Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D1DC7DED23211EC80C395A2F1222468.roa
File: 0D1DC7DED23211EC80C395A2F1222468.roa (raw, json)
Hash identifier: jUjOtfLeekA97m+uTcHvMJN+so4sZtgyMGr8sOZEfXs=
Subject key identifier: 66:FC:0A:47:F2:C1:25:34:A0:5E:ED:28:01:D5:93:A6:A8:97:8D:F9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 065A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D1DC7DED23211EC80C395A2F1222468.roa
Signing time: Thu 12 May 2022 20:28:15 +0000
ROA not before: Thu 12 May 2022 20:28:11 +0000
ROA not after: Sun 12 May 2024 20:28:11 +0000
asID: 6315
IP address blocks: 102.129.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1626 (0x65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 12 20:28:11 2022 GMT
Not After : May 12 20:28:11 2024 GMT
Subject: CN=627d6ddf-135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:62:33:82:db:58:b0:5c:74:d5:b9:71:24:
63:73:e9:56:71:55:6a:b2:17:3f:12:fb:67:22:a2:
3a:ce:e2:dd:06:94:d6:3f:61:ee:fd:73:c8:a2:97:
e9:3e:f1:85:bd:de:2e:a8:f6:30:87:da:0e:c6:49:
1b:8f:0a:de:30:20:fe:f7:9b:ce:12:ab:e2:30:54:
62:84:47:c3:f6:24:c3:51:cc:ab:c7:ce:89:ca:3e:
b9:a9:b8:17:f4:02:e1:10:7e:99:51:96:fa:6a:d0:
3a:07:53:1d:65:3c:79:8c:32:7f:51:f2:fa:d1:40:
e1:30:a0:91:5b:d6:e6:49:8b:ee:11:97:c0:05:7f:
aa:a4:c5:21:0b:2f:48:9d:b9:33:e8:dc:cc:1b:ec:
9c:ae:31:1e:70:0a:98:3b:71:3f:49:b8:2c:f9:71:
ab:9a:69:f6:32:e1:e5:5c:6e:fb:e2:0f:50:18:68:
19:96:13:c5:5c:bc:4e:d1:b1:8c:df:5e:6d:19:87:
4a:5c:ad:0d:5e:b7:9c:c8:cf:12:2c:8d:25:ae:26:
ed:67:5b:80:5c:22:48:63:e4:24:39:3c:45:72:b4:
41:cc:8f:17:41:12:08:f6:37:dd:5e:29:36:6e:b8:
51:f7:91:05:98:4b:7f:a8:06:6c:66:57:a0:c4:5c:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:0A:47:F2:C1:25:34:A0:5E:ED:28:01:D5:93:A6:A8:97:8D:F9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/0D1DC7DED23211EC80C395A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:37:af:41:60:e7:5e:46:e2:15:59:c1:4c:b6:05:be:8b:f8:
10:08:b7:0e:f2:ab:ce:d1:92:bc:8b:cb:fa:0d:10:80:e9:1a:
20:c7:5f:0c:58:47:77:3f:eb:42:d0:05:3d:c7:94:0b:fb:e1:
8c:9f:b5:04:bb:5f:73:55:46:a8:7e:c0:bb:42:bf:db:40:9a:
3d:8a:64:bb:07:f3:82:24:47:7e:dc:28:56:d2:5d:10:1b:de:
49:66:8d:cd:62:e1:7b:bc:7a:b1:51:13:76:56:7f:91:6d:0d:
c9:15:b7:94:f4:f2:0f:1d:7c:c7:13:0c:4d:57:99:0d:b3:ef:
16:9a:be:87:30:08:54:e7:d5:9b:5a:ea:6b:ea:f2:ad:e1:67:
4e:8e:29:73:56:ac:3a:be:f2:26:44:5c:90:cf:25:ab:f3:05:
89:95:22:c8:69:f1:a4:81:17:73:27:e3:71:55:0b:a7:15:61:
68:0c:3d:8f:6a:04:ee:22:0a:ae:b4:0d:04:45:9c:1a:ec:19:
c3:d1:68:51:0a:bc:51:4f:a9:1b:a8:c1:fa:e2:73:de:0b:c8:
30:04:f6:48:5e:0d:bf:e0:21:e0:92:b2:25:3d:1c:5f:b5:94:
6e:a1:f8:a0:77:9d:79:38:99:a6:35:2e:7f:c5:49:b2:84:2a:
0e:0f:82:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBlowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA1MTIyMDI4MTFaFw0yNDA1MTIyMDI4MTFaMBgxFjAU
BgNVBAMMDTYyN2Q2ZGRmLTEzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNKGIzgttYsFx01blxJGNz6VZxVWqyFz8S+2ciojrO4t0GlNY/Ye79c8ii
l+k+8YW93i6o9jCH2g7GSRuPCt4wIP73m84Sq+IwVGKER8P2JMNRzKvHzonKPrmp
uBf0AuEQfplRlvpq0DoHUx1lPHmMMn9R8vrRQOEwoJFb1uZJi+4Rl8AFf6qkxSEL
L0iduTPo3Mwb7JyuMR5wCpg7cT9JuCz5cauaafYy4eVcbvviD1AYaBmWE8VcvE7R
sYzfXm0Zh0pcrQ1et5zIzxIsjSWuJu1nW4BcIkhj5CQ5PEVytEHMjxdBEgj2N91e
KTZuuFH3kQWYS3+oBmxmV6DEXHulAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZvwK
R/LBJTSgXu0oAdWTpqiXjfkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzBEMURDN0RFRDIzMjExRUM4MEMzOTVBMkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmgdowDQYJKoZIhvcNAQEL
BQADggEBAB43r0Fg515G4hVZwUy2Bb6L+BAItw7yq87RkryLy/oNEIDpGiDHXwxY
R3c/60LQBT3HlAv74YyftQS7X3NVRqh+wLtCv9tAmj2KZLsH84IkR37cKFbSXRAb
3klmjc1i4Xu8erFRE3ZWf5FtDckVt5T08g8dfMcTDE1XmQ2z7xaavocwCFTn1Zta
6mvq8q3hZ06OKXNWrDq+8iZEXJDPJavzBYmVIshp8aSBF3Mn43FVC6cVYWgMPY9q
BO4iCq60DQRFnBrsGcPRaFEKvFFPqRuowfric94LyDAE9kheDb/gIeCSsiU9HF+1
lG6h+KB3nXk4maY1Ln/FSbKEKg4Pgho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org