Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/675A9BD8A8B911ED9BD6ABE2F1222468.roa
File: 675A9BD8A8B911ED9BD6ABE2F1222468.roa (raw, json)
Hash identifier: bOY6+xsJVY091I05DpWOAAWGdVSgW+X3XR3ngGGfOP4=
Subject key identifier: 21:62:A6:E1:8E:45:91:A1:04:B4:7D:6A:86:E5:35:BF:00:4E:AD:2B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09AA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/675A9BD8A8B911ED9BD6ABE2F1222468.roa
Signing time: Thu 09 Feb 2023 20:36:18 +0000
ROA not before: Thu 09 Feb 2023 20:36:14 +0000
ROA not after: Fri 09 Feb 2024 20:36:14 +0000
asID: 207990
IP address blocks: 161.123.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:36:14 2023 GMT
Not After : Feb 9 20:36:14 2024 GMT
Subject: CN=63e55942-bf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:5b:a2:04:38:30:0b:ca:35:dc:31:69:ca:
91:74:7a:55:72:e0:13:77:ca:3e:4c:eb:c2:41:4b:
be:b0:fc:b3:75:9f:ec:6d:0c:78:37:b2:c6:2b:e2:
47:27:bd:80:6c:6c:3e:9b:91:aa:5e:c7:1c:e3:ed:
bb:1d:31:79:c3:9b:d6:4d:9d:ef:e5:2f:6d:69:81:
87:fd:58:ba:ca:19:be:f6:0d:17:f8:26:6b:85:c4:
63:cc:4d:33:90:17:95:e4:68:1e:cb:4d:c6:e8:11:
7d:e7:8c:f5:9e:03:af:2b:40:f2:6c:2b:e1:22:3f:
34:7c:85:db:cf:62:08:78:24:5a:73:40:9c:1a:ac:
cc:7a:00:b1:8a:59:4a:e2:b9:1b:aa:a2:3d:5c:e7:
76:cd:67:3f:f0:b8:4b:c9:83:f6:86:d5:ba:9d:c6:
6c:c6:62:6b:00:00:d9:43:00:59:60:e1:0b:67:43:
78:2a:81:58:53:5f:bc:26:ec:e1:18:e5:b9:59:e4:
85:c9:2a:ed:94:45:54:02:e8:a0:21:80:65:33:60:
b7:08:8f:86:59:3e:ae:00:ac:ea:62:13:6a:53:a6:
22:28:aa:c1:88:67:b6:c9:60:00:12:a5:61:9f:de:
0b:e7:07:64:47:1e:84:24:e6:41:d0:a8:b3:ef:ef:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:A6:E1:8E:45:91:A1:04:B4:7D:6A:86:E5:35:BF:00:4E:AD:2B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/675A9BD8A8B911ED9BD6ABE2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f6:08:56:ec:c5:45:70:aa:86:18:61:eb:b7:ce:27:e9:cf:
9b:67:f9:54:b4:43:01:6a:4c:0c:44:ad:b4:15:d8:ab:88:88:
53:09:ec:48:73:22:a3:1c:8d:91:70:8f:0a:3f:e6:86:9d:42:
d0:4d:2f:bd:2e:6a:95:b4:16:68:9e:72:b6:e0:71:8c:0b:c6:
00:85:ce:71:ff:9e:bd:17:f5:dc:94:e2:34:81:9a:17:82:22:
37:31:16:81:2c:39:ef:cd:75:db:03:3a:52:71:4a:53:04:52:
96:2c:58:df:25:0a:57:17:4f:88:fc:d3:e3:43:3a:36:78:dd:
c4:f7:79:f5:7b:97:b3:34:d7:0e:15:2d:3a:d1:12:5b:42:61:
1c:e0:63:e1:11:d1:ac:8f:ed:d0:c9:f2:7a:1a:56:ef:70:16:
b3:ed:f5:1e:f3:34:5b:53:d6:e1:3a:7f:88:c5:89:6d:87:0a:
85:ea:0a:57:d9:ed:86:5c:e8:94:e0:47:94:f2:ad:76:46:1e:
9a:63:fb:06:b4:1e:aa:e7:3b:22:e7:59:d2:e3:07:fd:9b:2d:
a3:65:35:7a:41:1e:6e:77:7e:c5:f2:9f:ab:c8:ba:11:41:ad:
32:de:78:f5:cc:85:e4:3d:d3:2a:0f:88:94:77:40:7b:44:be:
71:bb:9b:bd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCaowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAyMDkyMDM2MTRaFw0yNDAyMDkyMDM2MTRaMBgxFjAU
BgNVBAMMDTYzZTU1OTQyLWJmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUd1uiBDgwC8o13DFpypF0elVy4BN3yj5M68JBS76w/LN1n+xtDHg3ssYr
4kcnvYBsbD6bkapexxzj7bsdMXnDm9ZNne/lL21pgYf9WLrKGb72DRf4JmuFxGPM
TTOQF5XkaB7LTcboEX3njPWeA68rQPJsK+EiPzR8hdvPYgh4JFpzQJwarMx6ALGK
WUriuRuqoj1c53bNZz/wuEvJg/aG1bqdxmzGYmsAANlDAFlg4QtnQ3gqgVhTX7wm
7OEY5blZ5IXJKu2URVQC6KAhgGUzYLcIj4ZZPq4ArOpiE2pTpiIoqsGIZ7bJYAAS
pWGf3gvnB2RHHoQk5kHQqLPv78FPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUIWKm
4Y5FkaEEtH1qhuU1vwBOrSswHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzY3NUE5QkQ4QThCOTExRUQ5QkQ2QUJFMkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe9MwDQYJKoZIhvcNAQELBQAD
ggEBALj2CFbsxUVwqoYYYeu3zifpz5tn+VS0QwFqTAxErbQV2KuIiFMJ7EhzIqMc
jZFwjwo/5oadQtBNL70uapW0FmiecrbgcYwLxgCFznH/nr0X9dyU4jSBmheCIjcx
FoEsOe/NddsDOlJxSlMEUpYsWN8lClcXT4j80+NDOjZ43cT3efV7l7M01w4VLTrR
EltCYRzgY+ER0ayP7dDJ8noaVu9wFrPt9R7zNFtT1uE6f4jFiW2HCoXqClfZ7YZc
6JTgR5TyrXZGHppj+wa0HqrnOyLnWdLjB/2bLaNlNXpBHm53fsXyn6vIuhFBrTLe
ePXMheQ90yoPiJR3QHtEvnG7m70=
-----END CERTIFICATE-----
Generated at Sat Feb 10 03:25:50 2024 by rpki-client on console-ams.rpki-client.org