Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A55756EBBE111EC8F60BFAC5A40D577.roa
File: 9A55756EBBE111EC8F60BFAC5A40D577.roa (raw, json)
Hash identifier: uQSxcKatLB0zF8ZC1HYy9S7shRJ+6dXxuA6O2co5D9k=
Subject key identifier: D4:4A:BF:7A:F3:E3:48:C0:E4:9D:D7:15:29:EF:B2:21:0E:86:E3:0A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 066D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A55756EBBE111EC8F60BFAC5A40D577.roa
Signing time: Thu 14 Apr 2022 10:56:57 +0000
ROA not before: Thu 14 Apr 2022 10:56:54 +0000
ROA not after: Fri 14 Apr 2023 10:56:54 +0000
asID: 400377
IP address blocks: 161.123.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 14 10:56:54 2022 GMT
Not After : Apr 14 10:56:54 2023 GMT
Subject: CN=6257fdf9-642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:bd:d1:b6:5a:ad:db:54:03:88:5d:2d:0c:
5a:bf:da:f4:f6:ed:6a:82:c6:25:39:17:a3:80:73:
5f:19:fc:03:4e:72:92:18:da:cb:9d:29:92:1c:49:
6e:e9:cc:18:a1:d7:00:64:bf:8a:04:94:68:e4:7c:
df:85:72:c4:e8:68:44:dd:b6:b0:ba:68:81:af:a0:
82:28:3c:64:ef:aa:75:eb:2f:0a:8a:e3:4f:ab:66:
f5:05:37:33:65:67:19:f3:72:0f:16:95:36:18:9d:
97:39:ec:bd:b3:39:6b:05:c9:51:17:67:0c:d6:15:
b5:e1:81:7d:9f:78:dc:9b:3f:b5:34:75:4f:f1:cc:
12:b8:50:99:ef:16:63:f5:d1:ad:32:8f:30:18:fd:
67:51:b9:25:64:55:1c:7b:84:87:f8:3e:81:f7:f9:
36:81:89:60:50:c3:8d:fe:39:65:9f:d2:58:8e:94:
1c:6a:eb:92:b9:52:3d:4b:be:c6:d3:ee:2a:f1:be:
d4:fb:cb:34:90:62:61:38:ef:cf:e7:21:a4:8b:b9:
b2:8d:62:42:3e:d8:b7:4a:3d:19:5f:a3:91:fb:0a:
dd:1d:75:3c:7d:24:0c:5a:62:6f:99:dd:9c:62:e3:
68:f2:09:20:19:bd:20:80:34:92:8e:a9:b5:93:c4:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:BF:7A:F3:E3:48:C0:E4:9D:D7:15:29:EF:B2:21:0E:86:E3:0A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A55756EBBE111EC8F60BFAC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:14:6f:ea:6c:24:c6:78:a6:ae:1d:f3:b6:64:3d:4b:6b:29:
27:18:06:36:2c:4a:60:dc:61:7f:30:a1:95:3d:ce:00:a2:b1:
c3:1a:de:d2:c0:93:12:ac:f1:ee:98:7b:6e:a7:00:0e:c6:5d:
c5:74:dd:0e:fb:99:83:03:e5:9a:2a:ff:9a:19:23:6a:2e:97:
02:f4:b6:87:9f:74:ee:5d:3f:d0:79:25:49:b1:10:ae:fc:45:
7f:c9:da:0d:0d:7c:2e:8e:55:08:cb:96:cb:9b:f6:35:6a:27:
46:f9:59:ad:9c:b8:c8:76:79:d5:52:1e:92:00:44:97:0d:70:
c9:b6:2e:04:d4:ff:e3:8e:ec:5f:c8:21:15:c6:49:15:cc:c2:
6e:d1:b6:9c:0b:d2:3a:37:3b:be:6f:c6:17:1c:92:db:1d:ae:
92:bb:cb:9f:a2:87:ed:0e:3d:5c:0d:82:bd:41:45:ba:19:b7:
c0:2e:57:4e:55:26:d7:18:aa:1f:74:d4:28:41:d1:ef:4e:13:
07:59:69:5b:c4:5d:0e:c0:bb:68:eb:6d:a3:14:44:3d:ec:c0:
a9:45:a4:3e:23:57:b8:03:a4:c3:9f:b5:ca:d8:62:24:f1:a9:
d6:be:bf:52:46:6d:44:89:86:67:05:55:23:c1:84:63:ef:55:
f7:30:09:4e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA0MTQxMDU2NTRaFw0yMzA0MTQxMDU2NTRaMBgxFjAU
BgNVBAMMDTYyNTdmZGY5LTY0MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIJL3Rtlqt21QDiF0tDFq/2vT27WqCxiU5F6OAc18Z/ANOcpIY2sudKZIc
SW7pzBih1wBkv4oElGjkfN+FcsToaETdtrC6aIGvoIIoPGTvqnXrLwqK40+rZvUF
NzNlZxnzcg8WlTYYnZc57L2zOWsFyVEXZwzWFbXhgX2feNybP7U0dU/xzBK4UJnv
FmP10a0yjzAY/WdRuSVkVRx7hIf4PoH3+TaBiWBQw43+OWWf0liOlBxq65K5Uj1L
vsbT7irxvtT7yzSQYmE478/nIaSLubKNYkI+2LdKPRlfo5H7Ct0ddTx9JAxaYm+Z
3Zxi42jyCSAZvSCANJKOqbWTxG85AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1Eq/
evPjSMDkndcVKe+yIQ6G4wowHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzlBNTU3NTZFQkJFMTExRUM4RjYwQkZBQzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe/cwDQYJKoZIhvcNAQELBQAD
ggEBAKQUb+psJMZ4pq4d87ZkPUtrKScYBjYsSmDcYX8woZU9zgCiscMa3tLAkxKs
8e6Ye26nAA7GXcV03Q77mYMD5Zoq/5oZI2oulwL0toefdO5dP9B5JUmxEK78RX/J
2g0NfC6OVQjLlsub9jVqJ0b5Wa2cuMh2edVSHpIARJcNcMm2LgTU/+OO7F/IIRXG
SRXMwm7RtpwL0jo3O75vxhccktsdrpK7y5+ih+0OPVwNgr1BRboZt8AuV05VJtcY
qh901ChB0e9OEwdZaVvEXQ7Au2jrbaMURD3swKlFpD4jV7gDpMOftcrYYiTxqda+
v1JGbUSJhmcFVSPBhGPvVfcwCU4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org