Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1CBB5BD8426911EC875E2410D8A014CE.roa
File: 1CBB5BD8426911EC875E2410D8A014CE.roa (raw, json)
Hash identifier: dH6iaTrwiUwEC2Sb2HNgQsPUvxcmfeuNFIkTUg5pOJk=
Subject key identifier: A0:C6:64:11:A7:8E:CC:95:CA:E1:38:17:B9:DB:DD:4D:DC:85:2E:E9
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0248
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1CBB5BD8426911EC875E2410D8A014CE.roa
Signing time: Wed 10 Nov 2021 20:59:37 +0000
ROA not before: Wed 10 Nov 2021 20:59:31 +0000
ROA not after: Thu 10 Nov 2022 20:59:31 +0000
asID: 327790
IP address blocks: 161.123.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 10 20:59:31 2021 GMT
Not After : Nov 10 20:59:31 2022 GMT
Subject: CN=618c32b9-ecc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:6c:b8:02:ed:2a:50:6b:08:d2:ec:82:33:
8d:4b:8f:75:b3:97:ed:d1:0a:2d:d6:d7:9f:48:ac:
7b:54:95:dd:3b:53:ee:26:14:22:7b:31:ff:fc:20:
ba:66:b8:e5:06:4a:55:6f:71:78:d5:4d:c7:f3:75:
c8:6c:af:eb:5d:10:59:5a:64:41:ae:de:69:f9:ad:
c5:25:92:49:a6:ec:cc:50:e1:01:d1:6e:ce:5a:fa:
19:22:7f:2c:a2:67:01:9f:b4:64:27:6d:ba:6d:04:
10:07:c2:6a:de:10:bb:36:4d:07:7b:a1:d2:b2:6c:
50:d0:45:6c:44:da:d6:ee:bf:61:11:e4:4a:7d:ad:
42:9d:15:4d:47:1c:d5:f6:57:24:45:e9:38:ab:b1:
43:3c:ec:39:f9:df:58:30:6d:e4:0e:a6:97:90:9b:
a4:69:64:cd:a7:d3:3c:6c:08:07:4d:38:ab:2f:c5:
c9:cb:7d:69:c6:7b:22:76:da:2c:69:d5:1f:f1:83:
7d:f3:fd:8a:d2:df:aa:04:c4:4d:f3:36:8a:57:0f:
16:e4:5d:7a:e4:d0:b4:ba:e1:10:c8:2a:98:5b:cb:
b9:a1:c3:27:07:5c:5d:5c:10:9f:e2:96:5d:9b:1f:
9e:ac:90:29:60:b6:20:a9:56:69:6b:29:78:32:39:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:64:11:A7:8E:CC:95:CA:E1:38:17:B9:DB:DD:4D:DC:85:2E:E9
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1CBB5BD8426911EC875E2410D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/19
Signature Algorithm: sha256WithRSAEncryption
36:cc:47:4d:eb:55:28:35:8b:3b:e0:22:18:ae:f8:2b:32:78:
39:08:28:6a:4d:22:49:04:e7:c1:7a:48:02:09:be:cd:83:3b:
8b:8b:48:84:66:2b:2d:0d:90:f7:f5:55:34:73:79:30:4d:44:
b2:e6:0e:c7:b5:c3:9e:46:d1:ef:09:88:5e:78:74:c6:9d:bb:
89:9f:8f:b2:a6:95:fe:d6:10:0a:a4:22:12:6f:05:56:ce:4e:
dc:62:3f:35:2c:fb:4c:f6:98:f2:31:7f:9c:a4:81:e7:45:86:
2a:91:95:20:63:ba:ef:05:10:43:18:25:6b:29:91:7e:ae:4e:
2f:06:b3:d7:06:ec:a7:68:3d:f9:28:6d:a0:f7:c7:a1:0d:10:
4a:10:46:39:d6:20:79:80:c9:5b:92:2d:d6:83:2f:0b:4b:65:
f1:e5:6f:b3:d5:2c:8c:e6:65:78:64:ab:3e:82:57:2e:aa:4b:
58:ee:ca:8b:54:cc:de:5a:a8:c3:7b:05:de:7e:e2:4b:09:d9:
7b:ad:24:13:b9:34:93:13:15:4c:e7:cd:f0:f5:7a:71:78:2a:
6b:a1:89:d9:a4:f0:cc:23:41:1c:85:9f:a2:53:c1:6a:48:bb:
08:ab:77:cf:0d:3f:aa:db:2e:fd:54:6a:f7:95:9e:54:02:6c:
e5:5c:30:28
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTExMTAyMDU5MzFaFw0yMjExMTAyMDU5MzFaMBgxFjAU
BgNVBAMMDTYxOGMzMmI5LWVjYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUGmy4Au0qUGsI0uyCM41Lj3Wzl+3RCi3W159IrHtUld07U+4mFCJ7Mf/8
ILpmuOUGSlVvcXjVTcfzdchsr+tdEFlaZEGu3mn5rcUlkkmm7MxQ4QHRbs5a+hki
fyyiZwGftGQnbbptBBAHwmreELs2TQd7odKybFDQRWxE2tbuv2ER5Ep9rUKdFU1H
HNX2VyRF6TirsUM87Dn531gwbeQOppeQm6RpZM2n0zxsCAdNOKsvxcnLfWnGeyJ2
2ixp1R/xg33z/YrS36oExE3zNopXDxbkXXrk0LS64RDIKphby7mhwycHXF1cEJ/i
ll2bH56skClgtiCpVmlrKXgyOdbjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoMZk
EaeOzJXK4TgXudvdTdyFLukwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzFDQkI1QkQ4NDI2OTExRUM4NzVFMjQxMEQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWhe8AwDQYJKoZIhvcNAQELBQAD
ggEBADbMR03rVSg1izvgIhiu+CsyeDkIKGpNIkkE58F6SAIJvs2DO4uLSIRmKy0N
kPf1VTRzeTBNRLLmDse1w55G0e8JiF54dMadu4mfj7Kmlf7WEAqkIhJvBVbOTtxi
PzUs+0z2mPIxf5ykgedFhiqRlSBjuu8FEEMYJWspkX6uTi8Gs9cG7KdoPfkobaD3
x6ENEEoQRjnWIHmAyVuSLdaDLwtLZfHlb7PVLIzmZXhkqz6CVy6qS1juyotUzN5a
qMN7Bd5+4ksJ2XutJBO5NJMTFUznzfD1enF4Kmuhidmk8MwjQRyFn6JTwWpIuwir
d88NP6rbLv1UaveVnlQCbOVcMCg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org