Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A0DA92A85BC11EC88A6489F5A40D577.roa
File: 8A0DA92A85BC11EC88A6489F5A40D577.roa (raw, json)
Hash identifier: BJNCQAKCtdavVCsXcCmyzaKL/BKEs1WK1g3nIxA3Qtk=
Subject key identifier: AC:C4:52:15:E4:FE:FE:75:B7:E3:3D:56:F7:65:34:61:0C:54:45:4F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0599
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A0DA92A85BC11EC88A6489F5A40D577.roa
Signing time: Fri 04 Feb 2022 13:15:36 +0000
ROA not before: Fri 04 Feb 2022 13:15:32 +0000
ROA not after: Fri 03 Feb 2023 13:15:32 +0000
asID: 58202
IP address blocks: 161.123.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:15:32 2022 GMT
Not After : Feb 3 13:15:32 2023 GMT
Subject: CN=61fd26f8-7f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:98:46:4e:8d:6a:52:95:47:24:f1:f9:b6:
28:f1:76:6a:bb:65:c0:65:39:1d:f2:1f:36:11:41:
c9:fd:27:58:f9:de:45:b6:70:a4:06:c0:96:9b:7c:
ee:5a:d7:d3:45:0d:ea:ca:ea:4d:c9:fc:78:6e:62:
06:db:7d:46:1a:28:45:27:d7:0d:fa:18:fa:24:b8:
10:a2:0e:93:0c:7c:5d:a3:5c:55:9e:6c:2c:7f:b1:
6d:03:8b:b0:4b:f3:b2:06:51:ac:aa:38:06:ab:e8:
5e:50:7e:1c:c8:fc:2b:44:d3:45:3d:25:08:40:1b:
28:aa:44:15:15:3a:b9:ea:a7:fd:30:d8:aa:df:77:
50:eb:55:d2:e7:eb:8d:34:14:7d:b2:ea:3c:4d:3a:
80:39:13:2f:3c:91:de:b3:d7:af:e6:4d:d5:5d:65:
2c:83:ee:37:81:bd:a6:9d:43:d2:7a:2e:d8:04:6c:
b4:1d:05:b0:79:8a:fb:54:90:56:67:6b:23:09:7f:
de:7f:a5:9d:5a:7d:00:9c:86:02:87:0a:03:b4:1a:
e3:64:bf:c9:eb:3b:b9:6c:0b:9a:5c:24:53:5c:91:
86:9a:eb:52:ff:c1:11:ed:80:a1:3e:6e:59:5a:a7:
20:53:04:1f:f3:b2:10:dd:43:7e:97:3b:98:ee:ff:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:52:15:E4:FE:FE:75:B7:E3:3D:56:F7:65:34:61:0C:54:45:4F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8A0DA92A85BC11EC88A6489F5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.155.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:97:b9:2b:49:54:58:68:8e:bf:f3:60:b6:9b:97:f6:84:6c:
7e:58:5b:77:fa:e4:71:a2:92:90:21:e4:26:50:6a:d5:ed:b0:
99:ae:26:be:52:cf:10:ee:ba:b5:dc:6e:f6:33:d7:5c:9d:57:
c8:c5:87:cc:04:fb:fb:71:7c:4f:58:e0:db:ff:f1:a4:7f:f6:
8b:19:25:57:b8:82:8f:41:38:3c:32:b7:e9:fc:1b:af:46:c5:
2e:28:b6:15:f1:c8:e8:be:de:b9:92:7e:fd:64:88:46:39:2c:
19:23:dc:0f:22:79:7c:ae:e5:c2:55:d7:1e:78:ed:8c:a3:00:
4c:b7:22:a3:21:e2:1e:43:05:78:8c:cd:b7:79:09:6c:06:f1:
f8:62:36:2a:d8:70:9c:70:43:f3:86:ef:32:78:15:12:28:ab:
ce:04:00:29:28:75:e3:84:62:15:91:c8:c9:f3:7c:ea:73:15:
8b:60:02:bd:cf:b7:90:cb:ce:30:39:9a:4f:73:46:58:8f:1c:
4a:e4:6c:f4:42:75:c0:55:f5:0a:c2:89:00:25:02:df:5a:6f:
e6:c2:b8:d2:67:67:19:a0:43:62:4f:e2:55:33:ce:cc:fe:16:
a1:f4:5d:5f:1a:69:22:c8:0c:a4:a5:69:1f:ee:f3:43:f2:ec:
ca:bc:68:d9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAyMDQxMzE1MzJaFw0yMzAyMDMxMzE1MzJaMBgxFjAU
BgNVBAMMDTYxZmQyNmY4LTdmNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtFZhGTo1qUpVHJPH5tijxdmq7ZcBlOR3yHzYRQcn9J1j53kW2cKQGwJab
fO5a19NFDerK6k3J/HhuYgbbfUYaKEUn1w36GPokuBCiDpMMfF2jXFWebCx/sW0D
i7BL87IGUayqOAar6F5QfhzI/CtE00U9JQhAGyiqRBUVOrnqp/0w2Krfd1DrVdLn
6400FH2y6jxNOoA5Ey88kd6z16/mTdVdZSyD7jeBvaadQ9J6LtgEbLQdBbB5ivtU
kFZnayMJf95/pZ1afQCchgKHCgO0GuNkv8nrO7lsC5pcJFNckYaa61L/wRHtgKE+
bllapyBTBB/zshDdQ36XO5ju/wkJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUrMRS
FeT+/nW34z1W92U0YQxURU8wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzhBMERBOTJBODVCQzExRUM4OEE2NDg5RjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe5swDQYJKoZIhvcNAQELBQAD
ggEBAL+XuStJVFhojr/zYLabl/aEbH5YW3f65HGikpAh5CZQatXtsJmuJr5SzxDu
urXcbvYz11ydV8jFh8wE+/txfE9Y4Nv/8aR/9osZJVe4go9BODwyt+n8G69GxS4o
thXxyOi+3rmSfv1kiEY5LBkj3A8ieXyu5cJV1x547YyjAEy3IqMh4h5DBXiMzbd5
CWwG8fhiNirYcJxwQ/OG7zJ4FRIoq84EACkodeOEYhWRyMnzfOpzFYtgAr3Pt5DL
zjA5mk9zRliPHErkbPRCdcBV9QrCiQAlAt9ab+bCuNJnZxmgQ2JP4lUzzsz+FqH0
XV8aaSLIDKSlaR/u80Py7Mq8aNk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org