Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A6AE4DE919811ED87FB00D7F1222468.roa
File: 9A6AE4DE919811ED87FB00D7F1222468.roa (raw, json)
Hash identifier: aaVZ1k0NLsZwO579lHyXxoL9sdj07h7QPK6k2G35cII=
Subject key identifier: 82:6F:D0:A4:DF:56:72:CD:AD:D1:92:DB:27:E7:31:A4:C5:91:CB:F7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0952
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A6AE4DE919811ED87FB00D7F1222468.roa
Signing time: Wed 11 Jan 2023 10:13:33 +0000
ROA not before: Wed 11 Jan 2023 10:13:29 +0000
ROA not after: Thu 11 Jan 2024 10:13:29 +0000
asID: 133499
IP address blocks: 161.123.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:13:29 2023 GMT
Not After : Jan 11 10:13:29 2024 GMT
Subject: CN=63be8bcd-ce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:c8:04:9c:af:84:19:52:6c:18:92:5a:52:
44:be:06:5f:91:cf:19:6f:58:7c:97:d9:6f:45:fe:
e3:63:53:45:38:3a:1a:68:8b:89:35:1d:ae:ec:96:
db:54:3f:4c:98:c1:cc:43:b1:8e:3a:d8:51:01:5b:
ef:a7:b4:05:0e:69:6f:a8:fe:2c:8a:ac:8f:97:22:
db:79:c2:e0:6b:11:c3:ed:8e:86:2b:f1:48:00:23:
75:4a:bb:25:36:15:3f:67:9c:02:e6:d9:0a:87:38:
98:03:21:30:79:68:e0:d3:0f:a2:f8:a6:93:a5:20:
a5:1e:81:89:ba:d1:ea:db:0b:07:bc:0d:9f:f6:d1:
21:26:21:83:4c:a2:c0:b8:75:0c:ec:45:a8:68:31:
e7:30:d3:e5:6e:9f:86:d4:0e:65:41:82:5e:2e:43:
07:71:e3:ab:f2:25:a5:03:1c:b3:7a:59:d1:06:d8:
5a:88:50:37:58:dc:a3:52:ac:ca:08:81:5e:43:8d:
61:16:93:d9:cb:8b:85:01:ea:45:7b:84:b5:05:eb:
a9:4f:e2:c2:25:99:35:18:9b:76:eb:ea:21:67:b0:
26:e6:e3:22:82:ab:70:d6:b0:e2:fa:7a:f6:c0:dc:
3d:52:79:80:df:10:67:1e:5f:8d:1b:52:00:c3:34:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:D0:A4:DF:56:72:CD:AD:D1:92:DB:27:E7:31:A4:C5:91:CB:F7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A6AE4DE919811ED87FB00D7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.212.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8d:19:41:60:29:9c:8c:6d:e1:2e:4f:f2:5a:21:f3:78:52:
a5:75:16:c0:1a:28:79:35:cf:e9:ae:ac:3d:6f:67:a6:ea:e7:
30:80:69:35:a9:50:85:2a:84:db:41:f6:75:6a:50:3e:30:87:
f4:01:c1:0f:e4:5f:16:32:c6:2f:e5:e8:ce:14:a3:a2:33:4d:
dd:4e:57:c6:fe:b4:cc:c9:bf:b7:d5:bb:cc:45:4f:4f:04:d3:
80:e3:ba:49:02:1d:15:95:fd:fe:b8:57:83:ea:51:56:a2:b5:
73:bd:96:a7:9f:ad:83:f0:af:cb:f7:16:cf:c2:39:eb:e1:4c:
49:6f:44:77:60:0c:3d:da:0c:6f:0a:39:8a:3c:c7:04:c9:90:
bd:98:d5:2a:a8:c2:35:78:42:c9:ff:2e:3f:7b:a9:54:a6:04:
27:00:79:eb:fb:89:4c:0e:e1:ce:01:e8:0b:99:b3:0d:dd:38:
67:ed:11:4d:c7:c8:f9:ed:57:fb:95:6c:dc:df:4d:c1:cc:fc:
a6:a5:a6:6b:1c:42:29:b9:04:05:c1:84:fc:0a:cf:25:27:47:
d0:58:e5:38:44:9b:50:5b:15:37:e7:7f:e5:69:33:29:51:cc:
76:c9:c7:57:c6:40:5f:d9:4f:94:2f:6a:12:c3:a4:51:28:e3:
c1:85:29:27
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAxMTExMDEzMjlaFw0yNDAxMTExMDEzMjlaMBgxFjAU
BgNVBAMMDTYzYmU4YmNkLWNlMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0mMgEnK+EGVJsGJJaUkS+Bl+RzxlvWHyX2W9F/uNjU0U4Ohpoi4k1Ha7s
lttUP0yYwcxDsY462FEBW++ntAUOaW+o/iyKrI+XItt5wuBrEcPtjoYr8UgAI3VK
uyU2FT9nnALm2QqHOJgDITB5aODTD6L4ppOlIKUegYm60erbCwe8DZ/20SEmIYNM
osC4dQzsRahoMecw0+Vun4bUDmVBgl4uQwdx46vyJaUDHLN6WdEG2FqIUDdY3KNS
rMoIgV5DjWEWk9nLi4UB6kV7hLUF66lP4sIlmTUYm3br6iFnsCbm4yKCq3DWsOL6
evbA3D1SeYDfEGceX40bUgDDNMjXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUgm/Q
pN9Wcs2t0ZLbJ+cxpMWRy/cwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzlBNkFFNERFOTE5ODExRUQ4N0ZCMDBEN0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe9QwDQYJKoZIhvcNAQELBQAD
ggEBAGWNGUFgKZyMbeEuT/JaIfN4UqV1FsAaKHk1z+murD1vZ6bq5zCAaTWpUIUq
hNtB9nVqUD4wh/QBwQ/kXxYyxi/l6M4Uo6IzTd1OV8b+tMzJv7fVu8xFT08E04Dj
ukkCHRWV/f64V4PqUVaitXO9lqefrYPwr8v3Fs/COevhTElvRHdgDD3aDG8KOYo8
xwTJkL2Y1SqowjV4Qsn/Lj97qVSmBCcAeev7iUwO4c4B6AuZsw3dOGftEU3HyPnt
V/uVbNzfTcHM/KalpmscQim5BAXBhPwKzyUnR9BY5ThEm1BbFTfnf+VpMylRzHbJ
x1fGQF/ZT5QvahLDpFEo48GFKSc=
-----END CERTIFICATE-----
Generated at Fri Jan 12 02:59:22 2024 by rpki-client on console-ams.rpki-client.org