Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80B2ECFEF9CB11EC8E641AF5F1222468.roa
File: 80B2ECFEF9CB11EC8E641AF5F1222468.roa (raw, json)
Hash identifier: 6oqPpI4aZhmw5Apuz7BtxHuMcahxHXIAagXEXTZt/5I=
Subject key identifier: 60:6A:C8:70:2C:C5:94:44:F2:95:18:F7:EB:7F:9C:48:B7:D0:BE:A1
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06F0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80B2ECFEF9CB11EC8E641AF5F1222468.roa
Signing time: Sat 02 Jul 2022 05:54:58 +0000
ROA not before: Sat 02 Jul 2022 05:54:54 +0000
ROA not after: Sun 02 Jul 2023 05:54:54 +0000
asID: 43676
IP address blocks: 102.129.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:54:54 2022 GMT
Not After : Jul 2 05:54:54 2023 GMT
Subject: CN=62bfddb1-a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:74:9e:02:ba:82:56:e0:55:4c:ef:69:54:
32:1f:4e:c1:67:e7:53:f1:08:e5:67:75:c5:76:92:
72:bb:3a:5d:f0:38:9b:c9:54:b4:54:17:fd:3d:fc:
f1:0c:17:41:85:76:08:a3:3e:67:e3:08:db:14:eb:
21:d1:a4:a8:8a:75:66:cc:9f:4e:b6:00:b3:59:c5:
21:9a:7e:c8:ef:7d:05:8f:b4:06:b0:9b:38:68:f7:
ab:87:3e:93:df:39:27:c3:e8:55:a6:44:3f:a1:99:
79:e5:0d:bb:3b:2d:b9:e1:ae:1e:30:07:57:38:3d:
2c:0c:44:df:94:df:75:83:c7:62:ac:7b:c8:37:d5:
52:44:a8:d0:d4:e2:8c:8a:88:0f:f1:73:30:7f:78:
48:95:6a:6e:24:12:e8:0f:c7:29:45:2e:28:e3:36:
f4:33:e5:80:d6:4c:2c:25:a2:c1:ac:b6:39:9b:f2:
4a:9e:e7:be:98:7a:34:8c:7f:e9:15:52:80:9b:d8:
f2:38:cd:3e:a7:85:54:37:d5:59:ee:e3:6e:58:b0:
b7:9f:ba:a6:25:8e:f9:52:e5:a5:b0:96:a6:9f:e5:
a6:28:bd:85:ce:4e:be:e4:a9:dd:e9:90:a7:11:f8:
b2:b4:9d:e7:3f:4a:2d:ff:4a:4b:5b:b0:c5:66:53:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:C8:70:2C:C5:94:44:F2:95:18:F7:EB:7F:9C:48:B7:D0:BE:A1
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/80B2ECFEF9CB11EC8E641AF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:34:1e:69:8c:ad:4f:b1:97:83:82:d2:6e:22:ed:bf:0f:52:
4a:d7:6f:73:25:3d:8c:bd:ad:6a:ba:94:3e:2a:c8:b2:65:b6:
94:22:f7:9a:6c:bc:87:8d:7f:8e:a4:fb:0a:14:93:9b:12:7c:
e8:bb:25:ce:3a:52:c8:9e:1e:51:53:08:4d:47:87:30:c5:db:
6d:17:06:31:ad:64:20:65:bd:32:be:bb:39:4b:44:80:61:62:
44:09:fa:75:38:75:50:20:2d:1c:36:35:d4:4c:fb:ed:7d:de:
44:a6:cc:97:52:bf:97:71:91:7e:63:f9:3e:0d:b4:88:fc:35:
72:66:a3:e6:bf:9b:70:21:71:16:f8:7a:f4:eb:a4:72:16:13:
87:98:12:0a:36:42:b3:ed:ee:3c:33:96:ef:a8:4b:13:6a:33:
13:34:f2:c7:ef:99:2c:81:3f:4b:5c:6d:ce:73:31:d1:6f:d0:
bc:76:0b:7b:f0:86:f4:fa:94:e3:af:07:c8:2e:1a:c4:6b:68:
96:9b:a9:4c:cd:75:87:1c:2a:42:0b:64:d0:df:58:ac:ef:16:
2b:3f:2a:6f:4d:a7:83:8f:63:b7:fe:54:0e:eb:41:6c:4a:30:
3e:f6:94:4e:47:66:9c:d5:84:72:60:72:7e:56:dd:87:0b:0d:
6b:7e:ed:1b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDIwNTU0NTRaFw0yMzA3MDIwNTU0NTRaMBgxFjAU
BgNVBAMMDTYyYmZkZGIxLWE4ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOnXSeArqCVuBVTO9pVDIfTsFn51PxCOVndcV2knK7Ol3wOJvJVLRUF/09
/PEMF0GFdgijPmfjCNsU6yHRpKiKdWbMn062ALNZxSGafsjvfQWPtAawmzho96uH
PpPfOSfD6FWmRD+hmXnlDbs7Lbnhrh4wB1c4PSwMRN+U33WDx2Kse8g31VJEqNDU
4oyKiA/xczB/eEiVam4kEugPxylFLijjNvQz5YDWTCwlosGstjmb8kqe576YejSM
f+kVUoCb2PI4zT6nhVQ31Vnu425YsLefuqYljvlS5aWwlqaf5aYovYXOTr7kqd3p
kKcR+LK0nec/Si3/SktbsMVmU+RnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYGrI
cCzFlETylRj363+cSLfQvqEwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzgwQjJFQ0ZFRjlDQjExRUM4RTY0MUFGNUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgawwDQYJKoZIhvcNAQEL
BQADggEBADw0HmmMrU+xl4OC0m4i7b8PUkrXb3MlPYy9rWq6lD4qyLJltpQi95ps
vIeNf46k+woUk5sSfOi7Jc46UsieHlFTCE1HhzDF220XBjGtZCBlvTK+uzlLRIBh
YkQJ+nU4dVAgLRw2NdRM++193kSmzJdSv5dxkX5j+T4NtIj8NXJmo+a/m3AhcRb4
evTrpHIWE4eYEgo2QrPt7jwzlu+oSxNqMxM08sfvmSyBP0tcbc5zMdFv0Lx2C3vw
hvT6lOOvB8guGsRraJabqUzNdYccKkILZNDfWKzvFis/Km9Np4OPY7f+VA7rQWxK
MD72lE5HZpzVhHJgcn5W3YcLDWt+7Rs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org