Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8921EA12F9CA11EC8138E6F1F1222468.roa
File: 8921EA12F9CA11EC8138E6F1F1222468.roa (raw, json)
Hash identifier: jLwK5jptsCjk+o1lKXQUiMWjXr4R7NlJHF1w+lJeVkg=
Subject key identifier: E3:93:16:06:91:73:D4:13:75:EA:21:1A:43:3A:D4:17:E1:F2:F4:95
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06E2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8921EA12F9CA11EC8138E6F1F1222468.roa
Signing time: Sat 02 Jul 2022 05:48:02 +0000
ROA not before: Sat 02 Jul 2022 05:47:58 +0000
ROA not after: Sun 02 Jul 2023 05:47:58 +0000
asID: 43676
IP address blocks: 102.129.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:47:58 2022 GMT
Not After : Jul 2 05:47:58 2023 GMT
Subject: CN=62bfdc12-636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:4e:cf:f8:d7:76:9f:5b:be:d6:c7:a6:fc:
4d:24:c4:39:b6:39:62:e3:57:a0:5b:12:46:d4:4b:
21:b9:02:d1:10:ce:7f:f3:d2:b8:69:3b:fd:59:04:
21:b5:5e:dc:4a:b8:dc:7a:79:3c:4a:97:41:69:7c:
99:0f:ac:7e:11:b1:d8:6b:16:a5:69:50:a7:2b:7c:
2d:1a:de:c8:1f:10:d0:4d:08:cd:4c:3e:7e:2e:4d:
27:6a:4f:0f:ef:af:44:ab:56:51:d5:97:6a:5a:39:
38:0d:5b:cc:77:a0:11:0e:f4:be:de:f4:7f:27:2f:
6e:e4:d1:16:34:f9:48:65:6e:6f:c5:5d:79:db:3e:
1c:b7:e0:12:05:82:37:93:f2:a8:a8:62:cc:f9:6e:
99:d4:90:2a:35:45:fa:cc:79:c8:60:e6:78:b7:0f:
03:19:43:1f:24:4f:fb:e3:b4:62:44:f1:cb:44:7a:
70:50:15:1c:1e:52:d8:f8:1e:04:45:19:16:4d:d8:
f5:db:00:3a:59:2e:3c:17:9a:f4:95:31:d6:83:03:
a1:38:f5:00:d4:b1:20:b3:71:f1:5b:53:a7:f5:71:
db:ae:00:79:72:3e:29:17:11:2d:80:9d:6b:1b:d0:
ae:47:45:24:73:e3:20:d1:b1:e0:75:68:3f:75:10:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:16:06:91:73:D4:13:75:EA:21:1A:43:3A:D4:17:E1:F2:F4:95
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8921EA12F9CA11EC8138E6F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.165.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:3c:ca:31:6a:31:10:7e:01:49:da:ef:5a:38:d0:0a:f9:
18:4d:86:f1:34:a3:19:4a:0c:43:09:48:4b:08:38:cd:37:45:
a6:a7:07:35:9e:31:da:8c:ca:aa:16:4d:ae:23:1d:08:9f:2c:
8e:d0:c7:b4:8b:35:f0:48:a4:c4:1e:1f:9b:10:66:1d:31:48:
df:ac:58:af:0b:cc:06:5d:d8:6e:99:85:6d:da:70:d2:d0:ff:
00:7d:4c:b7:2c:89:55:22:73:40:2b:c9:66:ea:92:45:8e:50:
64:36:45:42:78:77:d9:4a:61:3e:c8:ab:60:f9:49:c6:11:27:
59:bb:2f:c4:d5:95:70:dc:82:b2:4d:8c:89:b2:a5:d0:8a:05:
cd:28:de:97:47:d7:cc:63:05:e3:b3:88:a3:6f:eb:da:58:1c:
90:a9:6e:a8:12:cf:40:9f:87:f6:7b:7f:d1:2e:db:9c:b8:7a:
e6:0f:77:dc:1c:a6:fb:96:58:fc:b2:da:be:c2:59:b8:58:32:
1c:8c:78:58:f5:7d:eb:d1:ac:73:99:0b:01:9e:97:4e:6c:7b:
5a:9a:d5:23:f6:b9:e5:93:e3:0e:a4:d3:7e:ca:4c:b5:a0:10:
d9:39:b9:fe:c9:e6:49:89:20:79:a1:de:20:79:14:50:c7:dd:
aa:21:86:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDIwNTQ3NThaFw0yMzA3MDIwNTQ3NThaMBgxFjAU
BgNVBAMMDTYyYmZkYzEyLTYzNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqoE7P+Nd2n1u+1sem/E0kxDm2OWLjV6BbEkbUSyG5AtEQzn/z0rhpO/1Z
BCG1XtxKuNx6eTxKl0FpfJkPrH4RsdhrFqVpUKcrfC0a3sgfENBNCM1MPn4uTSdq
Tw/vr0SrVlHVl2paOTgNW8x3oBEO9L7e9H8nL27k0RY0+Uhlbm/FXXnbPhy34BIF
gjeT8qioYsz5bpnUkCo1RfrMechg5ni3DwMZQx8kT/vjtGJE8ctEenBQFRweUtj4
HgRFGRZN2PXbADpZLjwXmvSVMdaDA6E49QDUsSCzcfFbU6f1cduuAHlyPikXES2A
nWsb0K5HRSRz4yDRseB1aD91EInrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU45MW
BpFz1BN16iEaQzrUF+Hy9JUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg5MjFFQTEyRjlDQTExRUM4MTM4RTZGMUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaUwDQYJKoZIhvcNAQEL
BQADggEBACnFPMoxajEQfgFJ2u9aONAK+RhNhvE0oxlKDEMJSEsIOM03RaanBzWe
MdqMyqoWTa4jHQifLI7Qx7SLNfBIpMQeH5sQZh0xSN+sWK8LzAZd2G6ZhW3acNLQ
/wB9TLcsiVUic0AryWbqkkWOUGQ2RUJ4d9lKYT7Iq2D5ScYRJ1m7L8TVlXDcgrJN
jImypdCKBc0o3pdH18xjBeOziKNv69pYHJCpbqgSz0Cfh/Z7f9Eu25y4euYPd9wc
pvuWWPyy2r7CWbhYMhyMeFj1fevRrHOZCwGel05se1qa1SP2ueWT4w6k037KTLWg
ENk5uf7J5kmJIHmh3iB5FFDH3aohhpo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org