Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8AA7423A3F3711EDB9973F97F1222468.roa
File: 8AA7423A3F3711EDB9973F97F1222468.roa (raw, json)
Hash identifier: 9NfHdFQb+R9A/1jF5gGpOphpfeuLTSu58durY+KL6Ck=
Subject key identifier: 0F:D0:3E:7D:12:FD:E0:ED:7F:07:7E:43:39:71:72:B3:89:CF:58:07
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0814
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8AA7423A3F3711EDB9973F97F1222468.roa
Signing time: Wed 28 Sep 2022 14:12:10 +0000
ROA not before: Wed 28 Sep 2022 14:12:07 +0000
ROA not after: Thu 28 Sep 2023 14:12:07 +0000
asID: 40676
IP address blocks: 102.129.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2068 (0x814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 28 14:12:07 2022 GMT
Not After : Sep 28 14:12:07 2023 GMT
Subject: CN=6334563a-d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:fc:58:db:4b:18:3a:d3:09:c0:b6:ec:93:
cd:0f:50:d9:c3:6c:e6:e8:db:ae:e1:95:d3:53:1e:
e9:f5:10:10:b4:9f:97:31:fb:08:3a:0c:39:e5:d0:
82:38:78:f4:69:89:94:ff:2d:91:4d:c0:41:0c:72:
ce:eb:18:e9:82:a1:81:67:ff:5c:3e:dc:33:12:34:
10:a2:eb:a2:1f:fa:73:35:14:89:76:e1:c3:0d:5c:
9a:da:8b:93:24:b4:49:5e:ee:d7:89:eb:15:f4:72:
bc:c5:67:f7:26:69:f0:9e:df:94:3b:dc:83:f6:77:
c9:36:fb:b7:49:1a:e1:b1:b0:26:7b:a9:8f:b8:89:
d7:75:21:52:50:39:94:fb:eb:c7:e8:d0:4c:fe:f8:
16:38:2b:ef:38:cb:16:8c:0e:fc:82:49:cf:6d:b5:
51:52:3c:02:01:f4:2f:5c:d9:b4:24:ca:57:c0:a1:
c0:5e:fc:27:dc:e9:13:68:3b:f2:38:09:35:be:37:
db:9b:e9:de:ed:42:cc:32:23:03:79:72:0e:61:e2:
63:f2:b5:e9:c4:f1:b5:10:ec:80:a9:4d:c1:23:e1:
0d:da:f6:e1:11:81:1e:39:fd:4a:48:62:d5:bf:b6:
b9:21:c8:4f:1d:cc:9f:27:05:d1:d0:a1:6f:d2:2b:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:3E:7D:12:FD:E0:ED:7F:07:7E:43:39:71:72:B3:89:CF:58:07
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8AA7423A3F3711EDB9973F97F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
59:57:ff:c5:09:47:c9:81:50:77:c5:e7:f7:48:87:c3:dd:03:
36:7e:3d:3a:2e:be:14:e7:94:3b:43:9b:8f:52:bb:68:4b:ab:
35:32:f2:3e:ae:5d:3e:21:c6:54:4d:6b:2c:be:48:b5:8a:3e:
12:7d:0f:1f:ec:c6:a4:84:7e:9d:9b:69:5f:90:01:f6:d7:a3:
40:13:41:a9:42:b2:4b:26:1c:1d:37:be:3f:34:2a:57:ec:f1:
a3:23:09:e9:c1:60:ec:5e:e0:0a:2c:22:b8:bd:c6:86:a9:10:
4f:7e:d5:fe:ce:89:69:ce:f9:08:cf:43:29:13:a7:ff:73:1b:
72:35:5d:f4:8a:c3:6b:a4:ec:d4:63:ec:41:54:8b:45:a1:d9:
df:88:8f:37:eb:27:dc:a4:97:e3:1d:63:96:a6:d2:59:ba:fc:
b9:4d:e9:79:ae:63:d1:9d:a8:15:a3:11:93:08:f3:62:72:5c:
ad:40:22:71:a7:27:3d:96:a2:37:5b:24:4e:f5:0b:b7:d7:66:
fa:b1:1f:4d:fc:69:43:d5:14:48:40:73:54:93:b6:c0:3a:44:
e3:1a:4b:0d:0a:25:55:cf:a1:57:bd:65:9d:b1:87:8e:42:07:
62:10:66:17:11:19:45:0a:65:18:0b:d6:c0:d6:1f:98:13:1d:
6d:6a:04:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MjgxNDEyMDdaFw0yMzA5MjgxNDEyMDdaMBgxFjAU
BgNVBAMMDTYzMzQ1NjNhLWQ2YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkXfxY20sYOtMJwLbsk80PUNnDbObo267hldNTHun1EBC0n5cx+wg6DDnl
0II4ePRpiZT/LZFNwEEMcs7rGOmCoYFn/1w+3DMSNBCi66If+nM1FIl24cMNXJra
i5MktEle7teJ6xX0crzFZ/cmafCe35Q73IP2d8k2+7dJGuGxsCZ7qY+4idd1IVJQ
OZT768fo0Ez++BY4K+84yxaMDvyCSc9ttVFSPAIB9C9c2bQkylfAocBe/Cfc6RNo
O/I4CTW+N9ub6d7tQswyIwN5cg5h4mPytenE8bUQ7ICpTcEj4Q3a9uERgR45/UpI
YtW/trkhyE8dzJ8nBdHQoW/SK1f/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD9A+
fRL94O1/B35DOXFys4nPWAcwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4LzhBQTc0MjNBM0YzNzExRURCOTk3M0Y5N0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcIwDQYJKoZIhvcNAQEL
BQADggEBAFlX/8UJR8mBUHfF5/dIh8PdAzZ+PTouvhTnlDtDm49Su2hLqzUy8j6u
XT4hxlRNayy+SLWKPhJ9Dx/sxqSEfp2baV+QAfbXo0ATQalCsksmHB03vj80Klfs
8aMjCenBYOxe4AosIri9xoapEE9+1f7OiWnO+QjPQykTp/9zG3I1XfSKw2uk7NRj
7EFUi0Wh2d+IjzfrJ9ykl+MdY5am0lm6/LlN6XmuY9GdqBWjEZMI82JyXK1AInGn
Jz2WojdbJE71C7fXZvqxH038aUPVFEhAc1STtsA6ROMaSw0KJVXPoVe9ZZ2xh45C
B2IQZhcRGUUKZRgL1sDWH5gTHW1qBCE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-ams.rpki-client.org