Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2B76E94FCF411EB802F7A63D8A014CE.roa
File: F2B76E94FCF411EB802F7A63D8A014CE.roa (raw, json)
Hash identifier: 8VB3jRfcfmGfwF2kqGBK39NePJ2z+hjxUp4iui866qw=
Subject key identifier: 40:47:DC:8A:3D:5C:5E:93:09:B4:11:0D:73:5C:E0:CD:8E:A8:80:92
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 04A6
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2B76E94FCF411EB802F7A63D8A014CE.roa
Signing time: Sat 14 Aug 2021 11:44:59 +0000
ROA not before: Sat 14 Aug 2021 11:44:53 +0000
ROA not after: Sun 14 Aug 2022 11:44:53 +0000
asID: 209181
IP address blocks: 102.129.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Aug 14 11:44:53 2021 GMT
Not After : Aug 14 11:44:53 2022 GMT
Subject: CN=6117acbb-00fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:61:c7:fa:90:9c:31:8a:06:63:a3:f4:e1:
c6:11:f9:20:3c:6b:8b:03:74:c0:50:16:48:4e:8b:
bd:87:97:15:e9:00:9a:3b:21:b0:1d:a9:7b:ae:c9:
a4:a7:81:e3:8a:36:c6:08:c1:ff:c9:4a:3f:7d:0d:
73:f5:d6:59:0b:e4:03:ed:c8:2a:69:d1:b0:4a:d7:
f1:43:96:91:0d:eb:85:ec:11:ec:43:23:48:f9:3f:
20:ef:aa:81:c8:f8:a6:e1:3b:3f:d6:96:74:83:4c:
1c:1a:b3:2d:92:2a:5b:71:99:aa:a3:96:bb:70:a9:
63:80:da:1e:5e:2f:0c:05:8e:cf:9a:0b:97:27:08:
e1:f5:f3:d2:f0:07:17:cc:40:73:e0:2b:85:4d:d9:
84:05:a2:2f:ec:22:3e:51:7d:82:ee:2a:44:b3:6e:
72:9f:44:ba:ac:a5:62:c3:cf:76:e9:52:3e:01:02:
c3:08:87:1e:27:88:1f:c0:4e:45:04:e8:98:0b:47:
eb:8c:b6:1b:d4:3d:34:b8:e8:4b:fe:c2:8c:e8:14:
c1:06:6e:4c:f2:00:42:05:b9:66:93:ec:04:bd:ba:
23:a4:9c:6b:c6:e9:03:62:b9:64:cc:93:f5:39:78:
5f:c8:a4:4b:98:cf:a1:6b:c4:fc:23:0b:3f:e2:75:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:DC:8A:3D:5C:5E:93:09:B4:11:0D:73:5C:E0:CD:8E:A8:80:92
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/F2B76E94FCF411EB802F7A63D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:65:23:29:d4:da:fa:a2:41:18:b1:18:ff:76:66:9f:9f:93:
4b:b0:fa:54:5b:dd:24:7b:9a:97:42:bc:16:36:1d:03:17:c1:
f2:56:e2:94:41:2b:24:bb:21:4e:a8:7b:8f:35:fb:08:d7:57:
b8:8b:3d:fd:18:01:81:13:8a:bd:f4:75:67:3f:2e:18:1b:1d:
4f:f4:a8:e2:64:07:2d:53:ec:a0:69:bb:80:de:d7:89:6d:3c:
fa:fb:e8:01:ac:52:9d:4d:a6:61:ea:7e:87:4d:37:78:4d:e0:
0f:d1:16:10:76:8b:2a:c6:72:15:8f:21:1d:7a:39:06:ee:65:
48:98:5e:3d:0c:47:04:b6:66:81:a1:6d:c1:e6:ee:24:13:f7:
14:3f:e4:8b:b8:c2:6e:6c:29:e5:32:db:74:05:f9:12:f8:80:
27:53:90:ac:38:77:f2:be:16:21:04:e5:01:69:dc:3b:a2:8d:
88:b4:af:5c:be:8c:f8:b6:f9:4f:02:14:3a:f8:96:e6:e4:88:
1d:cb:f2:ac:dd:e5:a8:15:0b:83:33:78:6d:a6:d2:7c:8f:0c:
be:b6:dc:74:43:56:26:71:42:12:54:df:1a:e1:b7:0d:51:55:
73:38:b8:e1:d9:06:1b:6d:03:3a:30:f7:9b:3d:c6:70:d0:87:
56:d3:42:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yMTA4MTQxMTQ0NTNaFw0yMjA4MTQxMTQ0NTNaMBgxFjAU
BgNVBAMMDTYxMTdhY2JiLTAwZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWlmHH+pCcMYoGY6P04cYR+SA8a4sDdMBQFkhOi72HlxXpAJo7IbAdqXuu
yaSngeOKNsYIwf/JSj99DXP11lkL5APtyCpp0bBK1/FDlpEN64XsEexDI0j5PyDv
qoHI+KbhOz/WlnSDTBwasy2SKltxmaqjlrtwqWOA2h5eLwwFjs+aC5cnCOH189Lw
BxfMQHPgK4VN2YQFoi/sIj5RfYLuKkSzbnKfRLqspWLDz3bpUj4BAsMIhx4niB/A
TkUE6JgLR+uMthvUPTS46Ev+wozoFMEGbkzyAEIFuWaT7AS9uiOknGvG6QNiuWTM
k/U5eF/IpEuYz6FrxPwjCz/idRhBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQEfc
ij1cXpMJtBENc1zgzY6ogJIwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4L0YyQjc2RTk0RkNGNDExRUI4MDJGN0E2M0Q4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgcgwDQYJKoZIhvcNAQEL
BQADggEBAHplIynU2vqiQRixGP92Zp+fk0uw+lRb3SR7mpdCvBY2HQMXwfJW4pRB
KyS7IU6oe481+wjXV7iLPf0YAYETir30dWc/LhgbHU/0qOJkBy1T7KBpu4De14lt
PPr76AGsUp1NpmHqfodNN3hN4A/RFhB2iyrGchWPIR16OQbuZUiYXj0MRwS2ZoGh
bcHm7iQT9xQ/5Iu4wm5sKeUy23QF+RL4gCdTkKw4d/K+FiEE5QFp3DuijYi0r1y+
jPi2+U8CFDr4lubkiB3L8qzd5agVC4MzeG2m0nyPDL623HRDViZxQhJU3xrhtw1R
VXM4uOHZBhttAzow95s9xnDQh1bTQjk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-fra.rpki-client.org