Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F85F3088C30F11ED8D85287EF1222468.roa
File: F85F3088C30F11ED8D85287EF1222468.roa (raw, json)
Hash identifier: dcSyr86Qc/60pmQEh+4I2aYGMk9b+9yUBza13JsxdYE=
Subject key identifier: 25:7A:8F:8F:A0:99:4B:9D:72:3E:0F:63:7F:41:A4:78:56:FC:8A:0A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A0B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F85F3088C30F11ED8D85287EF1222468.roa
Signing time: Wed 15 Mar 2023 09:01:28 +0000
ROA not before: Wed 15 Mar 2023 09:01:24 +0000
ROA not after: Fri 15 Mar 2024 09:01:24 +0000
asID: 207990
IP address blocks: 161.123.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 09:01:24 2023 GMT
Not After : Mar 15 09:01:24 2024 GMT
Subject: CN=64118968-72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:c5:72:10:87:2e:d0:c1:11:c9:f2:c3:c4:
b7:6f:9a:a3:a7:c8:c1:13:96:9b:ad:c0:fb:14:b1:
da:b4:1a:05:e0:27:54:68:37:3f:a2:d5:50:74:1d:
dc:e6:3b:cb:b1:f6:c4:ef:2d:bf:bf:75:7e:4b:66:
1d:70:af:77:e0:84:71:05:86:5f:a8:c6:ba:e9:66:
af:31:3c:98:80:0d:e0:0e:ef:22:78:2f:96:43:e7:
c5:91:86:a5:20:8e:e9:17:b8:2c:03:7d:54:11:9d:
ef:45:00:b5:54:f4:00:3d:8f:27:a3:08:c1:7f:4a:
d6:d4:54:55:87:39:9e:33:54:77:52:c2:b2:78:d5:
2d:49:98:05:93:2c:8a:eb:93:31:a4:3d:72:4c:fd:
21:bc:f6:43:06:3d:cf:7e:4b:30:df:0a:8c:51:3a:
e8:ce:65:e6:d9:d8:52:65:2a:5f:a4:aa:44:b4:9d:
47:33:c5:33:3a:50:85:ee:a1:da:a7:54:f3:7b:ec:
7c:a5:ba:71:c4:15:15:ea:94:06:ea:a0:ec:ec:d7:
62:26:eb:3b:76:41:dc:c0:6f:b3:e1:ea:da:22:15:
0e:db:c2:b2:61:40:93:5b:62:57:41:e2:13:c0:9a:
52:af:47:9f:c4:93:be:05:f6:59:67:1d:c7:5a:a7:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:8F:8F:A0:99:4B:9D:72:3E:0F:63:7F:41:A4:78:56:FC:8A:0A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F85F3088C30F11ED8D85287EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:14:8f:1a:2f:e5:d9:67:9c:be:0b:59:a1:32:5c:8e:ca:54:
38:c7:98:fc:33:26:d5:aa:90:8f:c3:98:be:7f:94:77:85:c7:
b5:6c:4a:c8:9d:80:05:3c:2f:51:79:bd:69:9d:1f:00:0a:7a:
b4:f3:42:68:90:70:a9:da:26:1a:9e:db:af:76:4f:c8:2f:72:
d7:6e:4f:c1:d8:49:6d:14:e7:82:c8:db:12:ea:53:31:4f:29:
db:e5:75:51:e0:14:d2:ad:46:69:73:36:f1:40:34:37:78:91:
34:f2:6f:48:93:a4:6c:32:bd:d9:7f:2b:52:d4:25:cd:a2:5c:
3e:2e:f5:21:c4:1f:7a:00:f4:13:79:a2:22:6d:b5:1c:46:c5:
f9:eb:77:7b:fc:6e:ac:fd:5d:4d:71:a0:33:33:6d:6e:f4:9d:
18:4b:5b:b6:98:20:20:43:b7:04:63:31:d1:4f:fe:73:70:b0:
47:86:ab:3a:a6:ee:af:da:1d:ae:89:34:24:59:d2:84:20:03:
53:a3:36:01:b8:eb:37:7b:fe:12:3e:5b:31:a9:7b:5c:f4:8f:
8f:fc:88:99:5b:22:b7:f0:c8:71:d9:2d:e4:65:de:e1:f5:41:
f8:d6:fe:04:ef:92:df:98:80:83:0f:44:b1:01:62:18:5c:78:
a4:34:15:6c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCgswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAzMTUwOTAxMjRaFw0yNDAzMTUwOTAxMjRaMBgxFjAU
BgNVBAMMDTY0MTE4OTY4LTcyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdZsVyEIcu0MERyfLDxLdvmqOnyMETlputwPsUsdq0GgXgJ1RoNz+i1VB0
HdzmO8ux9sTvLb+/dX5LZh1wr3fghHEFhl+oxrrpZq8xPJiADeAO7yJ4L5ZD58WR
hqUgjukXuCwDfVQRne9FALVU9AA9jyejCMF/StbUVFWHOZ4zVHdSwrJ41S1JmAWT
LIrrkzGkPXJM/SG89kMGPc9+SzDfCoxROujOZebZ2FJlKl+kqkS0nUczxTM6UIXu
odqnVPN77HylunHEFRXqlAbqoOzs12Im6zt2QdzAb7Ph6toiFQ7bwrJhQJNbYldB
4hPAmlKvR5/Ek74F9llnHcdapwoHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJXqP
j6CZS51yPg9jf0GkeFb8igowHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0Y4NUYzMDg4QzMwRjExRUQ4RDg1Mjg3RUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe5wwDQYJKoZIhvcNAQELBQAD
ggEBAHwUjxov5dlnnL4LWaEyXI7KVDjHmPwzJtWqkI/DmL5/lHeFx7VsSsidgAU8
L1F5vWmdHwAKerTzQmiQcKnaJhqe2692T8gvctduT8HYSW0U54LI2xLqUzFPKdvl
dVHgFNKtRmlzNvFANDd4kTTyb0iTpGwyvdl/K1LUJc2iXD4u9SHEH3oA9BN5oiJt
tRxGxfnrd3v8bqz9XU1xoDMzbW70nRhLW7aYICBDtwRjMdFP/nNwsEeGqzqm7q/a
Ha6JNCRZ0oQgA1OjNgG46zd7/hI+WzGpe1z0j4/8iJlbIrfwyHHZLeRl3uH1QfjW
/gTvkt+YgIMPRLEBYhhceKQ0FWw=
-----END CERTIFICATE-----
Generated at Sat Mar 16 03:09:16 2024 by rpki-client on console-fra.rpki-client.org