Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0496ABA8BB1C11EC95C3BEE75A40D577.roa
File: 0496ABA8BB1C11EC95C3BEE75A40D577.roa (raw, json)
Hash identifier: vdIQvkfAMyA3IfO97YukxZ76rfH7Y0rzQuMaM3cq/Kk=
Subject key identifier: 6F:C5:75:5B:00:87:E0:B9:38:8D:A2:17:48:F6:06:35:D4:0F:8F:AC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0666
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0496ABA8BB1C11EC95C3BEE75A40D577.roa
Signing time: Wed 13 Apr 2022 11:22:35 +0000
ROA not before: Wed 13 Apr 2022 11:22:32 +0000
ROA not after: Thu 13 Apr 2023 11:22:32 +0000
asID: 211252
IP address blocks: 161.123.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 13 11:22:32 2022 GMT
Not After : Apr 13 11:22:32 2023 GMT
Subject: CN=6256b27b-b03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:e7:02:79:82:ed:0d:3c:e7:92:ef:fe:05:
99:4e:0d:45:95:d2:5c:18:66:cf:2e:2c:46:54:68:
82:fd:7a:11:4d:38:bd:bc:4f:ab:4a:a3:14:6b:44:
af:23:10:cf:4f:0d:9a:38:01:ea:1c:99:9e:f8:11:
70:b5:ff:72:ab:2f:2d:43:37:6b:51:0f:9c:29:e7:
4a:fb:f3:dc:c0:98:1e:94:52:c9:df:3b:ab:9d:e8:
a3:17:05:87:9f:7a:0c:f2:0c:27:50:57:1f:71:39:
c6:b8:e6:f8:f6:98:5c:b8:c8:a2:9c:9c:9b:9b:f9:
81:76:85:54:3d:c9:a6:98:95:cb:2c:e5:7a:40:2a:
6f:20:1b:60:f3:3e:e3:4c:43:73:39:f5:93:ec:c2:
03:79:47:f3:76:dc:11:2d:ea:5e:ab:cb:82:70:1f:
f1:21:d1:20:7c:ce:77:6f:6d:6a:5d:76:87:ac:8e:
fa:c2:8e:d9:31:ca:e7:7a:0c:b2:26:b1:86:5f:b9:
ce:1a:6e:38:82:0a:b2:e8:8e:4e:69:43:88:8a:58:
f0:48:f7:a6:9b:d6:2e:42:56:7f:96:16:bc:fd:a6:
72:7d:47:3d:81:0f:4d:d7:28:af:18:23:8f:22:1f:
eb:74:63:c3:2e:1d:af:24:84:1f:8c:45:02:9b:c4:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:75:5B:00:87:E0:B9:38:8D:A2:17:48:F6:06:35:D4:0F:8F:AC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0496ABA8BB1C11EC95C3BEE75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.40.0/24
Signature Algorithm: sha256WithRSAEncryption
69:69:a7:92:1a:28:f2:5f:78:98:34:03:2a:2e:33:b4:9d:3c:
f7:a6:3a:bd:a5:02:57:ca:b5:cd:e3:a4:95:e4:d6:a3:71:e1:
3b:a3:22:bf:54:90:be:79:0e:79:94:ee:fe:3f:d6:e6:a1:c0:
3a:7b:26:96:b8:c5:ce:ea:b2:45:ce:47:36:a6:36:9e:5e:b2:
6e:69:1f:83:38:47:2d:31:d8:30:eb:0c:96:47:10:be:70:d7:
c2:b8:49:4c:5a:43:c9:18:e6:35:73:29:d6:3b:6b:eb:4f:40:
4f:16:06:20:a5:a0:9b:56:6a:3c:d5:7e:9e:8c:f7:3d:dd:28:
89:2a:c4:94:bd:d5:9f:bf:67:e4:56:df:60:09:97:98:4c:aa:
2a:1e:ed:86:44:07:39:c6:2e:d6:50:15:28:51:55:3c:49:6d:
3c:bc:84:e8:50:91:4d:5b:38:76:15:ab:98:9b:40:a7:2e:a0:
f5:64:12:a3:6d:3b:43:b6:fb:d1:e5:c0:46:9c:9a:f3:b8:32:
22:38:1b:fb:cf:af:84:0f:89:27:93:29:44:27:7e:b7:72:7b:
f0:93:8e:ee:ce:5e:39:dd:b2:b5:7b:92:e0:75:e6:84:be:93:
c9:4f:e5:d7:fc:27:be:3a:bb:0f:a7:01:dd:19:f8:a9:0e:7e:
c6:9b:3b:1d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA0MTMxMTIyMzJaFw0yMzA0MTMxMTIyMzJaMBgxFjAU
BgNVBAMMDTYyNTZiMjdiLWIwM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU5ucCeYLtDTznku/+BZlODUWV0lwYZs8uLEZUaIL9ehFNOL28T6tKoxRr
RK8jEM9PDZo4AeocmZ74EXC1/3KrLy1DN2tRD5wp50r789zAmB6UUsnfO6ud6KMX
BYefegzyDCdQVx9xOca45vj2mFy4yKKcnJub+YF2hVQ9yaaYlcss5XpAKm8gG2Dz
PuNMQ3M59ZPswgN5R/N23BEt6l6ry4JwH/Eh0SB8zndvbWpddoesjvrCjtkxyud6
DLImsYZfuc4abjiCCrLojk5pQ4iKWPBI96ab1i5CVn+WFrz9pnJ9Rz2BD03XKK8Y
I48iH+t0Y8MuHa8khB+MRQKbxP9HAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUb8V1
WwCH4Lk4jaIXSPYGNdQPj6wwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzA0OTZBQkE4QkIxQzExRUM5NUMzQkVFNzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACheygwDQYJKoZIhvcNAQELBQAD
ggEBAGlpp5IaKPJfeJg0AyouM7SdPPemOr2lAlfKtc3jpJXk1qNx4TujIr9UkL55
DnmU7v4/1uahwDp7Jpa4xc7qskXORzamNp5esm5pH4M4Ry0x2DDrDJZHEL5w18K4
SUxaQ8kY5jVzKdY7a+tPQE8WBiCloJtWajzVfp6M9z3dKIkqxJS91Z+/Z+RW32AJ
l5hMqioe7YZEBznGLtZQFShRVTxJbTy8hOhQkU1bOHYVq5ibQKcuoPVkEqNtO0O2
+9HlwEacmvO4MiI4G/vPr4QPiSeTKUQnfrdye/CTju7OXjndsrV7kuB15oS+k8lP
5df8J746uw+nAd0Z+KkOfsabOx0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org