Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F64CE64F9CB11EC8164AFF4F1222468.roa
File: 5F64CE64F9CB11EC8164AFF4F1222468.roa (raw, json)
Hash identifier: NmFBE8MIL+YkICPqiADFMAo26ozoNtJc5BktBrWE6Ug=
Subject key identifier: B3:AE:00:FF:A7:77:A2:90:5B:73:FD:A5:DD:F0:DA:B5:B8:EB:AC:BD
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06EE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F64CE64F9CB11EC8164AFF4F1222468.roa
Signing time: Sat 02 Jul 2022 05:54:02 +0000
ROA not before: Sat 02 Jul 2022 05:53:58 +0000
ROA not after: Sun 02 Jul 2023 05:53:58 +0000
asID: 43676
IP address blocks: 102.129.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:53:58 2022 GMT
Not After : Jul 2 05:53:58 2023 GMT
Subject: CN=62bfdd7a-20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:0d:33:94:89:e6:b8:83:ef:35:bc:46:f9:
30:cd:34:9e:93:26:c1:11:6e:8b:e3:30:ef:0a:c7:
4a:03:c7:3a:ab:a1:8b:b6:60:d6:8e:db:51:48:a7:
47:f8:fc:92:f2:08:f8:16:60:44:80:d3:a5:88:a6:
8a:fe:c0:f1:d7:9c:1b:3a:7a:2f:7a:ce:e9:ae:e2:
dd:9f:b9:90:52:5e:aa:92:39:6a:52:ce:38:a7:89:
ca:0d:df:86:31:ed:f0:e5:d2:f0:96:24:6c:0f:bd:
5c:0d:92:7c:47:1a:5e:d1:d6:c1:7b:e3:03:99:94:
75:16:b4:32:fe:7a:5c:a0:0e:65:9a:91:51:64:7f:
7c:c8:14:0a:7c:5b:a8:ee:01:25:98:e2:c0:be:13:
5d:d7:eb:94:4d:41:14:f4:5f:03:0c:1e:1e:73:a1:
e0:8b:62:b7:a3:ed:66:d6:bd:71:57:a1:4e:82:cb:
f7:47:e6:ad:42:67:5b:44:e1:1c:3a:f0:7b:52:62:
20:9d:da:d4:4b:2d:66:fa:d0:d2:60:de:b6:3e:17:
b8:bf:89:64:4c:b7:87:61:c5:df:9b:55:e7:69:ca:
b4:33:eb:a7:84:eb:fc:8f:af:85:aa:4b:3a:30:43:
bd:9d:8c:a4:d8:6e:db:e9:62:a6:b5:a3:03:d1:7d:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:00:FF:A7:77:A2:90:5B:73:FD:A5:DD:F0:DA:B5:B8:EB:AC:BD
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/5F64CE64F9CB11EC8164AFF4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d5:4a:e7:90:44:a1:b9:29:8c:e9:46:aa:74:95:e0:b4:20:
cc:29:74:3b:61:46:73:28:3c:a1:a7:a2:8f:93:61:c0:63:53:
c6:de:83:29:30:07:0e:97:ed:b7:9b:e1:b1:0a:ff:fd:41:80:
44:74:77:d5:79:cc:57:c1:6c:1a:12:53:11:02:2b:8b:ec:8a:
12:13:8a:59:df:0e:32:5e:55:5d:e2:aa:5e:d4:49:7a:18:91:
c6:e8:85:91:3a:9d:f5:7c:ba:7d:4a:a1:91:a8:10:4f:5e:e8:
eb:63:b6:55:9b:d6:fc:87:ff:39:eb:cb:21:85:c4:e7:40:58:
b0:d7:c3:0e:c5:3b:d9:85:73:2f:d2:26:ae:32:55:78:b8:ad:
f1:31:c2:9d:e5:02:03:fd:0d:af:8b:48:fa:40:c0:52:c3:c7:
e4:01:98:a1:ab:17:02:a1:1c:82:91:c5:36:91:b9:a1:ca:ca:
e7:02:b6:12:88:24:16:6f:dd:bd:da:5a:0e:42:86:77:cb:e9:
16:a4:ae:6e:87:71:90:ff:01:4d:c4:f0:e0:c6:74:98:4f:83:
54:f3:06:f4:52:11:0a:a4:76:2b:81:ed:45:65:ad:51:ec:d0:
a0:76:fc:4a:f7:f1:af:7a:c2:11:51:2c:ce:fb:82:ab:da:b9:
c2:43:d7:65
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDIwNTUzNThaFw0yMzA3MDIwNTUzNThaMBgxFjAU
BgNVBAMMDTYyYmZkZDdhLTIwZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDq7Q0zlInmuIPvNbxG+TDNNJ6TJsERbovjMO8Kx0oDxzqroYu2YNaO21FI
p0f4/JLyCPgWYESA06WIpor+wPHXnBs6ei96zumu4t2fuZBSXqqSOWpSzjinicoN
34Yx7fDl0vCWJGwPvVwNknxHGl7R1sF74wOZlHUWtDL+elygDmWakVFkf3zIFAp8
W6juASWY4sC+E13X65RNQRT0XwMMHh5zoeCLYrej7WbWvXFXoU6Cy/dH5q1CZ1tE
4Rw68HtSYiCd2tRLLWb60NJg3rY+F7i/iWRMt4dhxd+bVedpyrQz66eE6/yPr4Wq
SzowQ72djKTYbtvpYqa1owPRfZ7zAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs64A
/6d3opBbc/2l3fDatbjrrL0wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzVGNjRDRTY0RjlDQjExRUM4MTY0QUZGNEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmga0wDQYJKoZIhvcNAQEL
BQADggEBAJ/VSueQRKG5KYzpRqp0leC0IMwpdDthRnMoPKGnoo+TYcBjU8begykw
Bw6X7beb4bEK//1BgER0d9V5zFfBbBoSUxECK4vsihITilnfDjJeVV3iql7USXoY
kcbohZE6nfV8un1KoZGoEE9e6OtjtlWb1vyH/znryyGFxOdAWLDXww7FO9mFcy/S
Jq4yVXi4rfExwp3lAgP9Da+LSPpAwFLDx+QBmKGrFwKhHIKRxTaRuaHKyucCthKI
JBZv3b3aWg5ChnfL6Rakrm6HcZD/AU3E8ODGdJhPg1TzBvRSEQqkdiuB7UVlrVHs
0KB2/Er38a96whFRLM77gqvaucJD12U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org