Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD34651AF9CA11ECBD6163F2F1222468.roa
File: AD34651AF9CA11ECBD6163F2F1222468.roa (raw, json)
Hash identifier: 2rI3IdOF6M8iqFQW3m4O+o1bJnmYvFwuQ/7iQXOpaCo=
Subject key identifier: 72:FC:DA:41:F7:FD:3B:FB:F0:A7:42:DF:7B:20:CB:8C:9F:A3:C9:5A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 06E4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD34651AF9CA11ECBD6163F2F1222468.roa
Signing time: Sat 02 Jul 2022 05:49:03 +0000
ROA not before: Sat 02 Jul 2022 05:48:59 +0000
ROA not after: Sun 02 Jul 2023 05:48:59 +0000
asID: 43676
IP address blocks: 102.129.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 2 05:48:59 2022 GMT
Not After : Jul 2 05:48:59 2023 GMT
Subject: CN=62bfdc4f-1500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:ed:41:65:db:25:54:d5:a1:ed:23:42:f2:
91:8b:52:d2:d5:4b:60:f0:e9:25:ea:77:b9:21:43:
9d:bb:eb:43:79:51:89:34:b5:39:9e:2e:1b:e4:79:
86:1b:89:f3:d1:de:4d:6a:6c:ae:12:ce:e4:d0:3a:
1e:f8:a3:f8:1c:3c:07:3f:e0:04:f7:19:27:17:ca:
05:82:cf:88:52:61:49:37:5b:06:15:cc:01:5c:2a:
2f:e0:7e:04:ae:fc:a4:36:25:66:78:dd:7c:13:f4:
8c:8a:ab:78:c8:a8:e5:41:81:8f:5e:85:95:19:59:
92:e2:51:c6:a2:89:cc:9b:83:33:af:11:01:5b:0d:
64:09:de:0b:4c:54:a0:02:92:80:63:f4:3d:7b:ff:
53:4c:6a:f8:00:47:32:40:87:ac:32:eb:66:89:a3:
a1:cb:bc:60:2c:0a:63:c3:3b:d4:6c:60:f7:f2:67:
d6:e7:7b:38:bd:c9:73:d7:c1:dd:39:87:b2:eb:e7:
c2:2b:fd:86:08:7d:2e:8f:67:df:bc:3a:78:33:0b:
6e:44:98:78:cc:be:12:eb:b2:4c:a0:57:1a:d4:5e:
ea:e6:56:d3:28:71:b1:c5:3c:ed:11:a6:88:f3:30:
fd:70:fc:0d:58:e1:af:9a:74:75:77:bb:2d:06:23:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:DA:41:F7:FD:3B:FB:F0:A7:42:DF:7B:20:CB:8C:9F:A3:C9:5A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AD34651AF9CA11ECBD6163F2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9c:25:94:62:19:3a:73:f4:c4:1f:87:df:ec:fa:59:63:73:
97:83:ed:ab:c9:37:35:c7:b1:34:a4:bf:71:16:e0:f1:de:f8:
27:18:3d:b7:55:a2:e3:a8:76:fc:4f:85:fa:f9:6f:02:62:ff:
e6:8d:48:03:80:84:02:2c:99:e1:60:37:3e:c1:64:2b:59:0e:
a4:e3:02:98:ba:9a:5f:66:5e:b5:87:f5:db:e5:d5:ba:2a:3a:
d0:24:19:c4:3e:1b:45:76:8b:40:e3:84:18:6d:a6:78:6c:7d:
41:49:34:19:ab:e7:f7:d8:92:7c:dd:74:43:c3:76:27:3f:3c:
29:1c:29:13:f8:56:3f:b6:c2:7f:2b:82:50:0a:2a:94:b9:58:
47:97:36:e5:42:88:56:44:80:d6:cd:b3:23:dd:10:ff:e5:f7:
55:fc:d8:47:d6:f2:c3:a4:ed:f6:58:de:e7:a3:ac:46:0c:e4:
d2:8f:75:75:73:3c:dc:4d:40:7e:b3:08:6b:d9:8c:32:8a:b4:
fb:a7:f0:d2:34:45:4a:c7:16:35:1c:01:0c:e9:33:79:2d:bf:
03:9a:91:5d:67:ae:c7:e3:02:0d:f6:cc:34:d4:77:1e:23:c4:
40:ea:fd:f2:29:32:d7:d8:b5:cd:6b:f6:84:4c:81:ed:87:e5:
05:9b:d1:b6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA3MDIwNTQ4NTlaFw0yMzA3MDIwNTQ4NTlaMBgxFjAU
BgNVBAMMDTYyYmZkYzRmLTE1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUWe1BZdslVNWh7SNC8pGLUtLVS2Dw6SXqd7khQ52760N5UYk0tTmeLhvk
eYYbifPR3k1qbK4SzuTQOh74o/gcPAc/4AT3GScXygWCz4hSYUk3WwYVzAFcKi/g
fgSu/KQ2JWZ43XwT9IyKq3jIqOVBgY9ehZUZWZLiUcaiicybgzOvEQFbDWQJ3gtM
VKACkoBj9D17/1NMavgARzJAh6wy62aJo6HLvGAsCmPDO9RsYPfyZ9bnezi9yXPX
wd05h7Lr58Ir/YYIfS6PZ9+8OngzC25EmHjMvhLrskygVxrUXurmVtMocbHFPO0R
pojzMP1w/A1Y4a+adHV3uy0GI6+pAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcvza
Qff9O/vwp0LfeyDLjJ+jyVowHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0FEMzQ2NTFBRjlDQTExRUNCRDYxNjNGMkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgaYwDQYJKoZIhvcNAQEL
BQADggEBACucJZRiGTpz9MQfh9/s+lljc5eD7avJNzXHsTSkv3EW4PHe+CcYPbdV
ouOodvxPhfr5bwJi/+aNSAOAhAIsmeFgNz7BZCtZDqTjApi6ml9mXrWH9dvl1boq
OtAkGcQ+G0V2i0DjhBhtpnhsfUFJNBmr5/fYknzddEPDdic/PCkcKRP4Vj+2wn8r
glAKKpS5WEeXNuVCiFZEgNbNsyPdEP/l91X82EfW8sOk7fZY3uejrEYM5NKPdXVz
PNxNQH6zCGvZjDKKtPun8NI0RUrHFjUcAQzpM3ktvwOakV1nrsfjAg32zDTUdx4j
xEDq/fIpMtfYtc1r9oRMge2H5QWb0bY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org