Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D111372B20311EDB48B7DC9F1222468.roa
File: 3D111372B20311EDB48B7DC9F1222468.roa (raw, json)
Hash identifier: LxjElQMGZyoDRpKxyk4MFvURbR89ZsPNYPk2q0Lag4c=
Subject key identifier: AD:0C:DB:3A:CE:EE:00:B5:13:2B:28:38:D6:F3:39:A8:A4:68:B6:6B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0A59
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D111372B20311EDB48B7DC9F1222468.roa
Signing time: Tue 21 Feb 2023 16:17:30 +0000
ROA not before: Tue 21 Feb 2023 16:17:26 +0000
ROA not after: Wed 21 Feb 2024 16:17:26 +0000
asID: 61317
IP address blocks: 102.165.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2649 (0xa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 21 16:17:26 2023 GMT
Not After : Feb 21 16:17:26 2024 GMT
Subject: CN=63f4ee9a-85fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:ae:6d:31:a6:40:09:c8:c6:4d:68:2c:4b:
90:05:b8:3d:4e:c9:c6:fe:a2:4c:0f:b4:03:53:73:
6a:50:b2:3e:59:d3:43:48:d4:c0:44:a1:8e:75:5e:
10:a6:81:0b:4a:b8:56:b7:05:32:ad:1a:87:66:96:
3d:2c:09:d0:3f:4f:cb:77:46:c6:28:25:c3:ce:fe:
0f:47:9e:df:7b:45:83:cd:79:0d:0b:5e:92:61:e9:
5a:ea:63:79:a8:81:56:c3:82:32:0e:79:3f:86:8c:
70:a0:c6:f0:52:45:b9:76:c4:bf:7c:70:8d:88:82:
00:7c:3e:23:ee:0a:9d:ca:08:27:5d:d9:19:82:92:
dc:02:2a:5f:44:2c:c1:e1:6c:a8:75:97:fe:68:01:
1b:21:1d:ef:0a:4c:98:3a:bb:18:4d:05:89:a8:72:
52:04:10:db:2f:ac:61:0c:4d:d3:da:e3:a2:70:7d:
7a:65:58:43:d2:d9:7a:4f:2a:0c:b5:7b:63:e8:7f:
8c:23:e7:84:5f:71:f4:3d:40:39:39:96:cb:f6:f9:
d4:ba:f5:21:99:be:50:b4:18:86:1a:61:be:88:dd:
e9:36:97:73:fb:b9:70:e1:d2:98:48:0f:e1:bc:93:
3d:cb:5f:76:fe:a7:54:64:2f:a4:ba:51:d6:fc:11:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:DB:3A:CE:EE:00:B5:13:2B:28:38:D6:F3:39:A8:A4:68:B6:6B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3D111372B20311EDB48B7DC9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.60.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5f:db:56:cb:25:6e:99:38:2f:83:23:53:d0:bc:d5:74:a2:
f8:b9:39:77:79:5e:71:90:24:6e:2b:f6:d6:33:7f:72:5d:9c:
02:ab:50:65:38:19:e7:c6:cb:60:09:d5:1c:5b:8b:20:33:27:
f2:bc:68:e0:c3:b2:05:7f:5d:ec:53:ca:4e:76:a1:df:28:73:
24:a8:7b:27:40:80:37:38:44:ce:e0:61:01:8e:9a:de:72:02:
c6:02:7f:f6:b7:bf:fa:44:e1:42:ce:5e:c1:38:ee:3b:46:0e:
70:9b:e1:0e:a0:c1:1c:77:e0:1f:99:b4:cd:f3:52:68:5b:34:
2d:65:e1:74:b4:5c:ba:b7:6d:27:6a:f5:10:65:bf:e3:21:17:
46:a4:4b:d6:bb:db:3e:a2:62:02:3f:ad:16:18:7e:b8:c1:3b:
46:93:fa:cf:ca:bc:3f:b8:59:ae:65:c0:81:b6:db:6d:90:a4:
c6:0f:c2:a5:7c:25:62:05:db:73:5f:dd:4f:e5:0e:3c:78:7d:
9e:ca:d0:59:c1:e0:d4:d3:2b:bd:ad:18:10:d2:5a:7c:92:27:
ab:ac:a2:54:77:cf:a8:fd:2f:8d:81:8b:a2:04:3c:6a:40:41:
68:1d:aa:96:ab:58:89:7d:71:eb:13:a4:98:1c:e2:f4:b5:97:
b7:03:38:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICClkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAyMjExNjE3MjZaFw0yNDAyMjExNjE3MjZaMBgxFjAU
BgNVBAMMDTYzZjRlZTlhLTg1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChFa5tMaZACcjGTWgsS5AFuD1Oycb+okwPtANTc2pQsj5Z00NI1MBEoY51
XhCmgQtKuFa3BTKtGodmlj0sCdA/T8t3RsYoJcPO/g9Hnt97RYPNeQ0LXpJh6Vrq
Y3mogVbDgjIOeT+GjHCgxvBSRbl2xL98cI2IggB8PiPuCp3KCCdd2RmCktwCKl9E
LMHhbKh1l/5oARshHe8KTJg6uxhNBYmoclIEENsvrGEMTdPa46JwfXplWEPS2XpP
Kgy1e2Pof4wj54RfcfQ9QDk5lsv2+dS69SGZvlC0GIYaYb6I3ek2l3P7uXDh0phI
D+G8kz3LX3b+p1RkL6S6Udb8ESBLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrQzb
Os7uALUTKyg41vM5qKRotmswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzNEMTExMzcyQjIwMzExRURCNDhCN0RDOUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpTwwDQYJKoZIhvcNAQEL
BQADggEBAGRf21bLJW6ZOC+DI1PQvNV0ovi5OXd5XnGQJG4r9tYzf3JdnAKrUGU4
GefGy2AJ1RxbiyAzJ/K8aODDsgV/XexTyk52od8ocySoeydAgDc4RM7gYQGOmt5y
AsYCf/a3v/pE4ULOXsE47jtGDnCb4Q6gwRx34B+ZtM3zUmhbNC1l4XS0XLq3bSdq
9RBlv+MhF0akS9a72z6iYgI/rRYYfrjBO0aT+s/KvD+4Wa5lwIG2222QpMYPwqV8
JWIF23Nf3U/lDjx4fZ7K0FnB4NTTK72tGBDSWnySJ6usolR3z6j9L42Bi6IEPGpA
QWgdqparWIl9cesTpJgc4vS1l7cDONk=
-----END CERTIFICATE-----
Generated at Thu Feb 22 04:41:51 2024 by rpki-client on console-ams.rpki-client.org