Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/969D1F72E5DE11EC802E6F9AF1222468.roa
File: 969D1F72E5DE11EC802E6F9AF1222468.roa (raw, json)
Hash identifier: DZd1U4mBBhf1X7r/sgmg/e60HRyF5aePn7vi6P3lh64=
Subject key identifier: 51:CE:06:68:25:33:65:AD:EA:CD:56:28:AA:F4:92:85:8B:0A:63:FF
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 070E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/969D1F72E5DE11EC802E6F9AF1222468.roa
Signing time: Mon 06 Jun 2022 21:21:11 +0000
ROA not before: Mon 06 Jun 2022 21:21:08 +0000
ROA not after: Tue 06 Jun 2023 21:21:08 +0000
asID: 203999
IP address blocks: 161.123.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:21:08 2022 GMT
Not After : Jun 6 21:21:08 2023 GMT
Subject: CN=629e6fc7-b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:ef:71:4e:d3:eb:3b:0e:f9:c5:3c:dd:0d:
be:9e:b0:45:af:79:6c:a6:dc:e2:44:0b:ce:e0:be:
41:42:44:66:e1:10:cc:91:3c:fd:04:b5:df:8b:7c:
8a:f0:91:80:bb:c3:e1:02:f2:3a:37:e1:1b:37:ed:
c8:a4:f5:54:e1:99:30:20:19:6c:43:59:05:1b:21:
3f:2a:81:56:37:36:24:15:31:e8:61:6a:fe:49:9f:
5b:16:be:b7:18:08:c4:f4:67:84:8b:e0:c2:7e:82:
53:09:9f:5a:2d:41:75:b7:41:d9:27:e6:48:27:a9:
06:db:7d:78:d7:1c:0e:1a:3a:07:d6:49:67:44:e1:
65:d3:1d:4b:c6:f9:4a:f6:5a:a1:55:4e:5d:86:c2:
57:32:60:25:21:bc:ed:26:cb:62:cd:9f:48:af:17:
73:b9:b2:28:90:1f:ab:14:66:46:d9:9f:c7:82:de:
b4:30:29:cc:6c:6a:68:ae:c2:12:b0:bf:b3:2d:9a:
ea:8a:a0:57:6c:09:1d:6f:1d:df:0a:57:d8:ee:fd:
b4:40:14:dd:ca:f9:e6:bd:fa:14:01:b3:77:02:9c:
f6:dd:46:da:41:5e:82:48:20:ca:45:17:17:63:c9:
4a:02:ac:42:c8:7d:35:d3:d0:1c:00:e5:02:fd:86:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:06:68:25:33:65:AD:EA:CD:56:28:AA:F4:92:85:8B:0A:63:FF
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/969D1F72E5DE11EC802E6F9AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c6:65:6f:03:b3:b6:bc:57:42:e4:a2:4e:e0:ba:50:c7:88:
42:6d:86:3d:d8:a7:75:96:14:8a:dc:e8:86:03:fd:aa:0b:85:
f1:18:0d:39:df:4c:29:81:a0:c7:37:3a:01:2a:cf:14:9e:ff:
9e:16:87:1a:7f:48:56:b4:3b:79:3c:dc:5e:57:b8:1d:a6:ea:
ae:33:d9:56:1e:da:fa:ed:8f:79:20:1d:68:17:75:b6:3f:c5:
d6:3d:39:25:3b:ad:e2:77:18:f5:b2:e4:80:fe:ef:b5:2d:f8:
25:d9:76:a9:c0:6e:f8:34:6a:2a:f9:bb:8e:b5:67:a5:2c:2b:
f8:66:f4:f1:57:7b:5d:14:05:5f:9e:16:86:42:ea:4e:ca:26:
89:36:cc:aa:89:90:7f:36:32:52:a7:f9:58:5b:77:d6:62:e6:
4b:73:f0:c0:69:a0:c1:ac:7d:10:e5:c2:4b:0a:09:28:6c:1c:
8a:45:b4:12:57:38:9d:5e:db:63:2e:92:d1:77:2a:4d:88:f1:
ac:1c:79:7c:f7:37:be:d7:85:5b:99:0c:c3:5a:4b:7a:84:75:
d3:84:dd:8a:88:3b:a5:f1:3e:ab:1b:6f:95:bf:48:7e:98:0c:
ce:56:57:30:a3:db:73:09:f9:48:b9:8c:1d:fa:7c:c3:cf:88:
7c:41:05:3b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MDYyMTIxMDhaFw0yMzA2MDYyMTIxMDhaMBgxFjAU
BgNVBAMMDTYyOWU2ZmM3LWI5NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiE+9xTtPrOw75xTzdDb6esEWveWym3OJEC87gvkFCRGbhEMyRPP0Etd+L
fIrwkYC7w+EC8jo34Rs37cik9VThmTAgGWxDWQUbIT8qgVY3NiQVMehhav5Jn1sW
vrcYCMT0Z4SL4MJ+glMJn1otQXW3Qdkn5kgnqQbbfXjXHA4aOgfWSWdE4WXTHUvG
+Ur2WqFVTl2GwlcyYCUhvO0my2LNn0ivF3O5siiQH6sUZkbZn8eC3rQwKcxsamiu
whKwv7MtmuqKoFdsCR1vHd8KV9ju/bRAFN3K+ea9+hQBs3cCnPbdRtpBXoJIIMpF
FxdjyUoCrELIfTXT0BwA5QL9hu57AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUc4G
aCUzZa3qzVYoqvSShYsKY/8wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzk2OUQxRjcyRTVERTExRUM4MDJFNkY5QUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexEwDQYJKoZIhvcNAQELBQAD
ggEBABvGZW8Ds7a8V0Lkok7gulDHiEJthj3Yp3WWFIrc6IYD/aoLhfEYDTnfTCmB
oMc3OgEqzxSe/54Whxp/SFa0O3k83F5XuB2m6q4z2VYe2vrtj3kgHWgXdbY/xdY9
OSU7reJ3GPWy5ID+77Ut+CXZdqnAbvg0air5u461Z6UsK/hm9PFXe10UBV+eFoZC
6k7KJok2zKqJkH82MlKn+Vhbd9Zi5ktz8MBpoMGsfRDlwksKCShsHIpFtBJXOJ1e
22MuktF3Kk2I8awceXz3N77XhVuZDMNaS3qEddOE3YqIO6XxPqsbb5W/SH6YDM5W
VzCj23MJ+Ui5jB36fMPPiHxBBTs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org