Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13E7BE207DEC11EC8DA857AB5A40D577.roa
File: 13E7BE207DEC11EC8DA857AB5A40D577.roa (raw, json)
Hash identifier: mL1gpAk6Kc4bfS0WWGSsiHNsxnQFTEIgN5VWmpEi9GA=
Subject key identifier: 57:8C:BB:D1:48:F4:39:D6:78:7B:7F:2F:F5:CE:32:6F:74:29:E3:E4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04E8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13E7BE207DEC11EC8DA857AB5A40D577.roa
Signing time: Tue 25 Jan 2022 14:35:44 +0000
ROA not before: Tue 25 Jan 2022 14:35:40 +0000
ROA not after: Wed 25 Jan 2023 14:35:40 +0000
asID: 58202
IP address blocks: 161.123.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 14:35:40 2022 GMT
Not After : Jan 25 14:35:40 2023 GMT
Subject: CN=61f00ac0-bf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:27:3a:40:bd:7e:c0:63:c0:99:98:ec:b3:
1b:d8:5f:e5:55:61:dd:69:a3:df:6d:e6:2e:4c:a1:
fb:ec:ce:1a:3a:9a:a7:de:0e:e0:4b:a3:4e:71:e9:
d7:98:3e:a5:fc:87:84:4f:49:53:e5:5c:3a:db:08:
f2:7f:91:12:87:c6:5d:d1:46:4d:1a:6f:f5:98:ed:
9e:52:ae:03:a7:8b:3a:db:05:04:8a:c8:dc:11:c6:
69:ed:42:15:71:b5:d2:01:56:a6:9c:4b:a3:22:85:
e4:46:69:6b:dd:3b:81:2c:39:44:dd:a7:99:68:ee:
e7:74:fd:5f:00:af:eb:b4:69:da:db:17:5d:75:ec:
d2:82:42:f7:b1:c1:f6:aa:8a:0f:84:00:ad:90:3f:
53:26:a8:10:59:37:9f:ca:0f:e5:53:06:26:82:fd:
db:7a:10:66:43:66:f0:f0:75:36:c8:10:35:a6:e2:
e9:52:25:3e:30:8b:a8:2d:8e:2c:fc:a5:67:01:b8:
bc:74:a1:03:db:f1:ec:f4:72:b3:ee:12:81:6e:57:
c4:f4:58:c7:53:16:26:f9:13:87:33:1e:e2:df:71:
5b:42:fe:86:17:30:f8:16:8b:26:b7:35:8d:4b:46:
9d:0a:99:1f:86:ea:91:8f:83:c5:a6:f7:7a:15:0b:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:BB:D1:48:F4:39:D6:78:7B:7F:2F:F5:CE:32:6F:74:29:E3:E4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13E7BE207DEC11EC8DA857AB5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.119.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7b:09:05:07:0c:c8:19:a7:3d:a9:0f:5f:76:21:c4:39:e5:
17:ff:b4:5d:c8:2d:7a:e2:9e:c0:7b:59:84:99:0a:b3:73:9e:
cf:87:be:1f:3c:dc:95:25:bb:82:c3:b5:e9:79:a6:45:6f:8b:
d6:d9:4f:88:dc:be:7f:b5:9b:21:3f:d4:f6:c4:a3:99:da:12:
7b:77:fd:ab:51:ef:18:54:87:46:a7:fc:24:58:29:9d:e2:8a:
00:65:23:46:98:b7:21:29:83:8b:fb:42:50:5b:d5:44:67:c7:
bb:19:a2:f9:a9:b3:eb:f4:44:eb:dc:a2:43:c1:ef:4c:61:35:
31:d7:45:67:4e:9b:08:bd:ad:5b:fd:be:98:3c:80:cf:7b:60:
66:b1:c8:54:ea:cb:4f:d8:9a:21:25:ab:26:ef:1d:4c:5b:9d:
e2:c9:9c:c5:a9:8f:39:4c:ac:19:26:0a:31:d3:09:b8:1f:bc:
df:80:ea:9f:9f:7c:7e:46:64:27:4a:c6:ab:4d:bc:a8:37:a9:
46:f0:5a:e8:20:b2:7a:a1:7f:07:47:25:1e:6a:cf:28:db:1c:
ba:49:ef:1c:24:94:35:c1:9b:8b:4a:1e:60:27:6c:ed:7b:6f:
2b:f6:2e:a8:16:a6:78:04:5e:13:d0:56:86:14:08:b2:9a:9a:
7f:2f:d2:07
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNDM1NDBaFw0yMzAxMjUxNDM1NDBaMBgxFjAU
BgNVBAMMDTYxZjAwYWMwLWJmNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCziyc6QL1+wGPAmZjssxvYX+VVYd1po99t5i5Mofvszho6mqfeDuBLo05x
6deYPqX8h4RPSVPlXDrbCPJ/kRKHxl3RRk0ab/WY7Z5SrgOnizrbBQSKyNwRxmnt
QhVxtdIBVqacS6MiheRGaWvdO4EsOUTdp5lo7ud0/V8Ar+u0adrbF1117NKCQvex
wfaqig+EAK2QP1MmqBBZN5/KD+VTBiaC/dt6EGZDZvDwdTbIEDWm4ulSJT4wi6gt
jiz8pWcBuLx0oQPb8ez0crPuEoFuV8T0WMdTFib5E4czHuLfcVtC/oYXMPgWiya3
NY1LRp0KmR+G6pGPg8Wm93oVC24tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV4y7
0Uj0OdZ4e38v9c4yb3Qp4+QwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzEzRTdCRTIwN0RFQzExRUM4REE4NTdBQjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3cwDQYJKoZIhvcNAQELBQAD
ggEBAJR7CQUHDMgZpz2pD192IcQ55Rf/tF3ILXrinsB7WYSZCrNzns+Hvh883JUl
u4LDtel5pkVvi9bZT4jcvn+1myE/1PbEo5naEnt3/atR7xhUh0an/CRYKZ3iigBl
I0aYtyEpg4v7QlBb1URnx7sZovmps+v0ROvcokPB70xhNTHXRWdOmwi9rVv9vpg8
gM97YGaxyFTqy0/YmiElqybvHUxbneLJnMWpjzlMrBkmCjHTCbgfvN+A6p+ffH5G
ZCdKxqtNvKg3qUbwWuggsnqhfwdHJR5qzyjbHLpJ7xwklDXBm4tKHmAnbO17byv2
LqgWpngEXhPQVoYUCLKamn8v0gc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org