Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E5E7056A8B911ED853F12E3F1222468.roa
File: 8E5E7056A8B911ED853F12E3F1222468.roa (raw, json)
Hash identifier: Brdj8n8LI6JTTE5AqhLwCinZtyDeEPOlpMMdlyfcejg=
Subject key identifier: 09:AE:6F:97:04:BA:CD:AD:B1:5B:BA:DB:9A:8A:AA:A4:8D:56:39:2F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09AE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E5E7056A8B911ED853F12E3F1222468.roa
Signing time: Thu 09 Feb 2023 20:37:23 +0000
ROA not before: Thu 09 Feb 2023 20:37:19 +0000
ROA not after: Fri 09 Feb 2024 20:37:19 +0000
asID: 207990
IP address blocks: 161.123.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:37:19 2023 GMT
Not After : Feb 9 20:37:19 2024 GMT
Subject: CN=63e55983-1c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:24:ee:19:14:6c:65:e1:6f:c8:f1:e3:54:
19:cf:40:cc:cd:05:fb:72:40:cb:cd:d9:38:58:23:
b7:d7:4d:b3:1b:67:04:25:a5:a8:0a:ff:dc:92:55:
98:94:45:9a:6b:c9:dd:70:8a:32:ab:d2:7a:a9:a7:
72:ec:5a:97:d4:ca:c0:fc:8e:81:f8:e3:f6:5e:62:
d2:d4:91:82:1a:af:26:5c:5b:2f:e3:c0:f7:8d:21:
38:45:57:2d:f1:8c:9f:61:95:63:ee:c7:c2:de:2f:
6b:29:c7:ae:bf:80:25:9c:c8:52:a8:10:ab:1b:2b:
5e:e7:8b:e1:98:0b:00:7e:2b:46:53:1e:ec:77:08:
a6:13:d1:f2:84:de:0b:34:61:e0:e9:c0:dc:ee:84:
66:39:dc:90:3a:44:d1:50:81:67:fd:1e:ed:5e:ea:
81:ff:74:38:de:58:80:71:e8:55:c2:b5:ff:b3:0a:
6e:bf:32:15:59:bc:27:b0:8f:eb:94:29:61:f9:b5:
2d:15:a3:c4:ac:52:bd:c3:6a:cf:e8:92:80:7b:44:
bd:b3:52:68:88:8a:8b:fc:76:88:28:6b:bb:a9:4d:
0a:db:eb:11:e4:2e:1f:57:a3:85:0f:f6:21:3d:04:
a0:2a:d8:7a:54:4e:27:27:d8:ac:fa:17:f2:6f:d9:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:6F:97:04:BA:CD:AD:B1:5B:BA:DB:9A:8A:AA:A4:8D:56:39:2F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8E5E7056A8B911ED853F12E3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.30.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8b:e3:4e:e8:b7:1c:28:c4:a2:44:6a:e1:e7:70:66:3e:6b:
dd:88:5e:7e:df:9b:35:e8:8a:1a:42:3f:ca:cb:36:f7:78:60:
bc:7e:9b:16:71:db:8f:90:f1:20:95:a6:be:de:55:66:88:46:
f5:72:7c:7b:6d:6c:e9:93:f6:d2:37:fe:3b:d6:6d:bb:a1:ef:
a3:fd:02:76:11:d9:30:33:0b:89:fa:23:f6:3e:53:66:d2:95:
37:0e:9e:dd:f4:62:81:08:7c:05:f8:dc:1e:9f:3a:38:57:30:
f6:a7:82:de:8d:f8:ef:1e:44:9d:f4:75:ea:81:d0:0e:cf:30:
a7:13:d8:30:d7:73:e0:79:89:e9:29:cc:4b:e1:04:25:7e:6f:
90:2c:64:db:ca:f2:d3:2d:c9:df:56:83:1e:80:79:b8:32:29:
51:f2:82:23:2f:b1:7c:5b:bd:d4:3a:1f:43:33:a1:d8:39:3f:
74:54:67:7b:9e:12:83:22:40:79:97:6f:45:5e:49:2b:84:b9:
0c:98:35:f4:06:d1:38:5d:a3:43:60:00:7c:2d:a4:4c:dd:4a:
50:7f:ee:d9:ec:0a:37:aa:e7:08:92:ea:e6:71:f7:df:cf:39:
a5:f3:7a:60:9b:dd:35:83:10:e5:f3:63:9e:be:cf:eb:a6:65:
43:ef:60:94
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAyMDkyMDM3MTlaFw0yNDAyMDkyMDM3MTlaMBgxFjAU
BgNVBAMMDTYzZTU1OTgzLTFjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYZCTuGRRsZeFvyPHjVBnPQMzNBftyQMvN2ThYI7fXTbMbZwQlpagK/9yS
VZiURZpryd1wijKr0nqpp3LsWpfUysD8joH44/ZeYtLUkYIaryZcWy/jwPeNIThF
Vy3xjJ9hlWPux8LeL2spx66/gCWcyFKoEKsbK17ni+GYCwB+K0ZTHux3CKYT0fKE
3gs0YeDpwNzuhGY53JA6RNFQgWf9Hu1e6oH/dDjeWIBx6FXCtf+zCm6/MhVZvCew
j+uUKWH5tS0Vo8SsUr3Das/okoB7RL2zUmiIiov8dogoa7upTQrb6xHkLh9Xo4UP
9iE9BKAq2HpUTicn2Kz6F/Jv2QpBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCa5v
lwS6za2xW7rbmoqqpI1WOS8wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzhFNUU3MDU2QThCOTExRUQ4NTNGMTJFM0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChex4wDQYJKoZIhvcNAQELBQAD
ggEBACWL407otxwoxKJEauHncGY+a92IXn7fmzXoihpCP8rLNvd4YLx+mxZx24+Q
8SCVpr7eVWaIRvVyfHttbOmT9tI3/jvWbbuh76P9AnYR2TAzC4n6I/Y+U2bSlTcO
nt30YoEIfAX43B6fOjhXMPangt6N+O8eRJ30deqB0A7PMKcT2DDXc+B5iekpzEvh
BCV+b5AsZNvK8tMtyd9Wgx6AebgyKVHygiMvsXxbvdQ6H0Mzodg5P3RUZ3ueEoMi
QHmXb0VeSSuEuQyYNfQG0Thdo0NgAHwtpEzdSlB/7tnsCjeq5wiS6uZx99/POaXz
emCb3TWDEOXzY56+z+umZUPvYJQ=
-----END CERTIFICATE-----
Generated at Sat Feb 10 03:25:50 2024 by rpki-client on console-ams.rpki-client.org