Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/711BD88AFCCB11EB9636E025D8A014CE.roa
File: 711BD88AFCCB11EB9636E025D8A014CE.roa (raw, json)
Hash identifier: 0FGCJ/S4BbtpO8LMboGzQBq8a3a5pK3ULq3+dfwQvuw=
Subject key identifier: C7:BA:8A:5A:35:66:00:EA:DC:38:6C:AF:C7:67:18:F7:6F:C0:49:DB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04A4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/711BD88AFCCB11EB9636E025D8A014CE.roa
Signing time: Sat 14 Aug 2021 06:47:52 +0000
ROA not before: Sat 14 Aug 2021 06:47:48 +0000
ROA not after: Sun 14 Aug 2022 06:47:48 +0000
asID: 397423
IP address blocks: 102.129.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 14 06:47:48 2021 GMT
Not After : Aug 14 06:47:48 2022 GMT
Subject: CN=61176718-6d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:f6:23:84:eb:6d:c4:66:ff:19:04:71:3a:
b8:81:b4:c9:ba:20:c7:1d:c6:9a:75:5d:36:cf:52:
12:38:3d:b4:07:ca:a9:d2:94:35:b5:22:5f:ed:fd:
b8:de:fd:ab:4e:b8:e7:2b:e0:59:d7:64:db:5f:b7:
43:07:92:4b:d2:89:40:ed:dc:54:15:24:ae:37:b0:
d7:f7:50:26:72:29:5d:d1:d1:38:bd:42:20:ac:85:
2d:37:a7:b0:44:ca:d7:e4:8b:0c:fe:67:84:70:bb:
52:56:34:1a:53:6a:b2:97:4b:50:e5:e3:cb:e1:a7:
20:0d:17:f9:ea:46:2a:05:5e:9c:0e:da:59:c1:0c:
84:d0:9c:70:31:8f:e0:b6:bf:5a:f2:71:ae:27:70:
13:7c:26:93:8d:7e:a0:5c:58:a7:9b:9e:97:bb:f9:
d6:93:2a:ca:47:27:82:ab:1a:3d:f9:97:3b:3b:33:
ab:96:f7:f0:44:77:a0:6e:97:d7:bf:76:e6:3d:c1:
51:05:72:98:4b:00:6b:91:27:27:eb:9f:a9:3c:76:
e9:0b:5b:45:8d:9f:80:86:aa:27:2d:72:8c:c8:aa:
af:40:3a:d8:41:2f:88:b5:44:a7:ee:08:c0:81:c9:
c1:bd:be:3f:e9:db:23:e2:8b:bf:45:53:d5:ce:43:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BA:8A:5A:35:66:00:EA:DC:38:6C:AF:C7:67:18:F7:6F:C0:49:DB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/711BD88AFCCB11EB9636E025D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.202.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c8:04:31:d6:eb:c0:d5:01:63:43:d5:64:c1:61:f4:73:88:
4f:96:b6:54:f6:22:42:7b:93:39:6f:f8:9d:ec:29:25:fd:e2:
78:75:a8:29:ac:18:8f:f5:4c:c8:a3:f8:af:52:5b:22:dd:b9:
06:0b:87:4e:1a:74:62:f8:45:c9:34:47:fc:5f:51:ae:e1:e4:
a4:25:4e:dc:b7:30:da:9c:ef:55:06:00:1f:29:25:c2:64:d8:
b0:b9:7d:71:0e:0d:b4:91:a8:be:9b:e6:17:79:8d:0d:e8:b2:
5b:9b:f6:1c:68:24:65:dc:27:46:c3:c0:83:87:30:4b:bd:7f:
92:be:dc:ee:09:4b:b0:da:86:88:a9:08:d8:ce:29:88:80:ac:
3c:8a:54:f5:6a:b3:c6:d1:84:ea:46:32:d2:66:99:4b:a9:dd:
c0:5e:1b:b4:8a:d5:81:6a:c1:2d:3f:de:7f:ef:80:53:6e:d3:
cc:78:45:71:9f:d6:3a:fe:1f:54:97:e1:aa:86:ac:45:55:05:
71:58:af:28:0f:c4:f6:5a:3a:ad:dc:aa:e5:f7:7c:d1:0d:32:
9f:1c:cc:30:f2:94:0c:28:0b:02:f1:64:cc:62:d0:72:66:cc:
b6:07:66:1b:21:98:69:41:e5:35:38:e9:56:dc:a3:1e:64:5d:
80:0b:7c:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTA4MTQwNjQ3NDhaFw0yMjA4MTQwNjQ3NDhaMBgxFjAU
BgNVBAMMDTYxMTc2NzE4LTZkNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8IvYjhOttxGb/GQRxOriBtMm6IMcdxpp1XTbPUhI4PbQHyqnSlDW1Il/t
/bje/atOuOcr4FnXZNtft0MHkkvSiUDt3FQVJK43sNf3UCZyKV3R0Ti9QiCshS03
p7BEytfkiwz+Z4Rwu1JWNBpTarKXS1Dl48vhpyANF/nqRioFXpwO2lnBDITQnHAx
j+C2v1ryca4ncBN8JpONfqBcWKebnpe7+daTKspHJ4KrGj35lzs7M6uW9/BEd6Bu
l9e/duY9wVEFcphLAGuRJyfrn6k8dukLW0WNn4CGqictcozIqq9AOthBL4i1RKfu
CMCBycG9vj/p2yPii79FU9XOQzabAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUx7qK
WjVmAOrcOGyvx2cY92/ASdswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzcxMUJEODhBRkNDQjExRUI5NjM2RTAyNUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcowDQYJKoZIhvcNAQEL
BQADggEBAHDIBDHW68DVAWND1WTBYfRziE+WtlT2IkJ7kzlv+J3sKSX94nh1qCms
GI/1TMij+K9SWyLduQYLh04adGL4Rck0R/xfUa7h5KQlTty3MNqc71UGAB8pJcJk
2LC5fXEODbSRqL6b5hd5jQ3oslub9hxoJGXcJ0bDwIOHMEu9f5K+3O4JS7Dahoip
CNjOKYiArDyKVPVqs8bRhOpGMtJmmUup3cBeG7SK1YFqwS0/3n/vgFNu08x4RXGf
1jr+H1SX4aqGrEVVBXFYrygPxPZaOq3cquX3fNENMp8czDDylAwoCwLxZMxi0HJm
zLYHZhshmGlB5TU46Vbcox5kXYALfMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org