU
BgNVBAMTDTY1Mjg3ZGZmLWMwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPpTOFTv6BUqWXE/DBfWq3zEeBc1xYLlXmidaId0ZoV+Xknp5RJ0Z6j7xL
OoepSg/uS3SrXdu6Jd38b1SUCTglCd6eSGcpif8WkRdErDrUxj2ZSDmoIO2srUzl
2iGpSCdP5Yc2hXRGSeEvduXreUTA1YeBjH6iXaqU/6MyUiyW79dj3DP7J664NgCD
nMy9q9mRdkgWhB6FCOcSabNNP6Hbbhre0/8accfQ2V5Lee8rN2Ymar1tDM9JeD9S
wnenQ5MNN7boBnl76mMHyGe+EASZVasdLcAMAQ8P2QecWZrPSHc5c7ZZz6sX862U
PPR9Wp6G5jH8QPxnCgjkr13yRJH7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcQ7L
DRpjAmNzGeNLVy0IvvTabakwHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYx
MjIyNDY4LzMwRkQ3ODAwNjk1NTExRUVBQkUyQzA3RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsXkwDQYJKoZIhvcNAQEL
BQADggEBAFqEb0lVM0Lm6ilXvZviA9eAvoJhPQQIIl7NjJTozG2QTyGO0D9thTGF
bXRiOwhJcRb5ofYZxQD8c6MTb34L+T6rUpT88kMM7KnL63iriztvmrIxVn1Zz0AT
VSGm7P+zSn4/998GA13XzqXC24vDfRkhhXnNpBBZGiSj79bh+mj6ZiMuILpxUANk
xscFpfblUSZf7sIT53fsfVsjBA/33hrsbviCWEg5yMawM20HiYIGYJnIT1dO6muo
2PKEXa214vB43Uz6uf9PlUl5GmK52Xq/db+RtaI+hMta49zUfXl1PHKblQplLO0i
/AVn0s2tBxsQTDo6+QrGRVi202+GCSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org