Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/766EDD3227CE11EBAEDB1431F8AEA228.roa
File: 766EDD3227CE11EBAEDB1431F8AEA228.roa (raw, json)
Hash identifier: OSTBvta8edKsvz9JRtl1krPzUTGh5xaUqrLU83Al8Z8=
Subject key identifier: E5:DB:0D:8B:FB:AA:54:7C:19:B5:48:E8:C8:43:B9:7D:34:A2:95:1B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 02B6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/766EDD3227CE11EBAEDB1431F8AEA228.roa
Signing time: Mon 16 Nov 2020 05:42:07 +0000
ROA not before: Mon 16 Nov 2020 05:42:00 +0000
ROA not after: Wed 16 Nov 2022 05:42:00 +0000
asID: 13213
IP address blocks: 102.129.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Nov 16 05:42:00 2020 GMT
Not After : Nov 16 05:42:00 2022 GMT
Subject: CN=5fb2112f-7a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:61:8a:f0:30:a2:9f:fc:bc:02:ee:dc:71:
ce:95:96:86:f7:62:de:20:ef:e8:1d:06:ba:4d:73:
3a:25:05:49:aa:9e:bc:2e:2d:60:04:a6:9f:0f:74:
25:15:b7:5f:84:02:31:4f:86:22:56:28:9b:3d:2c:
93:59:1c:0a:6d:f8:1b:51:06:09:aa:b2:fc:2b:76:
79:45:8f:e2:c5:89:8a:4a:ce:53:be:a8:9f:72:70:
57:13:d6:38:10:6a:94:1f:22:e1:ce:e3:d5:ad:8b:
3f:6f:66:ac:8c:8c:f1:9a:43:91:a7:7c:9f:2f:e9:
13:76:0e:12:63:40:6f:54:1f:ed:b0:04:ff:aa:e0:
85:3a:d8:d5:e2:c1:24:9c:49:4c:34:55:2e:3a:e7:
22:3c:0e:70:79:10:d9:ff:14:91:a8:23:d9:dd:5d:
84:3f:f0:f4:1f:20:76:a7:ab:3e:20:9e:1d:be:df:
6d:7d:66:10:38:f1:3a:51:d0:20:87:23:6a:ea:41:
85:c6:d2:ae:8a:62:2a:70:0e:35:2a:77:78:83:dd:
ac:12:74:e6:e2:a7:d7:0a:20:28:2d:6b:58:ad:a6:
91:d2:30:9f:ca:70:a4:dc:ee:9b:d9:6b:ef:ea:26:
64:e6:7c:2b:c9:69:4d:1c:8d:f4:33:1b:20:7b:6d:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:0D:8B:FB:AA:54:7C:19:B5:48:E8:C8:43:B9:7D:34:A2:95:1B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/766EDD3227CE11EBAEDB1431F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:dc:f2:5c:91:1f:7f:cf:f4:92:bd:2d:c1:87:fa:97:9a:a5:
4d:7a:a0:80:8c:de:7f:00:1d:60:b9:e6:68:49:ff:60:8f:c9:
6c:4a:7b:4f:40:1e:8e:59:ed:05:d9:26:0e:1d:3a:04:b5:e0:
04:c5:19:c1:d6:c9:71:d3:62:6d:79:d7:1a:9e:85:64:34:49:
a5:b9:16:6f:20:95:c2:11:4b:71:fb:ef:65:00:c9:95:0f:60:
bf:6f:08:09:69:28:5b:d8:69:fd:f5:73:e6:ac:7c:5a:cc:fe:
61:6a:45:ac:7c:99:df:19:77:ff:53:ef:56:aa:e9:04:00:ae:
64:7e:56:d4:e0:ba:c2:f9:c5:67:a1:d9:df:c6:52:d8:0b:74:
05:18:0d:65:e8:6b:7c:46:b5:f5:5c:46:81:ae:4b:e7:0e:ae:
4a:56:67:69:86:c6:0b:9a:f7:31:8d:ef:e9:d4:04:dd:5f:9a:
01:d0:85:62:8b:83:dd:6b:07:71:5f:c8:b8:76:be:8a:bb:e1:
2f:ce:b0:06:de:a6:7a:86:b7:2e:bc:28:8a:2b:0c:97:55:98:
24:a6:1d:71:d2:ac:8c:21:82:67:f3:b2:6a:9c:26:e4:dc:c3:
59:fb:c8:94:33:db:96:ef:44:bd:5f:29:19:1b:4d:eb:fd:82:
94:82:e8:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICArYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMDExMTYwNTQyMDBaFw0yMjExMTYwNTQyMDBaMBgxFjAU
BgNVBAMTDTVmYjIxMTJmLTdhNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCv6mGK8DCin/y8Au7ccc6Vlob3Yt4g7+gdBrpNczolBUmqnrwuLWAEpp8P
dCUVt1+EAjFPhiJWKJs9LJNZHApt+BtRBgmqsvwrdnlFj+LFiYpKzlO+qJ9ycFcT
1jgQapQfIuHO49Wtiz9vZqyMjPGaQ5GnfJ8v6RN2DhJjQG9UH+2wBP+q4IU62NXi
wSScSUw0VS465yI8DnB5ENn/FJGoI9ndXYQ/8PQfIHanqz4gnh2+3219ZhA48TpR
0CCHI2rqQYXG0q6KYipwDjUqd3iD3awSdObip9cKICgta1itppHSMJ/KcKTc7pvZ
a+/qJmTmfCvJaU0cjfQzGyB7bZi7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5dsN
i/uqVHwZtUjoyEO5fTSilRswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzc2NkVERDMyMjdDRTExRUJBRURCMTQzMUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcowDQYJKoZIhvcNAQEL
BQADggEBAMTc8lyRH3/P9JK9LcGH+peapU16oICM3n8AHWC55mhJ/2CPyWxKe09A
Ho5Z7QXZJg4dOgS14ATFGcHWyXHTYm151xqehWQ0SaW5Fm8glcIRS3H772UAyZUP
YL9vCAlpKFvYaf31c+asfFrM/mFqRax8md8Zd/9T71aq6QQArmR+VtTgusL5xWeh
2d/GUtgLdAUYDWXoa3xGtfVcRoGuS+cOrkpWZ2mGxgua9zGN7+nUBN1fmgHQhWKL
g91rB3FfyLh2voq74S/OsAbepnqGty68KIorDJdVmCSmHXHSrIwhgmfzsmqcJuTc
w1n7yJQz25bvRL1fKRkbTev9gpSC6EQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org