Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CE7E8CA777F11EB99F9F981F8AEA228.roa
File: 6CE7E8CA777F11EB99F9F981F8AEA228.roa (raw, json)
Hash identifier: 93MLv7RCgM3VOcJX/wjXJ2Cxr7PSoqujTQCpOamymAE=
Subject key identifier: AE:96:C9:6A:85:AB:61:DF:0C:9B:00:C1:20:65:B6:15:1D:89:CB:77
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 036D
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CE7E8CA777F11EB99F9F981F8AEA228.roa
Signing time: Thu 25 Feb 2021 15:37:54 +0000
ROA not before: Thu 25 Feb 2021 15:37:49 +0000
ROA not after: Fri 25 Feb 2022 15:37:49 +0000
asID: 212238
IP address blocks: 102.129.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 25 15:37:49 2021 GMT
Not After : Feb 25 15:37:49 2022 GMT
Subject: CN=6037c452-2272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:8f:9e:d2:d5:53:ec:29:13:15:34:b6:12:
39:b2:36:95:83:03:60:ba:e8:fa:1e:ab:de:96:e6:
5c:0a:8c:1b:0c:87:c6:f4:4f:67:29:77:3e:8a:72:
22:91:db:3c:95:82:c2:ec:86:a8:91:52:eb:6b:e6:
55:7a:03:e3:e5:26:1d:11:5e:5a:68:c1:69:e9:dc:
2b:e4:6b:da:3f:f8:9d:38:32:98:18:0d:a4:e8:ef:
4e:37:af:f7:76:e2:7f:9c:50:11:0e:b3:08:ab:d1:
2c:15:52:1f:4b:12:af:7f:b8:48:d1:b1:f5:b7:d8:
a8:38:a2:bc:1b:ca:87:5c:cd:0b:18:24:35:8f:ba:
39:3b:48:2c:c4:42:4f:38:52:a4:25:45:36:28:16:
e5:86:6e:c1:2b:33:03:6c:09:58:4d:c7:27:23:52:
74:e5:e6:0f:1c:57:1a:16:0b:a3:9d:37:fd:45:80:
33:56:db:46:3d:e1:ca:88:a5:37:66:7b:6d:55:65:
32:78:87:bd:9b:a2:42:a1:63:69:c6:3c:80:af:60:
ba:90:a1:ee:21:c4:17:72:cf:2b:5d:36:61:65:0f:
bb:7f:f2:6b:27:b5:41:4a:7f:b7:6c:54:c8:32:d0:
4a:53:c8:44:e5:19:7b:e8:ff:9c:9a:f8:15:25:d4:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:C9:6A:85:AB:61:DF:0C:9B:00:C1:20:65:B6:15:1D:89:CB:77
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6CE7E8CA777F11EB99F9F981F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.223.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1a:3e:35:e5:50:6d:43:d6:85:e7:86:3e:cb:d4:df:8f:07:
66:88:18:21:82:d6:0a:ab:24:15:99:18:c7:56:76:79:cb:76:
c8:22:24:eb:19:b0:7a:71:0a:97:37:78:9c:69:6b:42:df:ca:
5f:1e:66:e8:c3:91:d8:fe:82:fc:67:ad:c4:9f:62:9b:13:2e:
4c:56:cf:ca:6a:7e:1b:03:be:ec:85:c7:c0:93:c7:e7:79:0e:
f5:92:93:ed:95:5f:7d:d6:74:2d:9a:3a:a9:97:0c:8d:c9:d2:
8c:32:74:f1:0b:a8:ec:5f:48:78:cb:be:ef:92:91:14:95:cb:
71:70:d5:01:97:ed:a5:60:27:bc:c9:90:58:fd:ce:7d:cb:45:
b8:0d:f0:08:07:e0:f2:59:85:03:5c:86:66:40:23:32:a8:89:
3f:a1:74:c4:db:7c:37:f1:79:5a:37:b4:ef:ed:e4:fe:9a:91:
99:b7:02:15:78:2c:44:f4:95:c8:ec:d2:09:c2:be:6d:98:56:
48:e7:37:46:60:92:d4:ef:da:31:48:08:b4:ec:7c:d5:34:e0:
eb:21:3c:92:ac:e8:31:ce:69:42:a9:6d:92:17:88:9b:0e:bf:
93:fe:8c:e0:22:b4:5b:60:df:08:bf:b9:92:91:32:07:85:e5:
b7:8e:17:8b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA20wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTAyMjUxNTM3NDlaFw0yMjAyMjUxNTM3NDlaMBgxFjAU
BgNVBAMTDTYwMzdjNDUyLTIyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAXI+e0tVT7CkTFTS2EjmyNpWDA2C66Poeq96W5lwKjBsMh8b0T2cpdz6K
ciKR2zyVgsLshqiRUutr5lV6A+PlJh0RXlpowWnp3Cvka9o/+J04MpgYDaTo7043
r/d24n+cUBEOswir0SwVUh9LEq9/uEjRsfW32Kg4orwbyodczQsYJDWPujk7SCzE
Qk84UqQlRTYoFuWGbsErMwNsCVhNxycjUnTl5g8cVxoWC6OdN/1FgDNW20Y94cqI
pTdme21VZTJ4h72bokKhY2nGPICvYLqQoe4hxBdyzytdNmFlD7t/8msntUFKf7ds
VMgy0EpTyETlGXvo/5ya+BUl1PFJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrpbJ
aoWrYd8MmwDBIGW2FR2Jy3cwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzZDRTdFOENBNzc3RjExRUI5OUY5Rjk4MUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgd8wDQYJKoZIhvcNAQEL
BQADggEBADQaPjXlUG1D1oXnhj7L1N+PB2aIGCGC1gqrJBWZGMdWdnnLdsgiJOsZ
sHpxCpc3eJxpa0Lfyl8eZujDkdj+gvxnrcSfYpsTLkxWz8pqfhsDvuyFx8CTx+d5
DvWSk+2VX33WdC2aOqmXDI3J0owydPELqOxfSHjLvu+SkRSVy3Fw1QGX7aVgJ7zJ
kFj9zn3LRbgN8AgH4PJZhQNchmZAIzKoiT+hdMTbfDfxeVo3tO/t5P6akZm3AhV4
LET0lcjs0gnCvm2YVkjnN0ZgktTv2jFICLTsfNU04OshPJKs6DHOaUKpbZIXiJsO
v5P+jOAitFtg3wi/uZKRMgeF5beOF4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org