Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C64F80B20311EDAB7215C9F1222468.roa
File: 15C64F80B20311EDAB7215C9F1222468.roa (raw, json)
Hash identifier: Oc4WI3IK8Mfgs8XH/k9Jb0KYK2A7gIDlGO3SBnAOuEg=
Subject key identifier: 55:FF:E2:1B:9E:B1:E8:E4:A9:29:32:70:2E:FE:13:07:4F:E7:98:D9
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A57
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C64F80B20311EDAB7215C9F1222468.roa
Signing time: Tue 21 Feb 2023 16:16:24 +0000
ROA not before: Tue 21 Feb 2023 16:16:20 +0000
ROA not after: Wed 21 Feb 2024 16:16:20 +0000
asID: 61317
IP address blocks: 102.165.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:16:20 2023 GMT
Not After : Feb 21 16:16:20 2024 GMT
Subject: CN=63f4ee58-4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:8e:22:32:d1:06:54:22:77:90:96:2c:11:
1d:d0:00:46:be:fe:54:fa:99:c5:43:12:a4:77:3b:
06:d2:28:45:4d:28:ca:5d:e2:52:5a:b3:ec:4f:0f:
fd:e2:7e:00:84:42:a2:d5:de:04:d6:b4:be:26:8c:
d6:8c:e0:a0:9f:36:5d:63:b5:3a:b2:f0:93:c7:ba:
d3:09:81:d7:a1:ed:b0:61:b3:05:29:5e:fe:67:8e:
5f:1a:aa:88:f2:45:97:66:c0:07:3d:da:18:e5:4a:
a1:08:ea:c1:b4:79:fb:2c:42:cb:17:d9:79:a8:fb:
cb:9c:22:2b:56:7d:4f:64:0b:03:7f:8b:b2:1e:ab:
f3:84:a3:b9:c3:b2:43:03:65:83:d1:b7:20:70:50:
61:44:99:bd:5f:64:dd:d7:68:6b:8c:78:a3:71:b3:
81:03:7e:6c:4f:bc:b3:c5:48:f7:5f:b6:41:5e:a2:
49:31:80:b9:40:a8:bf:67:fd:2d:fb:b2:28:03:57:
46:8b:b9:c3:bc:b9:e2:24:5e:af:16:38:e6:c2:eb:
bf:ea:66:27:c0:e4:12:56:0f:a5:b9:d1:97:d2:eb:
20:d0:02:44:31:32:9e:b3:91:b4:b8:8e:fe:f4:9f:
d8:04:52:44:35:0c:78:76:f6:bc:a4:4c:1e:71:9a:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:E2:1B:9E:B1:E8:E4:A9:29:32:70:2E:FE:13:07:4F:E7:98:D9
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/15C64F80B20311EDAB7215C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.41.0/24
Signature Algorithm: sha256WithRSAEncryption
31:61:f2:cd:78:75:d9:d8:0b:ab:07:eb:b2:f3:c7:d4:80:a3:
ad:46:03:28:65:59:13:ee:00:f9:4d:1f:3c:c8:a0:46:4f:43:
b7:38:fe:c6:68:a9:ee:26:65:a0:ca:0b:fa:3f:16:77:2e:e4:
e2:be:bd:0c:19:52:22:b4:7a:95:c6:87:9d:56:1b:7e:8a:dc:
a7:7d:40:14:ce:b8:a4:88:ed:c5:25:78:c4:6c:a7:7b:5b:22:
96:88:78:90:1d:d6:72:33:57:8b:8c:7f:e5:73:be:92:12:e5:
05:60:78:41:62:f5:bd:32:f8:85:61:0d:28:a9:17:af:67:74:
1c:a4:8b:82:72:0d:66:95:21:59:d1:f9:b9:24:b7:17:7b:8c:
7e:78:c5:e4:49:56:f3:dd:b2:f6:e6:57:0f:de:d2:c3:38:31:
7f:d8:ae:80:16:3a:a7:1c:61:0f:83:33:db:4a:1d:0c:d9:11:
a6:81:0b:89:5c:96:be:3f:04:91:06:ba:e1:77:3a:d2:ae:32:
ce:e4:d5:98:8b:62:b6:ce:a7:62:6f:7a:c2:a5:3d:36:05:44:
c6:61:8d:a5:32:b8:4f:ae:fc:72:7e:7a:2d:67:18:5d:c4:7a:
25:d5:89:d1:0c:6f:70:f5:d5:41:7c:a6:da:43:f3:c3:2e:2e:
b3:04:a7:af
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICClcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjExNjE2MjBaFw0yNDAyMjExNjE2MjBaMBgxFjAU
BgNVBAMMDTYzZjRlZTU4LTQ1ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCZY4iMtEGVCJ3kJYsER3QAEa+/lT6mcVDEqR3OwbSKEVNKMpd4lJas+xP
D/3ifgCEQqLV3gTWtL4mjNaM4KCfNl1jtTqy8JPHutMJgdeh7bBhswUpXv5njl8a
qojyRZdmwAc92hjlSqEI6sG0efssQssX2Xmo+8ucIitWfU9kCwN/i7Ieq/OEo7nD
skMDZYPRtyBwUGFEmb1fZN3XaGuMeKNxs4EDfmxPvLPFSPdftkFeokkxgLlAqL9n
/S37sigDV0aLucO8ueIkXq8WOObC67/qZifA5BJWD6W50ZfS6yDQAkQxMp6zkbS4
jv70n9gEUkQ1DHh29rykTB5xmgZRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVf/i
G56x6OSpKTJwLv4TB0/nmNkwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzE1QzY0RjgwQjIwMzExRURBQjcyMTVDOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpSkwDQYJKoZIhvcNAQEL
BQADggEBADFh8s14ddnYC6sH67Lzx9SAo61GAyhlWRPuAPlNHzzIoEZPQ7c4/sZo
qe4mZaDKC/o/Fncu5OK+vQwZUiK0epXGh51WG36K3Kd9QBTOuKSI7cUleMRsp3tb
IpaIeJAd1nIzV4uMf+VzvpIS5QVgeEFi9b0y+IVhDSipF69ndByki4JyDWaVIVnR
+bkktxd7jH54xeRJVvPdsvbmVw/e0sM4MX/YroAWOqccYQ+DM9tKHQzZEaaBC4lc
lr4/BJEGuuF3OtKuMs7k1ZiLYrbOp2JvesKlPTYFRMZhjaUyuE+u/HJ+ei1nGF3E
eiXVidEMb3D11UF8ptpD88MuLrMEp68=
-----END CERTIFICATE-----
Generated at Thu Feb 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org