Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2A5F83A0327311EC9309B36BD8A014CE.roa
File: 2A5F83A0327311EC9309B36BD8A014CE.roa (raw, json)
Hash identifier: hFwjkG93szbIfNT12t1YAEiwZA08AdwdDSwW+IyDZNE=
Subject key identifier: 26:97:D7:ED:50:92:23:A0:FA:81:D3:69:14:0E:DF:24:19:24:8D:61
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01E8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2A5F83A0327311EC9309B36BD8A014CE.roa
Signing time: Thu 21 Oct 2021 13:31:16 +0000
ROA not before: Thu 21 Oct 2021 13:31:12 +0000
ROA not after: Fri 21 Oct 2022 13:31:12 +0000
asID: 60458
IP address blocks: 161.123.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 21 13:31:12 2021 GMT
Not After : Oct 21 13:31:12 2022 GMT
Subject: CN=61716ba3-059c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:02:69:73:42:68:07:75:5a:92:8a:61:0b:
71:73:28:7e:47:84:b6:4d:65:8a:d7:e8:70:8b:72:
10:92:ed:fb:d4:5f:8e:01:78:e4:fd:17:7e:89:19:
64:83:19:9c:d9:17:06:94:93:c5:30:fe:f5:bf:1b:
12:b0:b9:b8:f2:54:96:ba:f0:83:2a:d1:1b:9d:c1:
58:c7:40:0b:44:13:51:f0:c4:eb:ae:0c:1b:e9:56:
a5:80:6a:eb:d3:70:6e:d2:f9:e5:bf:a6:0a:39:54:
33:2a:b6:46:30:97:d2:a7:3b:91:21:47:9f:5c:1b:
41:b4:c4:91:a9:b9:ff:a4:a9:0a:4b:48:0b:a6:4e:
53:f3:26:e5:5d:ea:52:a7:66:2d:8e:64:58:3f:c1:
1d:a8:4d:da:43:23:b5:95:3e:79:bf:9b:47:3d:5f:
39:64:7b:a8:cd:65:e5:8d:b6:66:e8:15:c0:6f:eb:
80:0e:a7:84:44:9c:d9:40:ab:5f:9e:ad:a6:d9:99:
54:14:4c:9a:d7:a9:42:e9:01:e2:9b:4d:5d:c4:fa:
40:a2:94:10:d1:b3:1c:de:51:56:de:46:19:dc:84:
d4:33:66:a2:82:0b:51:af:27:1d:32:1e:8c:f6:77:
76:2e:dc:20:23:55:49:60:ce:02:69:61:b6:61:86:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:D7:ED:50:92:23:A0:FA:81:D3:69:14:0E:DF:24:19:24:8D:61
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2A5F83A0327311EC9309B36BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.177.0/24
Signature Algorithm: sha256WithRSAEncryption
43:59:c1:b9:f4:20:f7:75:ec:84:1d:8d:0c:e0:d7:25:0b:39:
38:30:01:83:4c:14:aa:9e:dd:cf:90:f1:0f:82:8d:ac:34:59:
8a:62:cb:41:cc:7e:0a:ff:3c:cf:f0:56:be:6d:8e:ef:28:f2:
20:86:84:f1:ce:23:70:80:51:1f:5f:0b:09:2a:24:83:f8:04:
23:cf:c3:10:70:f0:5f:4a:38:d1:17:cd:75:56:3c:fe:fa:7c:
e5:2f:c9:d2:d8:27:2e:b9:b7:8b:41:51:83:c1:49:99:ab:25:
61:01:ea:b7:ae:e4:6c:38:80:db:ea:40:0d:2f:6c:5b:87:6d:
a9:e2:94:e6:a5:39:3f:58:e2:ff:2c:91:f4:41:44:72:7e:01:
b9:8e:53:23:3f:9d:12:b0:22:cf:11:a5:c5:b4:db:3e:08:05:
a7:9a:26:45:b0:37:74:e0:7c:43:d9:fd:16:17:a7:59:e9:cb:
17:7e:1e:77:25:c9:21:3a:26:05:50:df:cf:73:e0:0c:5d:74:
8f:94:9a:49:77:f9:f3:48:d0:71:85:c8:3c:71:98:88:a9:e4:
92:0a:b9:77:36:ae:34:26:f0:60:34:fd:e0:7e:1f:0d:06:31:
e5:66:3b:7f:73:a6:8b:eb:25:83:fb:66:50:d6:da:14:32:c2:
01:bc:0c:c4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAegwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTEwMjExMzMxMTJaFw0yMjEwMjExMzMxMTJaMBgxFjAU
BgNVBAMMDTYxNzE2YmEzLTA1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ+gJpc0JoB3VakophC3FzKH5HhLZNZYrX6HCLchCS7fvUX44BeOT9F36J
GWSDGZzZFwaUk8Uw/vW/GxKwubjyVJa68IMq0RudwVjHQAtEE1HwxOuuDBvpVqWA
auvTcG7S+eW/pgo5VDMqtkYwl9KnO5EhR59cG0G0xJGpuf+kqQpLSAumTlPzJuVd
6lKnZi2OZFg/wR2oTdpDI7WVPnm/m0c9Xzlke6jNZeWNtmboFcBv64AOp4REnNlA
q1+erabZmVQUTJrXqULpAeKbTV3E+kCilBDRsxzeUVbeRhnchNQzZqKCC1GvJx0y
Hoz2d3Yu3CAjVUlgzgJpYbZhhm43AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJpfX
7VCSI6D6gdNpFA7fJBkkjWEwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzJBNUY4M0EwMzI3MzExRUM5MzA5QjM2QkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe7EwDQYJKoZIhvcNAQELBQAD
ggEBAENZwbn0IPd17IQdjQzg1yULOTgwAYNMFKqe3c+Q8Q+Cjaw0WYpiy0HMfgr/
PM/wVr5tju8o8iCGhPHOI3CAUR9fCwkqJIP4BCPPwxBw8F9KONEXzXVWPP76fOUv
ydLYJy65t4tBUYPBSZmrJWEB6reu5Gw4gNvqQA0vbFuHbanilOalOT9Y4v8skfRB
RHJ+AbmOUyM/nRKwIs8RpcW02z4IBaeaJkWwN3TgfEPZ/RYXp1npyxd+HnclySE6
JgVQ389z4AxddI+Umkl3+fNI0HGFyDxxmIip5JIKuXc2rjQm8GA0/eB+Hw0GMeVm
O39zpovrJYP7ZlDW2hQywgG8DMQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org