Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942E2F1ABC5211ED9CA6F790F1222468.roa
File: 942E2F1ABC5211ED9CA6F790F1222468.roa (raw, json)
Hash identifier: nfcdHL/lra5Mw/k1UIxbAWh3+o47xa2dDqDQ++Cpnsk=
Subject key identifier: E1:ED:11:AF:FB:D9:AA:BB:24:AB:D1:CE:FB:C1:BB:6A:93:AC:18:CB
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0AB8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942E2F1ABC5211ED9CA6F790F1222468.roa
Signing time: Mon 06 Mar 2023 19:10:38 +0000
ROA not before: Mon 06 Mar 2023 19:10:32 +0000
ROA not after: Wed 06 Mar 2024 19:10:32 +0000
asID: 212335
IP address blocks: 102.165.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 6 19:10:32 2023 GMT
Not After : Mar 6 19:10:32 2024 GMT
Subject: CN=64063aae-7bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:cc:bd:bd:7c:8e:58:bc:f6:4a:53:5e:81:0a:
0b:64:bc:6b:63:11:bc:6c:9f:7f:b4:82:e9:72:9f:
80:2f:07:47:55:09:63:ca:8c:75:2f:eb:1f:13:71:
08:34:90:fc:b4:81:4e:ea:71:eb:cd:e9:56:b6:25:
7e:3b:bd:68:d4:e1:ef:80:8c:e4:a6:a1:54:19:a4:
23:ea:3c:ea:3c:c4:cb:37:3c:fc:6d:ea:9f:4b:72:
36:68:9b:c4:d2:53:47:bb:a7:2f:f6:a7:22:7a:f0:
46:74:40:26:92:64:5d:a6:d4:09:80:7d:c4:0c:7c:
06:d5:f8:71:e6:1b:53:5c:2e:67:58:16:e8:a6:a9:
d6:e6:cb:d8:49:be:42:d6:27:b3:a6:5f:01:52:bc:
57:38:53:77:de:e2:ec:8b:ed:83:01:99:75:72:b4:
a4:14:de:4e:1c:78:01:74:31:19:ff:70:22:b4:7a:
95:b1:fb:b3:d0:ca:ff:52:ad:52:3d:a9:74:47:ef:
e8:08:4d:bd:0e:ec:c1:0e:c9:3e:04:9f:d8:ca:1a:
bb:25:7f:97:aa:22:8c:91:eb:af:2c:79:92:46:82:
75:41:34:1b:72:6a:3d:64:68:45:d4:20:f1:ce:90:
40:00:85:2d:45:9b:a1:91:a1:36:5f:90:1d:39:3a:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:11:AF:FB:D9:AA:BB:24:AB:D1:CE:FB:C1:BB:6A:93:AC:18:CB
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/942E2F1ABC5211ED9CA6F790F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:89:f7:bf:56:ab:1b:be:90:b7:51:a7:09:f7:49:fb:53:a1:
c4:85:22:b9:44:c0:01:b9:bd:44:56:69:b1:87:c2:13:6a:6f:
df:70:86:18:8f:63:bd:00:4a:21:48:0e:26:02:82:35:cf:9f:
e2:87:b9:f5:bc:df:c0:fe:4f:23:02:03:ab:f2:3b:cc:35:23:
77:c5:39:71:6e:d7:b6:ea:2f:b6:99:08:72:1c:3a:28:90:2e:
d2:37:f4:20:40:c7:fb:31:7d:0c:cc:4f:b4:dd:11:48:67:21:
8b:30:01:95:44:97:bb:c5:71:11:a8:2e:07:48:54:a6:97:31:
a7:63:20:bc:06:0c:e5:11:e7:1f:63:7c:95:e4:2a:0c:c2:9d:
b0:66:4c:74:c4:18:4a:24:73:a0:3d:6a:4b:70:c0:db:c6:c1:
0a:a1:ad:2a:fe:f2:0f:7c:d8:3f:20:dd:29:29:5e:45:66:00:
40:ca:f4:8f:ca:da:6d:97:80:85:32:f9:12:2d:f2:09:02:04:
2a:48:43:53:88:7d:ab:0f:a3:77:00:34:9f:d0:ad:39:04:a5:
be:14:f9:f1:49:ac:2f:8a:78:71:ac:45:03:01:f0:d4:dc:a6:
ba:2f:53:31:e8:d6:6c:f8:95:bc:db:e4:18:35:f9:55:7f:6f:
a7:ad:96:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMzAzMDYxOTEwMzJaFw0yNDAzMDYxOTEwMzJaMBgxFjAU
BgNVBAMMDTY0MDYzYWFlLTdiYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD8zL29fI5YvPZKU16BCgtkvGtjEbxsn3+0gulyn4AvB0dVCWPKjHUv6x8T
cQg0kPy0gU7qcevN6Va2JX47vWjU4e+AjOSmoVQZpCPqPOo8xMs3PPxt6p9LcjZo
m8TSU0e7py/2pyJ68EZ0QCaSZF2m1AmAfcQMfAbV+HHmG1NcLmdYFuimqdbmy9hJ
vkLWJ7OmXwFSvFc4U3fe4uyL7YMBmXVytKQU3k4ceAF0MRn/cCK0epWx+7PQyv9S
rVI9qXRH7+gITb0O7MEOyT4En9jKGrslf5eqIoyR668seZJGgnVBNBtyaj1kaEXU
IPHOkEAAhS1Fm6GRoTZfkB05OvHJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4e0R
r/vZqrskq9HO+8G7apOsGMswHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzk0MkUyRjFBQkM1MjExRUQ5Q0E2Rjc5MEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmpR8wDQYJKoZIhvcNAQEL
BQADggEBAIqJ979Wqxu+kLdRpwn3SftTocSFIrlEwAG5vURWabGHwhNqb99whhiP
Y70ASiFIDiYCgjXPn+KHufW838D+TyMCA6vyO8w1I3fFOXFu17bqL7aZCHIcOiiQ
LtI39CBAx/sxfQzMT7TdEUhnIYswAZVEl7vFcRGoLgdIVKaXMadjILwGDOUR5x9j
fJXkKgzCnbBmTHTEGEokc6A9aktwwNvGwQqhrSr+8g982D8g3SkpXkVmAEDK9I/K
2m2XgIUy+RIt8gkCBCpIQ1OIfasPo3cANJ/QrTkEpb4U+fFJrC+KeHGsRQMB8NTc
provUzHo1mz4lbzb5Bg1+VV/b6etlmI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:51 2024 by rpki-client on console-fra.rpki-client.org