Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/160F07EE3BD911ECA89FEB3DD8A014CE.roa
File: 160F07EE3BD911ECA89FEB3DD8A014CE.roa (raw, json)
Hash identifier: 8O5x6DvorO68R5BU4YtB7B+Htnn5PkDdkx+OHlFA6NI=
Subject key identifier: F6:F6:17:81:87:52:D1:59:C9:C2:12:99:98:70:35:06:3C:EF:F5:F4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 022A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/160F07EE3BD911ECA89FEB3DD8A014CE.roa
Signing time: Tue 02 Nov 2021 12:33:31 +0000
ROA not before: Tue 02 Nov 2021 12:33:27 +0000
ROA not after: Wed 02 Nov 2022 12:33:27 +0000
asID: 327790
IP address blocks: 161.123.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 12:33:27 2021 GMT
Not After : Nov 2 12:33:27 2022 GMT
Subject: CN=6181301b-f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:42:51:8c:d7:45:1e:a5:e9:ea:1e:a8:89:
c0:43:53:50:4b:17:0e:fc:04:8a:0a:eb:ff:97:b1:
c3:fa:51:0a:6f:9c:6e:77:19:80:66:fc:33:fa:34:
04:08:52:8b:a7:e2:1b:ff:2d:8a:13:d8:dc:15:50:
eb:4f:aa:7e:83:30:25:3c:46:15:ce:d7:f8:18:0e:
b2:a5:46:35:ad:50:b7:18:53:35:7d:78:53:69:5c:
cf:85:bf:16:3f:5c:58:35:8f:27:cc:d3:ee:47:09:
14:43:d7:27:6e:88:fa:a0:80:6b:1c:e6:a4:97:a8:
44:53:dc:d0:1e:82:26:57:ae:bd:ac:83:e2:ab:62:
d0:a5:98:ff:73:87:8b:44:bb:26:33:b3:55:03:4b:
f3:6c:47:b4:64:27:5a:00:e8:17:64:25:a0:de:46:
a2:3b:78:31:e3:f1:51:6f:34:8f:d8:9c:56:2e:63:
78:c5:3a:20:2b:38:32:2a:46:94:c3:b2:de:75:48:
88:70:59:d7:23:8b:9b:ca:5d:b7:0c:5a:5a:62:b5:
81:fc:08:ca:ce:a1:63:b1:29:05:b0:99:9b:d4:c3:
b6:fb:7b:c3:22:04:fb:4e:e7:3d:b1:bf:ab:19:c4:
fb:22:e1:3f:29:11:63:08:67:bf:85:91:74:06:63:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:17:81:87:52:D1:59:C9:C2:12:99:98:70:35:06:3C:EF:F5:F4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/160F07EE3BD911ECA89FEB3DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.121.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6d:37:0c:ef:e9:ad:c4:e8:d0:c6:45:7d:8f:95:32:b6:09:
d1:c0:98:b6:ce:2a:62:59:4a:80:13:8d:96:60:f4:c8:c5:46:
99:4a:8f:a5:38:04:e6:23:61:ed:5f:85:43:8e:78:4a:5b:bc:
19:3c:46:46:fe:86:47:23:7c:10:9e:e0:fd:72:68:22:8b:bf:
80:ec:fd:1f:33:6b:d7:74:86:1b:74:c8:03:22:54:5c:72:c9:
d6:4c:1f:74:ff:25:0e:31:31:26:1c:57:a0:7c:d3:0f:a7:28:
30:4a:c1:ff:c6:b0:06:41:37:dc:c4:6b:d4:f7:63:5d:eb:7c:
36:1a:88:bc:cd:7d:c0:f2:46:bc:20:50:0d:68:8d:b6:7a:d4:
ee:c8:07:32:6e:db:5f:74:7d:cc:da:f0:4c:a2:d0:57:ba:ae:
b9:e9:90:66:58:92:42:8c:54:9c:e5:e2:79:bc:06:b7:7b:6b:
a0:3e:02:8e:db:cc:1a:c9:09:a7:df:5e:cc:2d:0e:95:2c:3f:
93:dc:fa:e5:1f:08:ea:a1:c6:ac:90:c5:02:c9:b7:34:5c:f6:
e3:06:58:3b:38:84:a7:71:72:0a:a6:28:9e:6d:ad:d1:64:a6:
41:ef:65:33:ae:69:18:14:3e:07:28:e2:5d:02:9b:ac:dd:8e:
ac:95:c6:44
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAiowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTExMDIxMjMzMjdaFw0yMjExMDIxMjMzMjdaMBgxFjAU
BgNVBAMMDTYxODEzMDFiLWYyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx1kJRjNdFHqXp6h6oicBDU1BLFw78BIoK6/+XscP6UQpvnG53GYBm/DP6
NAQIUoun4hv/LYoT2NwVUOtPqn6DMCU8RhXO1/gYDrKlRjWtULcYUzV9eFNpXM+F
vxY/XFg1jyfM0+5HCRRD1yduiPqggGsc5qSXqERT3NAegiZXrr2sg+KrYtClmP9z
h4tEuyYzs1UDS/NsR7RkJ1oA6BdkJaDeRqI7eDHj8VFvNI/YnFYuY3jFOiArODIq
RpTDst51SIhwWdcji5vKXbcMWlpitYH8CMrOoWOxKQWwmZvUw7b7e8MiBPtO5z2x
v6sZxPsi4T8pEWMIZ7+FkXQGYxZBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9vYX
gYdS0VnJwhKZmHA1Bjzv9fQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzE2MEYwN0VFM0JEOTExRUNBODlGRUIzREQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe3kwDQYJKoZIhvcNAQELBQAD
ggEBAHVtNwzv6a3E6NDGRX2PlTK2CdHAmLbOKmJZSoATjZZg9MjFRplKj6U4BOYj
Ye1fhUOOeEpbvBk8Rkb+hkcjfBCe4P1yaCKLv4Ds/R8za9d0hht0yAMiVFxyydZM
H3T/JQ4xMSYcV6B80w+nKDBKwf/GsAZBN9zEa9T3Y13rfDYaiLzNfcDyRrwgUA1o
jbZ61O7IBzJu2190fcza8Eyi0Fe6rrnpkGZYkkKMVJzl4nm8Brd7a6A+Ao7bzBrJ
CaffXswtDpUsP5Pc+uUfCOqhxqyQxQLJtzRc9uMGWDs4hKdxcgqmKJ5trdFkpkHv
ZTOuaRgUPgco4l0Cm6zdjqyVxkQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org