Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28CCA93AC31011ED8B179C7EF1222468.roa
File: 28CCA93AC31011ED8B179C7EF1222468.roa (raw, json)
Hash identifier: Bc4O4K7W4SKdFyvWw7iIIL6xnpBymWHlFW4J1F/FY+I=
Subject key identifier: F0:BA:FB:91:0D:D1:03:60:3E:F8:5F:C7:0F:D7:BE:FC:92:8A:06:3A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A11
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28CCA93AC31011ED8B179C7EF1222468.roa
Signing time: Wed 15 Mar 2023 09:02:49 +0000
ROA not before: Wed 15 Mar 2023 09:02:45 +0000
ROA not after: Fri 15 Mar 2024 09:02:45 +0000
asID: 207990
IP address blocks: 161.123.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 09:02:45 2023 GMT
Not After : Mar 15 09:02:45 2024 GMT
Subject: CN=641189b9-3ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:af:fd:0b:2e:2b:c9:1f:ea:9b:2b:a8:07:
36:32:cf:62:18:85:87:49:e7:e8:3d:d7:40:07:20:
5f:20:e1:bf:9c:a7:a0:7c:1c:bb:36:d5:19:07:10:
82:6f:c8:3c:1e:41:ff:86:3f:26:17:83:a6:14:b9:
55:82:d2:82:3b:ca:b5:9f:35:ce:9e:ba:73:b8:15:
be:09:96:23:8c:3f:b4:85:85:bd:fe:9b:a0:b9:9b:
69:bd:5b:e5:97:67:55:6c:22:27:bf:31:27:00:8f:
fa:6a:a1:58:2f:8a:95:16:12:2f:c3:b7:d2:5f:d6:
bc:ce:42:4d:1b:8e:b1:2a:cd:6c:ac:14:87:f5:4b:
7c:27:30:be:b2:05:79:e0:7b:9b:8a:a0:6f:2e:7c:
0f:66:8c:65:64:f3:72:01:df:75:c5:4a:a8:5a:3d:
dc:1a:ee:73:48:90:b3:21:98:f5:c3:e6:1e:51:87:
61:6e:d6:f6:25:bb:5b:84:67:07:35:08:d5:ac:5d:
4f:0f:88:4b:cc:41:45:84:35:2e:c8:74:a2:ee:2b:
70:20:5a:49:96:a3:f5:c2:95:4a:76:75:df:7a:11:
85:87:44:65:14:69:78:c9:59:53:77:2a:8b:e3:7d:
32:47:66:0b:b2:93:fd:11:84:da:9a:23:a4:a9:51:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:FB:91:0D:D1:03:60:3E:F8:5F:C7:0F:D7:BE:FC:92:8A:06:3A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/28CCA93AC31011ED8B179C7EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.2.0/23
Signature Algorithm: sha256WithRSAEncryption
84:ac:b9:8d:9b:e1:45:a4:3e:69:5b:77:23:75:85:0c:56:db:
f7:49:fa:84:ff:db:63:45:9e:6d:83:4e:64:a4:81:76:f5:59:
a3:e1:e9:89:5e:65:99:96:95:f9:1c:4b:52:09:34:2b:2b:7b:
7c:02:ad:8d:b1:2d:88:13:e8:0d:41:6e:43:b7:c7:86:65:11:
52:88:16:f7:f3:fa:7c:52:fd:c1:ff:a5:06:3b:3d:29:63:24:
69:4f:27:b3:39:cd:28:ee:f3:70:4c:8d:c2:ae:d7:a8:29:8c:
80:3d:46:2d:b4:c5:f0:76:62:35:d3:63:bd:c8:e3:98:e4:08:
95:2b:22:27:90:00:e4:88:ee:20:94:dd:20:41:f3:f3:98:f4:
27:3e:20:d8:74:1c:cb:63:8a:22:1d:c0:40:f9:ff:e7:ed:95:
f3:8e:01:27:ed:25:23:7d:2e:0d:3e:c7:27:10:d5:14:b5:82:
12:de:83:0d:02:52:13:f8:cc:30:d0:5c:95:cc:f8:74:a1:d4:
97:61:f1:b0:e9:3a:72:40:cf:6a:7d:77:52:df:28:02:7b:7e:
c5:64:24:4d:af:90:3e:ea:02:3d:3b:05:7d:38:57:00:34:f3:
91:2a:cf:cc:6b:7b:89:fd:01:84:a8:c6:1a:01:92:aa:d7:6e:
5b:e4:67:c9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICChEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAzMTUwOTAyNDVaFw0yNDAzMTUwOTAyNDVaMBgxFjAU
BgNVBAMMDTY0MTE4OWI5LTNkZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC646/9Cy4ryR/qmyuoBzYyz2IYhYdJ5+g910AHIF8g4b+cp6B8HLs21RkH
EIJvyDweQf+GPyYXg6YUuVWC0oI7yrWfNc6eunO4Fb4JliOMP7SFhb3+m6C5m2m9
W+WXZ1VsIie/MScAj/pqoVgvipUWEi/Dt9Jf1rzOQk0bjrEqzWysFIf1S3wnML6y
BXnge5uKoG8ufA9mjGVk83IB33XFSqhaPdwa7nNIkLMhmPXD5h5Rh2Fu1vYlu1uE
Zwc1CNWsXU8PiEvMQUWENS7IdKLuK3AgWkmWo/XClUp2dd96EYWHRGUUaXjJWVN3
KovjfTJHZguyk/0RhNqaI6SpUfPtAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8Lr7
kQ3RA2A++F/HD9e+/JKKBjowHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzI4Q0NBOTNBQzMxMDExRUQ4QjE3OUM3RUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhewIwDQYJKoZIhvcNAQELBQAD
ggEBAISsuY2b4UWkPmlbdyN1hQxW2/dJ+oT/22NFnm2DTmSkgXb1WaPh6YleZZmW
lfkcS1IJNCsre3wCrY2xLYgT6A1BbkO3x4ZlEVKIFvfz+nxS/cH/pQY7PSljJGlP
J7M5zSju83BMjcKu16gpjIA9Ri20xfB2YjXTY73I45jkCJUrIieQAOSI7iCU3SBB
8/OY9Cc+INh0HMtjiiIdwED5/+ftlfOOASftJSN9Lg0+xycQ1RS1ghLegw0CUhP4
zDDQXJXM+HSh1Jdh8bDpOnJAz2p9d1LfKAJ7fsVkJE2vkD7qAj07BX04VwA085Eq
z8xre4n9AYSoxhoBkqrXblvkZ8k=
-----END CERTIFICATE-----
Generated at Sat Mar 16 03:09:16 2024 by rpki-client on console-fra.rpki-client.org