Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20F171C23D8311EDAE54F3B6F1222468.roa
File: 20F171C23D8311EDAE54F3B6F1222468.roa (raw, json)
Hash identifier: L57xKKpnMbiNnxFZWPI6txM//fXFiJpTXwtZIjMasfQ=
Subject key identifier: A4:A7:AE:AC:9D:C2:0F:8B:58:FE:A1:CE:30:F6:FB:57:E3:C7:7C:72
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0897
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20F171C23D8311EDAE54F3B6F1222468.roa
Signing time: Mon 26 Sep 2022 10:08:12 +0000
ROA not before: Mon 26 Sep 2022 10:08:09 +0000
ROA not after: Tue 26 Sep 2023 10:08:09 +0000
asID: 203999
IP address blocks: 161.123.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199 (0x897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:08:09 2022 GMT
Not After : Sep 26 10:08:09 2023 GMT
Subject: CN=63317a0c-6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:05:d3:ca:a4:46:84:0f:af:37:23:63:66:
78:95:5e:6c:d5:41:8a:b1:7c:67:16:b7:f2:59:7d:
7e:9f:50:03:5d:18:cc:7f:2e:1d:41:69:d1:71:e7:
77:a9:ae:4c:96:41:9e:6c:72:b4:71:20:3f:89:27:
c3:bf:00:de:a9:e4:26:15:a0:58:4d:b5:26:7f:90:
92:17:60:6b:ce:a4:4c:b4:5f:84:fe:0a:05:f1:b6:
c1:ba:e6:51:90:76:e6:72:0f:f8:5f:d7:73:48:a6:
a3:73:76:60:c1:74:1a:91:8e:68:4a:ca:b1:82:61:
24:a2:29:51:95:33:af:09:a3:f3:4b:b3:d5:de:f5:
8e:ad:a4:58:cd:72:2f:ef:4b:6c:24:8b:30:66:bd:
e4:5f:08:e2:d6:30:2d:33:7a:0a:ad:23:69:a9:93:
ad:6c:af:92:83:d9:64:c8:07:10:23:72:d2:4d:42:
90:d3:b4:2d:41:42:5e:ac:86:6b:ed:84:c1:99:34:
93:d9:0b:e1:80:4b:89:13:72:5e:0e:7e:7c:54:4e:
41:ed:82:a3:e0:9d:62:59:b6:56:8a:53:c4:b5:08:
fb:98:80:67:7c:2e:e4:64:eb:f1:5d:b5:16:d5:8d:
d7:40:b9:0c:34:a7:e7:0a:b2:d6:61:ff:ae:9b:c8:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:AE:AC:9D:C2:0F:8B:58:FE:A1:CE:30:F6:FB:57:E3:C7:7C:72
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/20F171C23D8311EDAE54F3B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:a7:c0:02:82:c0:bf:f8:6d:56:fd:44:ea:2e:ad:e8:b1:f0:
5c:2f:4a:98:9c:97:c6:7d:66:be:b3:af:f3:a9:7f:c0:18:88:
c1:de:a2:4d:9f:42:c1:fc:c7:08:b0:05:1b:8e:93:6f:4d:c5:
6f:5f:26:cb:ad:28:8c:a2:71:c9:a9:f2:02:14:36:6f:5e:78:
c4:5a:be:94:55:87:6b:4e:af:40:37:09:25:04:ba:44:8a:3a:
40:80:9f:f8:0d:0d:8b:58:b3:72:45:fa:5a:16:55:b2:8e:6a:
4a:a9:96:4d:d8:9b:b1:69:97:27:5d:13:c3:26:ce:4f:33:1a:
d9:69:bd:8d:9f:8c:b1:b5:88:eb:65:2a:31:5f:08:ee:4c:50:
2e:bd:11:b9:82:28:b2:18:63:44:e8:6a:56:ee:c6:b1:8f:8d:
f9:54:6c:e3:81:21:ec:63:d4:e3:c4:8f:31:dd:a3:dd:b8:b7:
04:ac:f7:e3:49:9e:88:62:f3:7f:8b:3a:b4:bb:d4:4b:7f:9e:
85:ed:66:0a:e5:90:c2:f8:63:72:75:74:03:6f:4f:74:e0:a2:
b6:0d:06:56:dd:2f:b8:9f:e5:3f:b5:91:9e:8f:05:b9:87:f6:
e2:27:7b:9a:cc:3f:e8:5d:b7:66:4d:82:28:c3:05:78:6c:56:
a1:61:4a:15
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYxMDA4MDlaFw0yMzA5MjYxMDA4MDlaMBgxFjAU
BgNVBAMMDTYzMzE3YTBjLTZjNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ5AXTyqRGhA+vNyNjZniVXmzVQYqxfGcWt/JZfX6fUANdGMx/Lh1BadFx
53eprkyWQZ5scrRxID+JJ8O/AN6p5CYVoFhNtSZ/kJIXYGvOpEy0X4T+CgXxtsG6
5lGQduZyD/hf13NIpqNzdmDBdBqRjmhKyrGCYSSiKVGVM68Jo/NLs9Xe9Y6tpFjN
ci/vS2wkizBmveRfCOLWMC0zegqtI2mpk61sr5KD2WTIBxAjctJNQpDTtC1BQl6s
hmvthMGZNJPZC+GAS4kTcl4OfnxUTkHtgqPgnWJZtlaKU8S1CPuYgGd8LuRk6/Fd
tRbVjddAuQw0p+cKstZh/66byBFBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUpKeu
rJ3CD4tY/qHOMPb7V+PHfHIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzIwRjE3MUMyM0Q4MzExRURBRTU0RjNCNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe9owDQYJKoZIhvcNAQELBQAD
ggEBALGnwAKCwL/4bVb9ROoureix8FwvSpicl8Z9Zr6zr/Opf8AYiMHeok2fQsH8
xwiwBRuOk29NxW9fJsutKIyiccmp8gIUNm9eeMRavpRVh2tOr0A3CSUEukSKOkCA
n/gNDYtYs3JF+loWVbKOakqplk3Ym7FplyddE8Mmzk8zGtlpvY2fjLG1iOtlKjFf
CO5MUC69EbmCKLIYY0ToalbuxrGPjflUbOOBIexj1OPEjzHdo924twSs9+NJnohi
83+LOrS71Et/noXtZgrlkML4Y3J1dANvT3TgorYNBlbdL7if5T+1kZ6PBbmH9uIn
e5rMP+hdt2ZNgijDBXhsVqFhShU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org