Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8671FA6AF42411ECA2C953F7F1222468.roa
File: 8671FA6AF42411ECA2C953F7F1222468.roa (raw, json)
Hash identifier: Y5b9cWyViy6kWV+Z0eJV5cOhPEJrvtfFdm4lKxO5JDg=
Subject key identifier: B3:E5:97:48:2A:E0:35:0B:64:BC:01:0C:E7:9E:39:E3:95:83:98:AC
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06B4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8671FA6AF42411ECA2C953F7F1222468.roa
Signing time: Sat 25 Jun 2022 01:17:05 +0000
ROA not before: Sat 25 Jun 2022 01:17:01 +0000
ROA not after: Sun 25 Jun 2023 01:17:01 +0000
asID: 40676
IP address blocks: 102.165.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716 (0x6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 25 01:17:01 2022 GMT
Not After : Jun 25 01:17:01 2023 GMT
Subject: CN=62b66211-1937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:01:d7:14:47:25:b7:89:fa:94:d2:2f:7b:
55:42:52:a4:95:80:cc:09:27:c9:f8:f7:e4:70:66:
32:ed:f6:2d:ca:18:b3:16:ae:c1:1c:6b:df:81:f2:
4c:19:85:04:eb:0b:45:d0:b3:e0:47:c1:63:8a:4a:
ab:8c:97:96:a3:3e:59:2e:75:34:bf:eb:1d:9c:fc:
2c:4c:06:dd:ad:a1:20:38:83:09:2d:f3:84:f6:74:
60:4c:58:bf:73:96:99:0e:3f:8e:17:60:3e:83:be:
54:d9:8c:79:4c:11:0f:94:73:5b:82:9d:ad:63:0e:
35:bf:c9:c0:bc:ce:1a:22:ea:97:a5:b7:fc:a6:e3:
76:1f:8e:c3:22:b2:7a:13:18:4f:cd:54:8d:ca:57:
4a:a4:18:5a:e0:5d:36:20:a2:63:fc:7a:47:14:e8:
d3:e3:8a:14:3c:01:0d:60:59:cd:62:47:06:e8:25:
7b:0c:6e:13:74:9d:ba:62:6e:0c:e7:f5:2a:cf:30:
d4:f0:32:9d:d7:90:d9:8d:68:c6:16:0e:05:5c:17:
5f:28:10:7d:2f:63:eb:03:e2:5e:b9:84:ac:08:bd:
6f:b3:ac:fc:c8:c0:90:73:1a:6d:10:28:0f:12:58:
ec:25:3d:a3:e5:e6:b8:a9:8f:91:93:60:cd:89:44:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:97:48:2A:E0:35:0B:64:BC:01:0C:E7:9E:39:E3:95:83:98:AC
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8671FA6AF42411ECA2C953F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0c:79:ac:39:69:71:bb:1c:25:99:5b:30:48:7d:8a:cd:2b:
92:11:0b:4b:6a:0b:44:d4:8b:4b:d5:bd:cd:3b:d0:eb:1e:47:
44:6b:42:94:ea:4f:05:6e:01:95:f4:0a:5b:34:13:4e:d1:a9:
5e:d4:11:65:37:23:88:bf:42:fe:08:46:a0:40:96:ca:8a:ae:
67:ea:6c:3c:6d:06:37:a9:08:4d:a9:67:cf:b4:4e:b5:3f:7c:
27:68:3e:65:be:08:ac:4a:f0:b6:72:46:42:02:f8:1d:b0:79:
82:b7:7e:e1:35:35:74:fd:8d:ef:74:39:42:77:63:ca:01:00:
26:09:10:da:d7:93:76:4c:4e:38:b5:e9:ad:72:35:48:38:3f:
ae:5d:6b:09:f4:87:92:16:23:59:70:1a:0c:05:03:14:49:1d:
ee:a9:a6:ee:39:1e:f2:5d:ea:69:fa:03:65:0f:42:36:54:21:
c3:81:c0:b5:8c:37:b8:48:c2:0a:2c:91:5a:3c:f9:5e:3c:ee:
d2:16:63:70:b0:e9:58:65:3a:a4:d0:bd:77:b1:d3:fd:d3:01:
1d:2c:f5:6b:45:b3:e5:3d:13:f2:30:1c:5d:a3:e6:0d:34:a5:
d9:8c:e7:82:1c:7a:3c:12:cb:7a:d7:69:48:8e:2e:0b:d0:e2:
77:bc:3f:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA2MjUwMTE3MDFaFw0yMzA2MjUwMTE3MDFaMBgxFjAU
BgNVBAMMDTYyYjY2MjExLTE5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVnwHXFEclt4n6lNIve1VCUqSVgMwJJ8n49+RwZjLt9i3KGLMWrsEca9+B
8kwZhQTrC0XQs+BHwWOKSquMl5ajPlkudTS/6x2c/CxMBt2toSA4gwkt84T2dGBM
WL9zlpkOP44XYD6DvlTZjHlMEQ+Uc1uCna1jDjW/ycC8zhoi6pelt/ym43YfjsMi
snoTGE/NVI3KV0qkGFrgXTYgomP8ekcU6NPjihQ8AQ1gWc1iRwboJXsMbhN0nbpi
bgzn9SrPMNTwMp3XkNmNaMYWDgVcF18oEH0vY+sD4l65hKwIvW+zrPzIwJBzGm0Q
KA8SWOwlPaPl5ripj5GTYM2JRF9JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUs+WX
SCrgNQtkvAEM554545WDmKwwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg2NzFGQTZBRjQyNDExRUNBMkM5NTNGN0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpRcwDQYJKoZIhvcNAQEL
BQADggEBAI4Meaw5aXG7HCWZWzBIfYrNK5IRC0tqC0TUi0vVvc070OseR0RrQpTq
TwVuAZX0Cls0E07RqV7UEWU3I4i/Qv4IRqBAlsqKrmfqbDxtBjepCE2pZ8+0TrU/
fCdoPmW+CKxK8LZyRkIC+B2weYK3fuE1NXT9je90OUJ3Y8oBACYJENrXk3ZMTji1
6a1yNUg4P65dawn0h5IWI1lwGgwFAxRJHe6ppu45HvJd6mn6A2UPQjZUIcOBwLWM
N7hIwgoskVo8+V487tIWY3Cw6VhlOqTQvXex0/3TAR0s9WtFs+U9E/IwHF2j5g00
pdmM54IcejwSy3rXaUiOLgvQ4ne8PxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org