Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D6C71106EFC211EBAF5F3451D8A014CE.roa
File: D6C71106EFC211EBAF5F3451D8A014CE.roa (raw, json)
Hash identifier: yhhTj5MQ9ju9leXWxQkGuiMqPvWA8f8BDA21e23MPJw=
Subject key identifier: 77:3A:11:9A:67:EE:DD:BD:76:11:11:91:39:31:BE:CC:C5:4C:24:53
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0194
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D6C71106EFC211EBAF5F3451D8A014CE.roa
Signing time: Wed 28 Jul 2021 16:43:07 +0000
ROA not before: Thu 29 Jul 2021 16:43:03 +0000
ROA not after: Sun 30 Jul 2023 16:43:03 +0000
asID: 37119
IP address blocks: 105.174.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 16:43:03 2021 GMT
Not After : Jul 30 16:43:03 2023 GMT
Subject: CN=6101891b-e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:db:57:5a:89:89:84:df:a4:67:b4:eb:3c:
43:d6:63:dd:9f:c8:20:4f:e6:3a:3f:be:75:e1:6b:
3c:6b:06:00:23:fc:e8:50:bc:cb:5a:d5:4d:73:04:
77:93:ba:34:3c:d7:9d:6b:f2:41:6d:8a:00:85:24:
e4:6c:c7:0b:97:b8:b8:81:45:d9:47:19:90:2d:ba:
85:0e:97:a3:85:43:59:e8:c5:8c:89:fb:8b:de:5b:
17:ca:31:65:11:13:0e:37:da:4a:b3:4e:03:e4:21:
30:72:29:b2:b0:18:3c:23:d6:17:49:70:45:11:f8:
42:0a:b3:bd:98:1f:0b:9b:af:2f:2c:a3:6f:e6:a1:
64:cf:91:e3:c6:ae:e7:74:75:3a:a3:39:fa:d9:b8:
a0:21:ea:19:3c:bc:24:8a:1a:ff:1c:e6:8a:a9:6f:
3d:1a:3f:02:42:5c:85:ef:89:55:17:33:64:e8:fd:
fc:57:f1:05:fe:68:b3:d5:14:df:81:ac:e3:0b:1d:
fe:28:87:54:26:d6:2c:27:16:bf:ec:ae:27:db:b4:
f3:46:65:73:c2:f0:f6:1c:e8:b1:5d:78:a5:77:b0:
69:03:7d:f7:27:0e:74:e8:08:b8:8c:e0:80:5c:2b:
63:8d:13:61:b9:96:75:b1:a7:52:d1:fe:13:37:d3:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:11:9A:67:EE:DD:BD:76:11:11:91:39:31:BE:CC:C5:4C:24:53
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/D6C71106EFC211EBAF5F3451D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.0.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ab:8c:67:3d:0e:31:ed:7b:d6:24:4b:6b:24:51:2b:41:91:
ae:1e:f6:6c:82:76:62:c6:87:01:8e:f1:42:7f:cd:50:8c:de:
ec:13:9d:db:c1:7a:81:a7:3d:d7:04:3b:31:49:8d:cd:6b:27:
2d:14:dd:9d:e4:ba:2d:82:07:48:84:e0:ee:1b:15:5e:e5:96:
ef:19:ea:21:8a:d1:58:11:79:49:4f:30:85:a8:7b:ec:a7:8e:
87:8b:46:a7:d4:c5:c3:73:f2:ca:0a:fa:70:33:8c:d4:c6:ff:
26:4b:15:bf:af:49:50:10:f0:53:9f:66:95:f8:db:00:ec:3c:
3c:9d:eb:74:c7:6c:14:1c:fd:fc:2f:cd:27:d6:7f:a4:fd:39:
bc:0f:0a:ab:35:58:c6:90:18:64:2a:ac:a2:2c:5f:74:70:a6:
55:38:1c:89:76:1a:84:a6:ac:81:13:69:4c:06:3a:cd:0b:be:
18:40:b1:2d:90:8c:24:8a:82:aa:8f:05:aa:f5:89:2d:e2:f7:
20:f0:25:de:f5:de:4e:b8:b5:c0:cf:2b:29:05:b9:96:3a:da:
34:d2:f9:6f:9d:97:d5:fa:64:f7:03:7c:ee:6b:34:6b:62:ea:
79:b9:a2:90:ce:ff:f3:56:31:78:1a:6d:f2:78:f1:49:57:70:
b5:4a:fe:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMTA3MjkxNjQzMDNaFw0yMzA3MzAxNjQzMDNaMBgxFjAU
BgNVBAMMDTYxMDE4OTFiLWUzYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0i9tXWomJhN+kZ7TrPEPWY92fyCBP5jo/vnXhazxrBgAj/OhQvMta1U1z
BHeTujQ8151r8kFtigCFJORsxwuXuLiBRdlHGZAtuoUOl6OFQ1noxYyJ+4veWxfK
MWUREw432kqzTgPkITByKbKwGDwj1hdJcEUR+EIKs72YHwubry8so2/moWTPkePG
rud0dTqjOfrZuKAh6hk8vCSKGv8c5oqpbz0aPwJCXIXviVUXM2To/fxX8QX+aLPV
FN+BrOMLHf4oh1Qm1iwnFr/srifbtPNGZXPC8PYc6LFdeKV3sGkDffcnDnToCLiM
4IBcK2ONE2G5lnWxp1LR/hM30wavAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdzoR
mmfu3b12ERGROTG+zMVMJFMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4L0Q2QzcxMTA2RUZDMjExRUJBRjVGMzQ1MUQ4QTAxNENFLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJprgAwDQYJKoZIhvcNAQEL
BQADggEBAHirjGc9DjHte9YkS2skUStBka4e9myCdmLGhwGO8UJ/zVCM3uwTndvB
eoGnPdcEOzFJjc1rJy0U3Z3kui2CB0iE4O4bFV7llu8Z6iGK0VgReUlPMIWoe+yn
joeLRqfUxcNz8soK+nAzjNTG/yZLFb+vSVAQ8FOfZpX42wDsPDyd63THbBQc/fwv
zSfWf6T9ObwPCqs1WMaQGGQqrKIsX3RwplU4HIl2GoSmrIETaUwGOs0LvhhAsS2Q
jCSKgqqPBar1iS3i9yDwJd713k64tcDPKykFuZY62jTS+W+dl9X6ZPcDfO5rNGti
6nm5opDO//NWMXgabfJ48UlXcLVK/m8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org