Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD80CC72E0EB11EBB646CA30F8AEA228.roa
File: BD80CC72E0EB11EBB646CA30F8AEA228.roa (raw, json)
Hash identifier: aw8RrAchp/tsdZ9+KpVVTB4s5nN2LuRhNCsO6bXvfgA=
Subject key identifier: 0F:8B:90:09:AC:95:C2:B1:42:35:31:1D:F0:8E:64:F9:E0:30:35:36
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 044C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD80CC72E0EB11EBB646CA30F8AEA228.roa
Signing time: Fri 09 Jul 2021 19:27:47 +0000
ROA not before: Sat 10 Jul 2021 19:27:42 +0000
ROA not after: Sun 10 Jul 2022 19:27:42 +0000
asID: 211585
IP address blocks: 102.129.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jul 10 19:27:42 2021 GMT
Not After : Jul 10 19:27:42 2022 GMT
Subject: CN=60e8a332-bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:be:dd:d0:9a:8b:49:c9:a3:e2:1c:b4:7b:
d9:ce:43:2d:6c:a6:88:b8:a5:ad:58:b2:04:6d:26:
41:77:06:d4:35:ce:89:44:33:1d:97:41:59:26:60:
69:fa:43:45:7f:1b:96:77:21:f5:75:ec:48:93:f8:
78:09:37:7f:64:a8:e1:5b:09:c5:4d:99:6a:33:de:
6b:ed:9d:e7:08:84:db:30:59:94:11:4c:19:d5:48:
82:d3:a4:b2:1c:ff:d1:11:70:f4:a3:74:7a:38:7d:
83:5b:35:30:9b:f1:18:c3:cf:27:d7:80:a6:b6:53:
40:17:48:c8:b0:8d:45:ea:cd:90:04:bc:3c:c9:dd:
67:f3:58:6c:bd:73:29:7e:36:8f:dd:61:e6:8d:7b:
fb:63:66:09:46:69:7d:30:30:d1:ab:8c:52:5c:2d:
be:e6:b6:58:04:21:43:55:fe:b5:d5:74:4c:7d:6d:
e0:50:e0:df:37:2b:72:a8:c0:b6:4a:c8:bd:95:38:
33:f2:ee:1f:7f:58:6d:61:3f:72:e8:c5:f8:52:4a:
df:ad:e0:c4:1f:a4:40:a7:29:5b:1a:ef:e3:c4:f4:
cc:a9:ff:65:8a:5b:f0:35:67:93:12:79:6c:26:13:
3f:60:c8:b3:4c:4b:e8:73:6d:94:d5:65:5c:b3:19:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:90:09:AC:95:C2:B1:42:35:31:1D:F0:8E:64:F9:E0:30:35:36
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/BD80CC72E0EB11EBB646CA30F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:04:be:be:5f:51:e0:c3:3d:92:d2:35:94:2f:a9:fc:8a:32:
43:cc:a2:11:19:26:76:83:f1:8e:bd:f2:0a:2d:0f:f1:e9:bd:
34:81:45:93:22:66:b6:20:84:70:32:f0:4d:0f:21:87:33:dd:
0e:b0:88:a9:79:af:0d:d8:35:69:c2:73:9a:c4:64:1b:bd:93:
ee:2f:9d:eb:bf:09:ed:77:c9:9d:9b:dc:4d:e6:d0:79:4b:b6:
69:74:d2:3a:28:06:17:0d:8e:a6:60:dd:8e:f7:ad:9c:75:8f:
22:48:93:d4:97:f3:11:b8:75:71:37:0d:18:89:86:18:7c:84:
c1:84:9c:75:8d:6a:d9:bd:e6:53:48:7c:32:10:e5:08:de:63:
9c:ff:f4:b2:65:60:41:80:8c:47:f7:9a:56:1d:91:07:36:00:
34:f1:d3:be:f5:30:b4:77:48:b5:d6:0f:92:a0:10:33:be:e8:
c5:10:10:84:0f:91:58:c8:95:dd:4b:61:65:31:1a:de:43:b7:
fb:47:7c:74:15:00:be:74:4a:e2:6b:7a:cd:2b:30:91:a0:3c:
b6:65:fd:78:ab:c0:4f:04:42:6c:05:fb:9e:30:79:e2:34:0a:
63:aa:10:6a:c6:7e:26:56:63:0d:2c:6f:99:cb:07:21:37:28:
09:bd:79:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTA3MTAxOTI3NDJaFw0yMjA3MTAxOTI3NDJaMBgxFjAU
BgNVBAMTDTYwZThhMzMyLWJjM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCji77d0JqLScmj4hy0e9nOQy1spoi4pa1YsgRtJkF3BtQ1zolEMx2XQVkm
YGn6Q0V/G5Z3IfV17EiT+HgJN39kqOFbCcVNmWoz3mvtnecIhNswWZQRTBnVSILT
pLIc/9ERcPSjdHo4fYNbNTCb8RjDzyfXgKa2U0AXSMiwjUXqzZAEvDzJ3WfzWGy9
cyl+No/dYeaNe/tjZglGaX0wMNGrjFJcLb7mtlgEIUNV/rXVdEx9beBQ4N83K3Ko
wLZKyL2VODPy7h9/WG1hP3LoxfhSSt+t4MQfpECnKVsa7+PE9Myp/2WKW/A1Z5MS
eWwmEz9gyLNMS+hzbZTVZVyzGagFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUD4uQ
CayVwrFCNTEd8I5k+eAwNTYwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0JEODBDQzcyRTBFQjExRUJCNjQ2Q0EzMEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgZ0wDQYJKoZIhvcNAQEL
BQADggEBAJYEvr5fUeDDPZLSNZQvqfyKMkPMohEZJnaD8Y698gotD/HpvTSBRZMi
ZrYghHAy8E0PIYcz3Q6wiKl5rw3YNWnCc5rEZBu9k+4vneu/Ce13yZ2b3E3m0HlL
tml00jooBhcNjqZg3Y73rZx1jyJIk9SX8xG4dXE3DRiJhhh8hMGEnHWNatm95lNI
fDIQ5QjeY5z/9LJlYEGAjEf3mlYdkQc2ADTx0771MLR3SLXWD5KgEDO+6MUQEIQP
kVjIld1LYWUxGt5Dt/tHfHQVAL50SuJres0rMJGgPLZl/XirwE8EQmwF+54weeI0
CmOqEGrGfiZWYw0sb5nLByE3KAm9eU0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:40 2024 by rpki-client on console-ams.rpki-client.org