Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/615B3304A8BA11EDA34E8DE5F1222468.roa
File: 615B3304A8BA11EDA34E8DE5F1222468.roa (raw, json)
Hash identifier: gsiaHrJEdo/5wDU0dhjs7yogfc8GKoWp49TwdmEeqEk=
Subject key identifier: 12:2A:81:3A:71:3D:C2:25:1A:21:B7:90:ED:E5:5B:8A:63:4E:3A:F8
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09BD
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/615B3304A8BA11EDA34E8DE5F1222468.roa
Signing time: Thu 09 Feb 2023 20:43:17 +0000
ROA not before: Thu 09 Feb 2023 20:43:13 +0000
ROA not after: Fri 09 Feb 2024 20:43:13 +0000
asID: 207990
IP address blocks: 161.123.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:43:13 2023 GMT
Not After : Feb 9 20:43:13 2024 GMT
Subject: CN=63e55ae5-3723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:78:34:10:af:e6:33:b5:8b:bc:de:1c:9d:
b3:d6:fe:e5:99:45:e7:8f:fe:a7:80:4e:e8:6b:32:
f8:bd:fb:7b:23:bd:9c:58:b7:b8:b3:aa:ea:fe:18:
46:0d:76:47:0c:57:73:5d:2b:4c:6e:52:cf:4b:be:
fb:88:e9:39:ab:6f:3d:7c:be:e4:ec:0b:89:65:78:
c3:c5:85:06:93:63:05:8f:4b:09:25:55:9a:e5:a4:
34:dc:f7:f1:02:2a:44:d3:e2:3b:50:d2:44:bf:56:
d8:54:e3:b2:8c:98:c0:07:c8:9e:54:88:80:8e:e7:
bd:fc:ca:55:1d:a4:b4:4d:77:63:d6:3e:78:45:7a:
36:45:47:d2:42:a0:88:79:93:45:3d:1f:13:a9:dd:
b7:8e:9b:60:36:34:40:85:ae:b2:51:97:39:31:65:
ff:4d:97:3f:c9:42:b6:25:20:5f:2f:df:d4:4f:3f:
43:1a:6a:d3:c0:aa:9e:c3:5f:d5:ca:f0:40:0a:67:
88:4f:3d:54:30:d9:21:42:01:bc:8d:ac:87:3e:3e:
48:38:19:46:5d:cd:08:cb:97:c3:e9:3b:78:09:76:
b2:7a:29:bf:5a:7f:67:71:5e:f3:d3:d6:a5:e2:31:
26:f9:e5:f7:c7:bb:39:c1:9a:a4:21:49:f6:f9:81:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:81:3A:71:3D:C2:25:1A:21:B7:90:ED:E5:5B:8A:63:4E:3A:F8
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/615B3304A8BA11EDA34E8DE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.195.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d4:af:cf:fa:49:f2:e0:c4:b7:eb:38:58:aa:50:ba:6f:78:
07:e4:f0:76:11:24:4d:54:f7:12:b8:09:5b:3f:79:25:23:ff:
db:e8:98:29:fe:3f:41:34:61:bc:09:ed:24:87:25:ab:4b:9a:
8f:ae:a7:05:48:c6:69:6e:6f:d6:3f:49:28:a9:21:05:23:00:
76:46:1e:d6:57:df:40:f6:cc:67:b2:09:5e:cd:64:8b:0d:ba:
e0:1c:89:3b:fe:22:24:60:f5:61:19:b1:fa:e7:bf:23:af:72:
62:a9:3a:cf:fa:f5:82:6e:d0:ac:b8:01:83:4f:17:89:86:7c:
2d:45:6b:44:16:86:a7:60:81:66:59:45:5f:b3:b4:0c:84:be:
f5:2c:0d:41:7e:dd:4c:84:6f:e9:4b:e1:8c:bf:b3:71:3c:1e:
75:ee:c6:2f:5d:53:1b:22:19:06:69:a3:e6:03:4f:61:85:76:
d8:f2:76:e8:26:4a:93:61:ba:cd:2a:a3:9c:db:79:b4:ad:f1:
d5:81:b0:21:0b:d8:87:6b:e6:f7:51:25:97:2b:19:28:c1:a4:
2d:14:d6:5f:0a:5f:a0:6d:21:11:a7:8f:a6:f1:f7:7b:58:7f:
61:8f:27:07:f9:5b:ae:ad:01:59:c0:08:21:37:aa:c1:6f:33:
86:4d:8f:52
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAyMDkyMDQzMTNaFw0yNDAyMDkyMDQzMTNaMBgxFjAU
BgNVBAMMDTYzZTU1YWU1LTM3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5qXg0EK/mM7WLvN4cnbPW/uWZReeP/qeATuhrMvi9+3sjvZxYt7izqur+
GEYNdkcMV3NdK0xuUs9LvvuI6Tmrbz18vuTsC4lleMPFhQaTYwWPSwklVZrlpDTc
9/ECKkTT4jtQ0kS/VthU47KMmMAHyJ5UiICO5738ylUdpLRNd2PWPnhFejZFR9JC
oIh5k0U9HxOp3beOm2A2NECFrrJRlzkxZf9Nlz/JQrYlIF8v39RPP0MaatPAqp7D
X9XK8EAKZ4hPPVQw2SFCAbyNrIc+Pkg4GUZdzQjLl8PpO3gJdrJ6Kb9af2dxXvPT
1qXiMSb55ffHuznBmqQhSfb5gbR5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEiqB
OnE9wiUaIbeQ7eVbimNOOvgwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzYxNUIzMzA0QThCQTExRURBMzRFOERFNUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe8MwDQYJKoZIhvcNAQELBQAD
ggEBAJPUr8/6SfLgxLfrOFiqULpveAfk8HYRJE1U9xK4CVs/eSUj/9vomCn+P0E0
YbwJ7SSHJatLmo+upwVIxmlub9Y/SSipIQUjAHZGHtZX30D2zGeyCV7NZIsNuuAc
iTv+IiRg9WEZsfrnvyOvcmKpOs/69YJu0Ky4AYNPF4mGfC1Fa0QWhqdggWZZRV+z
tAyEvvUsDUF+3UyEb+lL4Yy/s3E8HnXuxi9dUxsiGQZpo+YDT2GFdtjydugmSpNh
us0qo5zbebSt8dWBsCEL2Idr5vdRJZcrGSjBpC0U1l8KX6BtIRGnj6bx93tYf2GP
Jwf5W66tAVnACCE3qsFvM4ZNj1I=
-----END CERTIFICATE-----
Generated at Sat Feb 10 03:16:46 2024 by rpki-client on console-fra.rpki-client.org