Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8A002B0769611ECA5EA1EBF5A40D577.roa
File: E8A002B0769611ECA5EA1EBF5A40D577.roa (raw, json)
Hash identifier: M00XtXrx4CEwebZxoL0xzSPrxOTfAWa85zIHOqZhr38=
Subject key identifier: 24:26:0F:24:D7:69:63:C6:A2:43:4F:79:B4:0A:39:24:CE:29:23:4B
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 05B4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8A002B0769611ECA5EA1EBF5A40D577.roa
Signing time: Sun 16 Jan 2022 06:38:26 +0000
ROA not before: Sun 16 Jan 2022 06:38:20 +0000
ROA not after: Mon 16 Jan 2023 06:38:20 +0000
asID: 49392
IP address blocks: 102.129.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1460 (0x5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jan 16 06:38:20 2022 GMT
Not After : Jan 16 06:38:20 2023 GMT
Subject: CN=61e3bd62-b76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:d6:62:74:3c:d4:87:df:9b:97:f8:3b:c8:
aa:c9:9a:d8:c0:9b:24:d6:42:19:fb:85:4e:f2:45:
88:ae:53:72:b9:55:1e:a7:67:2f:bc:cb:2b:ba:09:
a6:80:77:2e:61:4e:fe:f9:27:f6:43:fe:37:56:7b:
65:f6:80:51:49:a7:de:00:4b:c3:ab:04:0c:35:96:
0f:e9:00:1a:64:79:e4:a2:88:89:6d:fd:fa:1a:b0:
a9:9e:53:e0:ca:07:b2:4e:3a:28:17:10:a9:c3:2a:
20:05:9f:4e:36:f6:c2:c9:7e:d0:05:a5:95:2f:2f:
60:e8:46:02:c5:6e:60:83:70:52:00:6f:bd:6b:49:
6d:d8:00:b7:1d:52:1d:10:93:41:f2:34:0a:6b:ca:
6d:35:36:1a:dd:3d:7a:7a:17:4c:a4:61:98:bb:85:
69:65:98:fa:12:d7:14:3e:37:f0:92:a1:70:89:16:
98:8c:5f:3f:ce:49:2b:83:f2:d2:83:6b:37:bb:16:
de:ab:6f:24:f4:04:ff:5f:d7:64:40:d1:72:fc:b3:
34:44:59:db:e4:8a:48:ce:bf:a0:83:18:49:b9:3d:
2b:2b:2a:6c:89:e5:dd:d3:c1:86:06:6b:3b:25:f9:
0c:8f:a7:79:b9:3c:f3:89:73:bb:83:67:46:33:8e:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:26:0F:24:D7:69:63:C6:A2:43:4F:79:B4:0A:39:24:CE:29:23:4B
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E8A002B0769611ECA5EA1EBF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:52:f0:08:5b:f1:62:f3:97:55:d7:70:44:44:f8:bb:5f:e8:
8e:7b:97:7c:43:1a:1b:96:25:d9:e0:00:2e:fa:c1:1a:f1:a9:
3e:1c:53:0b:73:55:d9:28:ca:e1:01:b4:04:58:17:4a:38:ce:
7b:59:a2:54:b3:a9:6c:e8:4d:55:69:a5:7d:08:15:1d:91:9b:
46:c6:f7:24:2c:fd:c2:c3:72:69:65:bd:cd:ba:b0:74:38:ad:
ad:39:5a:6a:19:52:51:a1:4f:2e:7a:0e:e8:96:1b:0d:b5:3c:
a0:24:0c:96:32:b9:91:1e:57:ff:00:87:30:64:4f:ed:d9:12:
6a:56:80:b6:76:b6:54:dc:77:0b:2d:81:3d:8d:66:4a:61:50:
bd:8b:23:8b:2f:c7:00:13:c7:39:4f:82:27:5c:b7:d8:3d:15:
ae:cb:d0:2a:17:38:c5:14:af:1f:42:40:97:96:87:e4:09:27:
98:a3:9e:ac:cc:44:21:56:69:ee:c9:7b:6e:2b:49:fa:07:36:
45:24:48:94:ba:de:db:63:31:bf:6d:85:9e:6c:73:4d:8d:a4:
08:c2:41:05:d7:08:9f:21:c4:fd:5a:27:e5:72:bf:43:b3:e8:
6e:46:7a:66:c4:a0:9f:10:5d:4f:7f:ad:63:a5:d7:15:d7:03:
b9:a8:07:4e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjAxMTYwNjM4MjBaFw0yMzAxMTYwNjM4MjBaMBgxFjAU
BgNVBAMMDTYxZTNiZDYyLWI3NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrkdZidDzUh9+bl/g7yKrJmtjAmyTWQhn7hU7yRYiuU3K5VR6nZy+8yyu6
CaaAdy5hTv75J/ZD/jdWe2X2gFFJp94AS8OrBAw1lg/pABpkeeSiiIlt/foasKme
U+DKB7JOOigXEKnDKiAFn0429sLJftAFpZUvL2DoRgLFbmCDcFIAb71rSW3YALcd
Uh0Qk0HyNAprym01NhrdPXp6F0ykYZi7hWllmPoS1xQ+N/CSoXCJFpiMXz/OSSuD
8tKDaze7Ft6rbyT0BP9f12RA0XL8szREWdvkikjOv6CDGEm5PSsrKmyJ5d3TwYYG
azsl+QyPp3m5PPOJc7uDZ0Yzjma1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJCYP
JNdpY8aiQ095tAo5JM4pI0swHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0U4QTAwMkIwNzY5NjExRUNBNUVBMUVCRjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmgegwDQYJKoZIhvcNAQEL
BQADggEBAFtS8Ahb8WLzl1XXcERE+Ltf6I57l3xDGhuWJdngAC76wRrxqT4cUwtz
VdkoyuEBtARYF0o4zntZolSzqWzoTVVppX0IFR2Rm0bG9yQs/cLDcmllvc26sHQ4
ra05WmoZUlGhTy56DuiWGw21PKAkDJYyuZEeV/8AhzBkT+3ZEmpWgLZ2tlTcdwst
gT2NZkphUL2LI4svxwATxzlPgidct9g9Fa7L0CoXOMUUrx9CQJeWh+QJJ5ijnqzM
RCFWae7Je24rSfoHNkUkSJS63ttjMb9thZ5sc02NpAjCQQXXCJ8hxP1aJ+Vyv0Oz
6G5GembEoJ8QXU9/rWOl1xXXA7moB04=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org