Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/03860AFA3D7C11EDA4C929A4F1222468.roa
File: 03860AFA3D7C11EDA4C929A4F1222468.roa (raw, json)
Hash identifier: UDR7AKzLE6L2BE8SmIwTW+HbIYqQ2HGZ4//kq6l/USY=
Subject key identifier: 1E:44:1A:E3:B1:7F:FE:9C:C9:E9:D6:66:58:0C:F3:EE:DB:DF:35:74
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0849
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/03860AFA3D7C11EDA4C929A4F1222468.roa
Signing time: Mon 26 Sep 2022 09:17:16 +0000
ROA not before: Mon 26 Sep 2022 09:17:13 +0000
ROA not after: Tue 26 Sep 2023 09:17:13 +0000
asID: 203999
IP address blocks: 161.123.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:17:13 2022 GMT
Not After : Sep 26 09:17:13 2023 GMT
Subject: CN=63316e1c-5b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:15:e7:38:f2:2e:eb:7d:0c:8f:bb:59:db:
3d:f2:d2:af:f8:14:0f:ab:f7:eb:f2:83:e1:bb:ef:
de:0f:c3:6d:3d:40:e6:cf:ae:91:1f:99:2c:5a:0d:
e5:98:4d:52:7f:77:74:fd:6a:97:19:b0:13:3f:7d:
3b:35:ee:c3:ec:ab:6a:89:f4:0a:a5:ca:21:8f:84:
76:5d:bc:66:10:24:fa:bb:71:0e:0a:c5:59:aa:0a:
e1:7d:04:94:64:63:ca:25:89:65:cd:80:65:2f:c6:
5b:04:4a:1b:9f:f2:33:d9:c0:25:8f:e5:24:40:c1:
d6:39:ca:c1:b0:e0:b0:0b:a8:b7:af:3d:73:6e:bb:
2e:ff:1f:5f:03:7b:e4:d3:7d:14:0a:85:31:7f:b0:
5e:f6:66:b6:ba:bf:ef:d7:4e:17:20:20:a4:ca:84:
3d:2e:23:d1:96:f2:78:80:3f:0a:ee:b4:f0:88:78:
68:38:7d:03:16:3a:6b:cb:5a:4a:46:33:20:cf:6f:
82:b8:0a:be:76:ca:52:d7:e0:e7:5e:f3:e8:0b:d7:
93:40:1b:49:2c:86:cd:a0:aa:f2:7c:da:13:0b:d6:
de:4f:9c:7e:4c:68:83:b9:60:18:70:0c:24:bd:29:
69:b6:2b:d8:07:79:04:1c:7d:9a:e0:b7:d2:74:af:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:1A:E3:B1:7F:FE:9C:C9:E9:D6:66:58:0C:F3:EE:DB:DF:35:74
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/03860AFA3D7C11EDA4C929A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.5.0/24
Signature Algorithm: sha256WithRSAEncryption
42:04:ef:6f:1a:51:27:ee:f3:a0:f8:0a:8a:ef:ae:49:a2:a9:
4d:3d:59:02:95:5d:69:4c:09:6e:64:90:21:0b:02:34:6f:ce:
f7:f2:e3:cf:49:83:18:c4:9a:8b:66:0a:48:4b:18:ac:43:0f:
34:fa:13:e1:51:c0:76:f1:eb:fd:d1:1d:f7:69:25:22:8a:92:
ed:d2:58:7b:31:eb:ee:72:20:f5:d4:92:a1:01:cb:a8:78:22:
2b:51:33:a4:72:27:c5:19:3c:26:4a:ba:94:d2:9e:85:6c:91:
5e:e5:4e:b1:b8:7a:a4:82:14:33:47:6c:e8:48:55:4b:43:08:
ce:d5:85:0c:78:7f:b3:0f:6c:f7:9f:e9:89:d2:6d:55:1c:fb:
83:34:0a:df:75:cd:d2:24:92:08:42:f4:ba:8b:5d:3a:d0:ac:
92:25:19:0c:05:b9:ae:90:a7:93:3b:2a:7a:1c:21:fc:07:a4:
55:de:51:a8:12:7f:3a:3a:93:ba:21:db:5b:e8:37:f1:8f:2d:
30:7d:46:fa:c3:a5:08:b7:98:b1:44:a4:5c:84:58:cb:5d:a1:
6b:d5:a5:dd:03:75:ef:3d:69:97:04:35:63:26:f9:ae:48:d2:
7f:83:30:02:2d:ac:1a:c4:2c:94:db:2c:20:ff:7c:4a:92:f1:
d4:09:22:c2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYwOTE3MTNaFw0yMzA5MjYwOTE3MTNaMBgxFjAU
BgNVBAMMDTYzMzE2ZTFjLTViOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9rxXnOPIu630Mj7tZ2z3y0q/4FA+r9+vyg+G7794Pw209QObPrpEfmSxa
DeWYTVJ/d3T9apcZsBM/fTs17sPsq2qJ9AqlyiGPhHZdvGYQJPq7cQ4KxVmqCuF9
BJRkY8oliWXNgGUvxlsEShuf8jPZwCWP5SRAwdY5ysGw4LALqLevPXNuuy7/H18D
e+TTfRQKhTF/sF72Zra6v+/XThcgIKTKhD0uI9GW8niAPwrutPCIeGg4fQMWOmvL
WkpGMyDPb4K4Cr52ylLX4Ode8+gL15NAG0kshs2gqvJ82hML1t5PnH5MaIO5YBhw
DCS9KWm2K9gHeQQcfZrgt9J0r2WhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUHkQa
47F//pzJ6dZmWAzz7tvfNXQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzAzODYwQUZBM0Q3QzExRURBNEM5MjlBNEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChewUwDQYJKoZIhvcNAQELBQAD
ggEBAEIE728aUSfu86D4CorvrkmiqU09WQKVXWlMCW5kkCELAjRvzvfy489JgxjE
motmCkhLGKxDDzT6E+FRwHbx6/3RHfdpJSKKku3SWHsx6+5yIPXUkqEBy6h4IitR
M6RyJ8UZPCZKupTSnoVskV7lTrG4eqSCFDNHbOhIVUtDCM7VhQx4f7MPbPef6YnS
bVUc+4M0Ct91zdIkkghC9LqLXTrQrJIlGQwFua6Qp5M7KnocIfwHpFXeUagSfzo6
k7oh21voN/GPLTB9RvrDpQi3mLFEpFyEWMtdoWvVpd0Dde89aZcENWMm+a5I0n+D
MAItrBrELJTbLCD/fEqS8dQJIsI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org