Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9B128F08327211EC83AFBD6AD8A014CE.roa
File: 9B128F08327211EC83AFBD6AD8A014CE.roa (raw, json)
Hash identifier: SWKm359I21MhvC+UTtguFTvnAV4voGTfgPCULmWQLnA=
Subject key identifier: 38:E7:EC:61:2F:7E:F3:7C:7E:62:81:6E:DE:B7:F9:A6:7C:1B:A4:52
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01DA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9B128F08327211EC83AFBD6AD8A014CE.roa
Signing time: Thu 21 Oct 2021 13:27:15 +0000
ROA not before: Thu 21 Oct 2021 13:27:12 +0000
ROA not after: Fri 21 Oct 2022 13:27:12 +0000
asID: 60458
IP address blocks: 161.123.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 21 13:27:12 2021 GMT
Not After : Oct 21 13:27:12 2022 GMT
Subject: CN=61716ab3-1dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:12:d8:5a:23:21:d0:84:6a:56:59:5a:9c:30:
5f:36:cb:a4:39:3e:3c:bc:64:5a:e7:79:8f:3b:56:
44:22:17:75:48:21:d1:4f:15:1f:bd:ec:03:f1:42:
d2:cc:e0:69:af:91:81:54:1c:52:dc:14:75:c3:43:
51:4a:08:61:88:18:1e:3d:b2:86:87:2c:42:62:4b:
b0:8d:90:90:5c:f3:15:f2:f7:f1:d8:62:6a:54:d1:
73:9e:3b:5d:68:1f:d6:6f:e0:fc:33:b3:d9:09:a0:
67:08:be:5e:ef:77:f3:8d:a3:f0:ab:1e:4d:91:f5:
ec:74:be:69:58:98:33:9d:48:7d:e6:3c:92:b2:c6:
c9:30:04:b1:60:99:a1:2b:cb:be:e3:e5:ba:87:40:
af:1a:27:7b:9e:ae:a5:34:8a:55:77:88:e8:23:e1:
07:0a:1f:51:fd:38:29:f4:03:9f:d6:08:50:0c:60:
f8:58:92:63:c3:8c:91:08:a8:1a:3d:de:0b:91:73:
e6:aa:14:75:8f:a1:e6:38:e8:64:f9:09:d2:47:27:
ec:53:76:a9:40:3e:47:d9:5f:18:36:e5:53:1e:2e:
0a:ec:f4:6a:d0:ad:a7:42:9b:bd:50:75:32:38:cc:
66:0f:86:f8:68:38:cf:36:2e:c9:37:f3:18:6d:eb:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:EC:61:2F:7E:F3:7C:7E:62:81:6E:DE:B7:F9:A6:7C:1B:A4:52
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9B128F08327211EC83AFBD6AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.165.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:bc:c9:67:37:48:16:b4:f3:ed:7e:8c:9b:90:0b:0c:2d:82:
3a:90:16:07:1e:80:42:fc:83:63:35:d8:b4:05:89:f6:25:6b:
59:76:01:f5:7f:82:3c:2b:a5:1a:46:c2:13:64:b6:2d:95:f4:
5d:f1:c8:49:f0:4c:a0:76:73:37:c6:a3:19:db:fb:40:6f:83:
85:c8:0d:6f:4d:3d:9e:f6:ee:a2:94:b5:32:9f:4b:a1:0a:14:
07:4c:61:99:93:c4:aa:5c:6f:86:6b:0a:c9:5f:54:b4:1b:36:
8f:d6:94:0c:f6:88:93:91:6f:db:26:75:53:87:1f:de:4a:9b:
e3:4d:bc:00:a9:ce:46:47:16:fe:dc:7e:85:06:0b:64:69:a2:
aa:8a:22:f1:79:c4:56:ac:c3:38:2b:eb:d8:8a:95:df:f2:f3:
6d:35:87:74:a4:fd:cb:6f:8e:fa:37:b4:e4:3e:85:d3:94:9e:
aa:0f:71:5b:7f:5d:55:c4:dc:9b:1c:9c:89:d2:e3:87:86:bb:
90:ae:1d:0a:34:b4:a5:72:d1:44:5b:5b:4f:6f:cd:26:d8:f3:
99:80:74:9a:27:fe:02:74:00:cc:a8:bb:53:ef:e4:72:90:21:
25:d5:32:98:15:5e:f6:f9:39:f9:ce:98:40:79:b0:36:ec:04:
3b:d9:0f:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAdowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTEwMjExMzI3MTJaFw0yMjEwMjExMzI3MTJaMBgxFjAU
BgNVBAMMDTYxNzE2YWIzLTFkYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhEthaIyHQhGpWWVqcMF82y6Q5Pjy8ZFrneY87VkQiF3VIIdFPFR+97APx
QtLM4GmvkYFUHFLcFHXDQ1FKCGGIGB49soaHLEJiS7CNkJBc8xXy9/HYYmpU0XOe
O11oH9Zv4Pwzs9kJoGcIvl7vd/ONo/CrHk2R9ex0vmlYmDOdSH3mPJKyxskwBLFg
maEry77j5bqHQK8aJ3uerqU0ilV3iOgj4QcKH1H9OCn0A5/WCFAMYPhYkmPDjJEI
qBo93guRc+aqFHWPoeY46GT5CdJHJ+xTdqlAPkfZXxg25VMeLgrs9GrQradCm71Q
dTI4zGYPhvhoOM82Lsk38xht6yTFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOOfs
YS9+83x+YoFu3rf5pnwbpFIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzlCMTI4RjA4MzI3MjExRUM4M0FGQkQ2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe6UwDQYJKoZIhvcNAQELBQAD
ggEBAKq8yWc3SBa08+1+jJuQCwwtgjqQFgcegEL8g2M12LQFifYla1l2AfV/gjwr
pRpGwhNkti2V9F3xyEnwTKB2czfGoxnb+0Bvg4XIDW9NPZ727qKUtTKfS6EKFAdM
YZmTxKpcb4ZrCslfVLQbNo/WlAz2iJORb9smdVOHH95Km+NNvACpzkZHFv7cfoUG
C2RpoqqKIvF5xFaswzgr69iKld/y8201h3Sk/ctvjvo3tOQ+hdOUnqoPcVt/XVXE
3JscnInS44eGu5CuHQo0tKVy0URbW09vzSbY85mAdJon/gJ0AMyou1Pv5HKQISXV
MpgVXvb5OfnOmEB5sDbsBDvZD9o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org