Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/383454E0EA4411ECB49E9D9BF1222468.roa
File: 383454E0EA4411ECB49E9D9BF1222468.roa (raw, json)
Hash identifier: ghfKItgm7Z+00qhVeYg3R4wVRxkxrjIjSc/Csdldwck=
Subject key identifier: EC:CA:74:69:10:76:F8:32:43:A1:00:2B:71:5F:82:13:45:99:2F:D6
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0697
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/383454E0EA4411ECB49E9D9BF1222468.roa
Signing time: Sun 12 Jun 2022 11:38:46 +0000
ROA not before: Sun 12 Jun 2022 11:38:43 +0000
ROA not after: Mon 12 Jun 2023 11:38:43 +0000
asID: 398464
IP address blocks: 102.129.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 12 11:38:43 2022 GMT
Not After : Jun 12 11:38:43 2023 GMT
Subject: CN=62a5d046-8704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:79:71:f3:cd:c7:e2:9c:c3:96:85:7b:80:
8b:eb:4c:bd:d1:7e:89:32:e9:ce:90:1b:61:61:2f:
5c:e5:69:41:7c:e2:88:89:9e:c3:b5:65:06:17:3f:
b9:ed:55:01:bf:01:61:07:de:b7:93:0c:61:18:96:
9a:cc:86:9c:1a:47:3a:8f:13:b5:4f:78:0d:ef:52:
b8:c4:59:2d:6f:a2:7c:30:9e:9d:52:ca:58:a8:ae:
66:62:db:7b:68:4f:7f:7b:e2:d3:f3:56:7d:31:59:
df:3c:81:f0:c2:45:2a:2a:93:07:03:8d:da:a0:1c:
46:b3:7b:1f:e2:7d:13:aa:ca:6d:06:68:fc:f3:9d:
e7:6f:3f:33:ae:d7:85:f7:5a:be:1b:e9:d1:4e:77:
1f:17:69:38:76:d9:da:3d:06:44:7e:c2:42:ba:db:
da:cb:92:63:c6:ee:96:66:11:a3:5c:48:14:2d:ea:
47:06:14:65:d5:78:19:32:1f:47:c4:44:9c:5f:d9:
6e:68:91:68:87:d4:de:7c:25:43:64:7d:56:17:7d:
6a:80:23:73:03:3f:0e:fb:45:09:ca:5b:4d:51:37:
87:31:5e:7e:78:7c:7d:a8:2f:92:a6:48:1e:7a:f2:
37:06:46:0b:0b:1a:b6:e5:90:81:f9:db:d6:40:48:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:74:69:10:76:F8:32:43:A1:00:2B:71:5F:82:13:45:99:2F:D6
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/383454E0EA4411ECB49E9D9BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:3c:1a:92:26:91:0d:36:92:54:d6:78:ab:a6:8d:52:f1:b3:
35:4c:af:b6:32:86:a7:03:5c:cf:c4:21:4e:e6:58:c9:4f:80:
8f:2e:64:3f:bd:94:5c:3f:f2:24:e5:6c:c6:be:0d:74:03:8a:
e9:55:9d:30:49:f4:d2:b0:e5:44:ed:98:fc:e7:97:4e:bd:ee:
6a:53:53:58:4c:c4:7a:05:bd:44:bc:a4:43:4b:53:bc:a5:17:
af:b0:82:b5:3b:77:8b:fe:84:a9:6c:87:c9:94:dc:0b:37:48:
e5:9c:2f:3b:53:ea:b7:c5:7a:eb:df:57:6c:bf:8a:9c:b6:6b:
1f:fd:00:2f:0a:73:da:09:bb:e5:67:9e:2b:7b:bb:3f:82:d3:
e6:c6:7e:9b:5e:ff:5b:d7:c4:4a:25:f5:ce:2f:32:2a:72:c2:
b7:22:32:1b:06:dc:ab:9c:f7:6d:a9:17:fb:cb:19:c0:1a:bf:
2c:b9:a3:21:fb:6f:e1:29:6d:7b:53:95:e6:fa:7c:66:86:a5:
31:98:82:d1:a6:04:86:a2:85:a3:83:ec:40:60:01:3a:46:9b:
17:d1:62:dd:5f:72:85:b2:de:1d:7d:a0:84:bf:06:ee:18:44:
a2:67:f6:6d:57:44:4d:d7:eb:3a:99:6b:1b:62:6d:f3:16:50:
3c:06:45:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA2MTIxMTM4NDNaFw0yMzA2MTIxMTM4NDNaMBgxFjAU
BgNVBAMMDTYyYTVkMDQ2LTg3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8fnlx883H4pzDloV7gIvrTL3Rfoky6c6QG2FhL1zlaUF84oiJnsO1ZQYX
P7ntVQG/AWEH3reTDGEYlprMhpwaRzqPE7VPeA3vUrjEWS1vonwwnp1SyliormZi
23toT3974tPzVn0xWd88gfDCRSoqkwcDjdqgHEazex/ifROqym0GaPzznedvPzOu
14X3Wr4b6dFOdx8XaTh22do9BkR+wkK629rLkmPG7pZmEaNcSBQt6kcGFGXVeBky
H0fERJxf2W5okWiH1N58JUNkfVYXfWqAI3MDPw77RQnKW01RN4cxXn54fH2oL5Km
SB568jcGRgsLGrblkIH529ZASCEnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7Mp0
aRB2+DJDoQArcV+CE0WZL9YwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzM4MzQ1NEUwRUE0NDExRUNCNDlFOUQ5QkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmgZQwDQYJKoZIhvcNAQEL
BQADggEBAHw8GpImkQ02klTWeKumjVLxszVMr7YyhqcDXM/EIU7mWMlPgI8uZD+9
lFw/8iTlbMa+DXQDiulVnTBJ9NKw5UTtmPznl0697mpTU1hMxHoFvUS8pENLU7yl
F6+wgrU7d4v+hKlsh8mU3As3SOWcLztT6rfFeuvfV2y/ipy2ax/9AC8Kc9oJu+Vn
nit7uz+C0+bGfpte/1vXxEol9c4vMipywrciMhsG3Kuc922pF/vLGcAavyy5oyH7
b+EpbXtTleb6fGaGpTGYgtGmBIaihaOD7EBgATpGmxfRYt1fcoWy3h19oIS/Bu4Y
RKJn9m1XRE3X6zqZaxtibfMWUDwGRYU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:30 2023 by rpki-client on console-ams.rpki-client.org