Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2AC842023FE11ED9CCDC889F1222468.roa
File: F2AC842023FE11ED9CCDC889F1222468.roa (raw, json)
Hash identifier: 8C/Irlm5HTPTQ/1TROGH+NuAtpL6B1IkylbUL5XW9PE=
Subject key identifier: D3:50:92:EB:F0:FF:C8:4F:5E:7A:1C:9B:1F:45:12:C8:BD:FF:5A:C5
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 079C
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2AC842023FE11ED9CCDC889F1222468.roa
Signing time: Wed 24 Aug 2022 22:49:02 +0000
ROA not before: Wed 24 Aug 2022 22:48:58 +0000
ROA not after: Fri 25 Aug 2023 22:48:58 +0000
asID: 212238
IP address blocks: 102.129.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 24 22:48:58 2022 GMT
Not After : Aug 25 22:48:58 2023 GMT
Subject: CN=6306aade-0b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1f:af:ec:a2:e9:92:cc:43:4d:2d:56:ef:bc:
eb:a7:c7:f4:c3:4d:3e:9f:1e:ef:5b:1b:c5:2f:f5:
32:2e:24:1a:59:cc:41:f4:07:d9:88:10:4f:6b:c8:
bb:9e:e7:d9:a8:49:f5:c0:8b:aa:ff:f9:c8:0b:f7:
87:27:e0:dd:1b:d2:e8:89:79:67:e1:3c:38:78:25:
3b:e6:b7:25:ce:4a:89:b1:51:51:ed:40:de:c0:db:
6e:0a:e7:d8:8e:c9:b8:98:74:f1:87:8e:fc:e6:5f:
1a:58:08:e5:d6:29:8c:a8:15:f1:5e:8a:82:16:af:
4d:a0:1d:89:d7:1b:43:4c:76:9c:b2:82:f8:a7:5f:
be:66:a6:7d:81:cb:9a:c1:e1:41:5f:aa:95:90:29:
eb:22:34:16:65:cb:c2:f2:aa:9b:7f:ef:04:3e:3f:
28:60:6e:b0:77:e7:6f:b9:a0:35:96:20:92:1f:62:
7a:03:f0:7f:79:d1:1d:e1:86:83:30:b8:2d:86:ff:
2d:a4:35:a9:d8:de:03:b3:eb:0f:42:c5:e6:ed:d8:
04:45:15:dd:cb:fa:c9:be:af:76:99:15:ac:da:a0:
4f:e1:7c:1f:31:50:e1:fa:42:18:44:37:73:17:b1:
f0:9d:0f:e1:d1:94:7b:71:1d:ad:0a:7d:60:51:b1:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:92:EB:F0:FF:C8:4F:5E:7A:1C:9B:1F:45:12:C8:BD:FF:5A:C5
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2AC842023FE11ED9CCDC889F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.204.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0d:4d:29:30:67:71:b1:a4:5c:53:4f:55:1c:ed:ea:68:da:
95:e6:72:fb:d6:e8:45:db:02:39:de:42:17:5c:34:a0:09:7c:
69:fa:ae:e8:2b:37:0a:9f:c8:ff:e2:6f:0a:b8:33:f6:cf:02:
1f:78:f0:dc:a4:71:d6:44:71:54:d1:57:dc:a4:46:d2:d3:f0:
50:0c:85:a4:59:15:5e:d9:14:c5:2d:20:40:e2:8b:c0:8b:c7:
98:d2:68:2a:71:85:78:3d:36:19:66:9d:e4:01:2e:fd:dd:ed:
d6:9f:89:51:52:7b:02:ab:54:c1:62:87:b7:c7:ec:b8:2f:45:
41:8c:bc:2f:cf:b8:2e:78:d7:6d:74:05:3f:d4:c6:6c:eb:63:
f8:d7:ad:d2:23:00:6d:a7:66:fd:0e:33:91:bb:f4:8b:65:f8:
8f:cd:90:99:fd:de:bf:d9:eb:57:03:29:12:14:07:7d:04:19:
19:28:ad:0f:f5:4f:40:5e:f3:40:2f:d2:7f:ff:3d:d6:24:d3:
59:4e:0e:41:c6:7d:0d:cb:24:ff:90:b4:5f:66:5c:37:7a:30:
88:d2:9c:57:4c:18:0f:9b:3b:8e:26:4f:b2:27:37:34:1d:a7:
9d:8d:25:7e:f0:b2:e4:5e:77:10:4a:d2:2e:a6:ef:4d:17:a9:
cf:5b:d1:b9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMjA4MjQyMjQ4NThaFw0yMzA4MjUyMjQ4NThaMBgxFjAU
BgNVBAMMDTYzMDZhYWRlLTBiNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqH6/soumSzENNLVbvvOunx/TDTT6fHu9bG8Uv9TIuJBpZzEH0B9mIEE9r
yLue59moSfXAi6r/+cgL94cn4N0b0uiJeWfhPDh4JTvmtyXOSomxUVHtQN7A224K
59iOybiYdPGHjvzmXxpYCOXWKYyoFfFeioIWr02gHYnXG0NMdpyygvinX75mpn2B
y5rB4UFfqpWQKesiNBZly8Lyqpt/7wQ+PyhgbrB352+5oDWWIJIfYnoD8H950R3h
hoMwuC2G/y2kNanY3gOz6w9Cxebt2ARFFd3L+sm+r3aZFazaoE/hfB8xUOH6QhhE
N3MXsfCdD+HRlHtxHa0KfWBRseq/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU01CS
6/D/yE9eehybH0USyL3/WsUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YyQUM4NDIwMjNGRTExRUQ5Q0NEQzg4OUYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcwwDQYJKoZIhvcNAQEL
BQADggEBALwNTSkwZ3GxpFxTT1Uc7epo2pXmcvvW6EXbAjneQhdcNKAJfGn6rugr
NwqfyP/ibwq4M/bPAh948NykcdZEcVTRV9ykRtLT8FAMhaRZFV7ZFMUtIEDii8CL
x5jSaCpxhXg9NhlmneQBLv3d7dafiVFSewKrVMFih7fH7LgvRUGMvC/PuC541210
BT/UxmzrY/jXrdIjAG2nZv0OM5G79Itl+I/NkJn93r/Z61cDKRIUB30EGRkorQ/1
T0Be80Av0n//PdYk01lODkHGfQ3LJP+QtF9mXDd6MIjSnFdMGA+bO44mT7InNzQd
p52NJX7wsuRedxBK0i6m700Xqc9b0bk=
-----END CERTIFICATE-----
Generated at Sat Aug 26 01:37:51 2023 by rpki-client on console-ams.rpki-client.org