Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AEF72DA83F3711EDAF839F97F1222468.roa
File: AEF72DA83F3711EDAF839F97F1222468.roa (raw, json)
Hash identifier: LlV8XTR+WXN6bE7qBTRlrc9o9RKmJdExmgCXstkUm48=
Subject key identifier: 81:A1:D5:71:50:3D:C9:20:42:36:FE:17:E2:77:7B:A6:3B:B7:91:C7
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0816
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AEF72DA83F3711EDAF839F97F1222468.roa
Signing time: Wed 28 Sep 2022 14:13:11 +0000
ROA not before: Wed 28 Sep 2022 14:13:07 +0000
ROA not after: Thu 28 Sep 2023 14:13:07 +0000
asID: 40676
IP address blocks: 102.129.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 28 14:13:07 2022 GMT
Not After : Sep 28 14:13:07 2023 GMT
Subject: CN=63345677-f084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:27:cf:b4:61:dd:f2:39:42:06:45:65:ba:
bb:b5:cc:99:ae:35:46:50:a1:15:47:fc:43:82:38:
b1:12:6f:99:aa:c0:82:48:40:02:97:a9:35:73:7d:
7e:34:35:b6:2d:df:f9:46:6f:ad:5f:a1:ff:c7:05:
30:b1:9b:c3:e7:cf:81:83:61:dd:06:ae:64:19:11:
f4:0e:78:ec:4e:e3:84:15:72:e7:8d:28:5d:2a:88:
1c:bf:a3:df:d0:4b:cc:82:84:09:d3:67:69:4a:c8:
c6:1e:17:1a:5e:85:aa:ce:8a:23:45:9f:14:af:38:
9f:48:60:06:48:67:f7:61:08:4e:07:3b:88:3d:72:
92:86:ec:fd:13:b6:29:fc:d3:7b:88:26:bc:5c:4c:
11:b2:31:39:bc:cf:37:93:8c:0b:63:f3:9c:49:bb:
f1:7a:f4:40:4e:64:1c:22:54:ef:82:49:b1:b8:1e:
36:0d:c8:65:64:2a:2d:e4:15:22:32:44:8e:26:09:
d7:2a:46:34:e0:94:23:ee:b6:33:80:dd:c4:d6:1b:
a7:9d:62:62:cb:8a:49:57:9f:17:03:08:34:73:ac:
63:17:36:fa:74:ac:f9:71:d4:7c:3e:88:c0:f7:66:
92:fc:db:3e:22:c1:a4:09:84:04:68:5f:8b:ce:62:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:D5:71:50:3D:C9:20:42:36:FE:17:E2:77:7B:A6:3B:B7:91:C7
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/AEF72DA83F3711EDAF839F97F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.208.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:62:57:06:9d:97:92:65:87:8e:46:c9:fc:8e:27:aa:49:1e:
9e:38:b7:c2:65:5a:ee:bd:09:5a:8c:12:ed:e0:57:a7:3d:14:
3a:92:13:10:b1:14:b9:43:1f:98:cd:35:ed:69:10:c9:04:bf:
18:34:ce:07:a1:de:12:c1:11:50:f5:be:37:b3:d0:c9:64:ba:
39:4f:d1:78:bc:ba:81:dc:b9:00:0c:94:75:44:e2:13:b2:4c:
42:17:45:a4:e1:1f:e2:d5:db:ec:af:90:00:5f:4b:8f:5d:09:
34:d3:b6:3a:07:a8:f1:17:6c:bb:16:9c:71:b7:30:cd:bd:5e:
25:e5:cd:e5:3e:17:39:d4:3a:b5:77:5b:79:24:fe:b4:24:a1:
32:fb:05:fe:66:b8:29:00:6b:10:68:2b:f4:71:3d:6a:92:fe:
6d:69:8b:36:5e:e3:27:7d:91:05:3f:5f:ee:e5:b9:4d:35:b8:
16:96:47:0b:4b:b4:2d:fb:9d:a1:8c:ef:a5:aa:5c:07:ff:25:
1c:45:43:e5:34:82:d9:d0:aa:d6:ce:ea:a6:ee:9d:86:16:8a:
6e:88:c6:c0:d8:58:ed:a7:c3:97:f9:8f:cf:64:89:8f:a0:48:
58:ea:d4:75:dd:e9:77:43:4e:18:64:d1:4c:e6:8f:6e:66:a3:
74:3a:21:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA5MjgxNDEzMDdaFw0yMzA5MjgxNDEzMDdaMBgxFjAU
BgNVBAMMDTYzMzQ1Njc3LWYwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa0yfPtGHd8jlCBkVluru1zJmuNUZQoRVH/EOCOLESb5mqwIJIQAKXqTVz
fX40NbYt3/lGb61fof/HBTCxm8Pnz4GDYd0GrmQZEfQOeOxO44QVcueNKF0qiBy/
o9/QS8yChAnTZ2lKyMYeFxpeharOiiNFnxSvOJ9IYAZIZ/dhCE4HO4g9cpKG7P0T
tin803uIJrxcTBGyMTm8zzeTjAtj85xJu/F69EBOZBwiVO+CSbG4HjYNyGVkKi3k
FSIyRI4mCdcqRjTglCPutjOA3cTWG6edYmLLiklXnxcDCDRzrGMXNvp0rPlx1Hw+
iMD3ZpL82z4iwaQJhARoX4vOYhb/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgaHV
cVA9ySBCNv4X4nd7pju3kccwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0FFRjcyREE4M0YzNzExRURBRjgzOUY5N0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgdAwDQYJKoZIhvcNAQEL
BQADggEBALtiVwadl5Jlh45GyfyOJ6pJHp44t8JlWu69CVqMEu3gV6c9FDqSExCx
FLlDH5jNNe1pEMkEvxg0zgeh3hLBEVD1vjez0MlkujlP0Xi8uoHcuQAMlHVE4hOy
TEIXRaThH+LV2+yvkABfS49dCTTTtjoHqPEXbLsWnHG3MM29XiXlzeU+FznUOrV3
W3kk/rQkoTL7Bf5muCkAaxBoK/RxPWqS/m1pizZe4yd9kQU/X+7luU01uBaWRwtL
tC37naGM76WqXAf/JRxFQ+U0gtnQqtbO6qbunYYWim6IxsDYWO2nw5f5j89kiY+g
SFjq1HXd6XdDThhk0Uzmj25mo3Q6IRo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org