Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B3BFD354AD8311EB9821072AF8AEA228.roa
File: B3BFD354AD8311EB9821072AF8AEA228.roa (raw, json)
Hash identifier: /nZbdmzabLznT/etIabNbZ0U/yQRNNvP+gT13Gycyk0=
Subject key identifier: C9:B8:AA:E5:74:2A:4D:17:5A:46:FF:C5:6E:42:0C:45:02:59:CA:D8
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 03DC
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B3BFD354AD8311EB9821072AF8AEA228.roa
Signing time: Wed 05 May 2021 09:24:34 +0000
ROA not before: Wed 05 May 2021 09:24:28 +0000
ROA not after: Thu 05 May 2022 09:24:28 +0000
asID: 174
IP address blocks: 102.129.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 988 (0x3dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: May 5 09:24:28 2021 GMT
Not After : May 5 09:24:28 2022 GMT
Subject: CN=60926451-5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:8e:99:d6:49:ad:00:03:4c:0b:aa:14:9c:
5b:5f:64:fa:ac:fb:18:14:e9:20:83:77:e2:78:d2:
c5:57:10:77:a2:b2:85:00:00:9d:90:f7:ee:6b:4b:
5b:d1:e8:f3:cc:88:c7:2b:a6:88:ab:e2:7f:0f:be:
9c:6b:60:61:22:c7:51:4a:52:2e:1c:bb:f7:a7:3b:
9e:c4:1a:fe:b8:5c:b5:a4:29:ae:1b:d3:e7:a3:ed:
c8:63:d5:bc:aa:43:71:91:2d:e2:46:95:5e:58:76:
aa:b1:5e:33:9a:db:4a:38:6c:d3:cb:59:46:2f:b5:
bb:0f:f9:a9:4e:96:6e:4f:bb:f2:b1:7a:bf:2f:da:
65:66:fb:c5:36:69:2b:4f:10:49:42:64:e3:3c:1b:
d4:f2:9f:c6:bf:78:94:ea:97:9c:aa:18:d4:16:ae:
c8:25:2d:a5:ed:96:ab:0e:d0:2f:74:38:57:8d:bf:
0b:87:f3:7a:00:14:da:d6:a3:69:08:79:19:16:b7:
ff:f7:59:5c:8d:1e:7b:f9:e8:f1:f1:52:26:55:43:
13:91:26:3b:69:79:ee:c6:02:e8:58:b5:6c:7a:dc:
dd:2e:de:c2:a4:36:0e:60:04:41:75:39:c9:09:d8:
90:da:f4:9f:a4:5b:f7:8f:24:f3:8b:e1:be:28:5f:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B8:AA:E5:74:2A:4D:17:5A:46:FF:C5:6E:42:0C:45:02:59:CA:D8
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B3BFD354AD8311EB9821072AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.145.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4d:a2:74:a7:87:78:44:94:29:e7:8b:fb:42:dd:4c:27:23:
4a:00:69:6a:ad:1d:0f:b1:19:76:7a:c5:aa:9c:b3:c9:db:94:
f4:05:e1:bd:f1:41:80:df:c2:21:d5:da:c3:77:f5:e9:d7:ba:
cd:0b:f7:22:ee:13:6b:3e:43:51:c3:bf:23:25:58:62:ab:83:
b8:4b:fc:cc:29:d5:f0:ec:3e:5c:b4:30:5b:64:fd:a5:40:ce:
41:40:6f:6d:ad:fc:22:b3:88:bf:d8:ef:b1:1b:7c:30:8a:91:
72:7f:39:8c:bb:63:78:26:31:9a:31:2f:c8:71:45:ed:39:dd:
92:dc:e0:a7:8f:76:55:37:e6:f7:8a:1f:82:a7:fd:66:73:15:
a3:80:36:8b:30:f3:84:3e:22:6d:33:c2:8e:42:d4:0b:5f:24:
03:6d:a6:04:7a:35:f3:82:40:0a:97:0c:0a:a9:df:a3:90:19:
e5:c5:59:0f:95:5c:be:47:e9:a1:c4:09:56:ce:f2:d5:59:31:
26:3d:d3:94:88:8c:ca:59:95:ae:8f:5a:18:0c:f1:f3:e4:3c:
a2:3d:fb:83:fc:43:ea:3f:7d:2a:8a:2b:09:7e:35:85:15:2b:
2d:29:b7:50:9a:c6:2f:6f:8b:da:1a:24:8c:e7:bd:e8:b7:5e:
6b:ab:c3:e3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTA1MDUwOTI0MjhaFw0yMjA1MDUwOTI0MjhaMBgxFjAU
BgNVBAMTDTYwOTI2NDUxLTUwMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDu46Z1kmtAANMC6oUnFtfZPqs+xgU6SCDd+J40sVXEHeisoUAAJ2Q9+5r
S1vR6PPMiMcrpoir4n8PvpxrYGEix1FKUi4cu/enO57EGv64XLWkKa4b0+ej7chj
1byqQ3GRLeJGlV5YdqqxXjOa20o4bNPLWUYvtbsP+alOlm5Pu/Kxer8v2mVm+8U2
aStPEElCZOM8G9Tyn8a/eJTql5yqGNQWrsglLaXtlqsO0C90OFeNvwuH83oAFNrW
o2kIeRkWt//3WVyNHnv56PHxUiZVQxORJjtpee7GAuhYtWx63N0u3sKkNg5gBEF1
OckJ2JDa9J+kW/ePJPOL4b4oXwmvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUybiq
5XQqTRdaRv/FbkIMRQJZytgwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0IzQkZEMzU0QUQ4MzExRUI5ODIxMDcyQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZEwDQYJKoZIhvcNAQEL
BQADggEBAHJNonSnh3hElCnni/tC3UwnI0oAaWqtHQ+xGXZ6xaqcs8nblPQF4b3x
QYDfwiHV2sN39enXus0L9yLuE2s+Q1HDvyMlWGKrg7hL/Mwp1fDsPly0MFtk/aVA
zkFAb22t/CKziL/Y77EbfDCKkXJ/OYy7Y3gmMZoxL8hxRe053ZLc4KePdlU35veK
H4Kn/WZzFaOANosw84Q+Im0zwo5C1AtfJANtpgR6NfOCQAqXDAqp36OQGeXFWQ+V
XL5H6aHECVbO8tVZMSY905SIjMpZla6PWhgM8fPkPKI9+4P8Q+o/fSqKKwl+NYUV
Ky0pt1Caxi9vi9oaJIznvei3Xmurw+M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org