Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/1D203EB2529611ECB50E2B56D8A014CE.roa
File: 1D203EB2529611ECB50E2B56D8A014CE.roa (raw, json)
Hash identifier: egVsuNadFg7dMYrjvpsqNTzkZ+pSskCQIWzcWmGh8Rg=
Subject key identifier: 47:D5:4E:B2:4D:1F:C6:F2:5F:65:B3:41:FA:1C:64:E7:3B:B6:28:D9
Certificate issuer: /CN=F367F26DAR/serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
Certificate serial: 03CD
Authority key identifier: 15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
Authority info access: rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/1D203EB2529611ECB50E2B56D8A014CE.roa
Signing time: Wed 01 Dec 2021 11:02:03 +0000
ROA not before: Wed 01 Dec 2021 11:01:59 +0000
ROA not after: Fri 01 Dec 2023 11:01:59 +0000
asID: 328366
IP address blocks: 160.226.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DAR/serialNumber=153DC0115120E240A04AAB9AE04FAD647926B124
Validity
Not Before: Dec 1 11:01:59 2021 GMT
Not After : Dec 1 11:01:59 2023 GMT
Subject: CN=61a7562b-b04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:af:4b:52:38:b2:ec:80:d0:c8:f8:d8:7e:
1c:57:73:e3:db:a1:91:d4:eb:18:05:2c:3c:18:36:
d3:74:28:5d:6e:cf:dc:cc:ac:c0:96:54:d3:ab:7b:
40:9d:5d:cf:22:23:fa:30:80:03:2c:f5:04:ba:f6:
ca:80:ae:84:39:48:df:ec:f5:35:2b:72:45:0a:b8:
22:8c:91:1b:c0:ac:d2:60:33:e1:38:65:d2:a8:d0:
81:d9:cf:af:08:20:d1:b5:45:eb:ed:05:a6:b6:c2:
5b:2d:8f:8e:39:74:39:cf:c6:86:ae:0c:3c:1b:84:
5d:eb:70:ef:0d:fa:3d:6e:6f:7f:15:c7:04:23:cf:
f6:c7:d4:38:2e:c2:77:f0:ed:f8:3d:d6:43:22:2f:
87:a5:b3:7b:7f:ba:92:35:3e:99:8d:c8:1e:45:01:
34:f2:c5:00:6b:49:09:a5:38:3b:82:b1:2d:47:f4:
16:8e:e3:e9:d8:30:ad:21:46:09:a1:97:22:c1:61:
1f:e2:c4:94:a8:49:aa:5c:2b:3a:df:e7:54:83:2a:
04:75:6d:ba:4d:e3:cc:25:ad:df:0b:4c:25:2d:97:
72:40:85:fa:f9:bf:84:94:d4:17:38:1d:7d:b0:b9:
11:60:f3:5c:29:73:26:5d:e3:da:d3:02:df:66:97:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D5:4E:B2:4D:1F:C6:F2:5F:65:B3:41:FA:1C:64:E7:3B:B6:28:D9
X509v3 Authority Key Identifier:
keyid:15:3D:C0:11:51:20:E2:40:A0:4A:AB:9A:E0:4F:AD:64:79:26:B1:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/FT3AEVEg4kCgSqua4E-tZHkmsSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FT3AEVEg4kCgSqua4E-tZHkmsSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/5003E4B270B911E9996C873FF8AEA228/1D203EB2529611ECB50E2B56D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
97:dd:84:37:9e:d4:f4:f0:ed:04:41:19:87:30:b4:1a:69:1f:
49:33:3a:15:c2:a2:2d:31:33:a5:ba:c3:90:63:a9:b6:5e:47:
33:df:c5:23:61:ad:6a:60:fc:25:73:89:7a:2e:2f:c9:c2:7b:
f5:c2:62:50:b1:ef:34:fb:30:38:8c:fe:b9:0f:ad:d2:a3:65:
f7:c0:8c:5c:a9:ec:2b:fa:0b:c2:b6:a4:7e:42:7c:fb:d8:76:
fd:ca:5f:ef:8c:43:49:82:7e:7c:8c:b7:a7:84:4c:27:de:71:
c0:2a:7f:14:19:29:1f:3a:b6:3f:b8:58:3a:62:56:3a:b9:82:
77:9f:e9:ed:a6:54:7a:7b:f2:99:14:e6:89:4c:12:d0:af:b8:
22:82:2a:e2:8a:34:46:65:28:64:17:10:1a:66:b5:f9:90:4e:
b7:d6:0c:6d:45:3c:db:39:65:55:e4:cb:5b:6b:5a:10:08:85:
b6:47:43:ed:70:38:30:b4:61:f6:e9:b3:9b:ac:5b:aa:90:f5:
02:84:9e:04:46:a6:4a:0c:85:9a:17:27:45:e0:96:20:66:9b:
76:19:97:4d:9c:2a:e5:22:54:6a:c2:fd:53:2f:99:a7:2f:52:
16:3e:4d:c1:03:98:b0:22:a9:5b:b5:49:12:5c:3a:2c:2f:8e:
95:47:e4:fc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA80wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRBUjExMC8GA1UEBRMoMTUzREMwMTE1MTIwRTI0MEEwNEFBQjlBRTA0RkFE
NjQ3OTI2QjEyNDAeFw0yMTEyMDExMTAxNTlaFw0yMzEyMDExMTAxNTlaMBgxFjAU
BgNVBAMMDTYxYTc1NjJiLWIwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgRa9LUjiy7IDQyPjYfhxXc+PboZHU6xgFLDwYNtN0KF1uz9zMrMCWVNOr
e0CdXc8iI/owgAMs9QS69sqAroQ5SN/s9TUrckUKuCKMkRvArNJgM+E4ZdKo0IHZ
z68IING1RevtBaa2wlstj445dDnPxoauDDwbhF3rcO8N+j1ub38VxwQjz/bH1Dgu
wnfw7fg91kMiL4els3t/upI1PpmNyB5FATTyxQBrSQmlODuCsS1H9BaO4+nYMK0h
RgmhlyLBYR/ixJSoSapcKzrf51SDKgR1bbpN48wlrd8LTCUtl3JAhfr5v4SU1Bc4
HX2wuRFg81wpcyZd49rTAt9ml3svAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUR9VO
sk0fxvJfZbNB+hxk5zu2KNkwHwYDVR0jBBgwFoAUFT3AEVEg4kCgSqua4E+tZHkm
sSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzUwMDNFNEIyNzBCOTExRTk5OTZDODczRkY4QUVBMjI4L0ZUM0FF
VkVnNGtDZ1NxdWE0RS10WkhrbXNTUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ZUM0FFVkVnNGtDZ1NxdWE0RS10WkhrbXNTUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdGMjZELzUwMDNFNEIyNzBCOTExRTk5OTZDODczRkY4QUVB
MjI4LzFEMjAzRUIyNTI5NjExRUNCNTBFMkI1NkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASg4pAwDQYJKoZIhvcNAQELBQAD
ggEBAJfdhDee1PTw7QRBGYcwtBppH0kzOhXCoi0xM6W6w5BjqbZeRzPfxSNhrWpg
/CVziXouL8nCe/XCYlCx7zT7MDiM/rkPrdKjZffAjFyp7Cv6C8K2pH5CfPvYdv3K
X++MQ0mCfnyMt6eETCfeccAqfxQZKR86tj+4WDpiVjq5gnef6e2mVHp78pkU5olM
EtCvuCKCKuKKNEZlKGQXEBpmtfmQTrfWDG1FPNs5ZVXky1trWhAIhbZHQ+1wODC0
Yfbps5usW6qQ9QKEngRGpkoMhZoXJ0XgliBmm3YZl02cKuUiVGrC/VMvmacvUhY+
TcEDmLAiqVu1SRJcOiwvjpVH5Pw=
-----END CERTIFICATE-----
Generated at Sat Dec 2 01:22:08 2023 by rpki-client on console-ams.rpki-client.org