Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
File: 68DB295ACF1011ED87F14AF6F1222468.roa (raw, json)
Hash identifier: ubzuzHDwBAJ6EqgBak/slUV6X+5UVr508JwMuxoi+KQ=
Subject key identifier: 52:31:C9:37:69:FA:17:12:F1:04:53:75:B7:25:D0:5B:3A:71:53:B9
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A5C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
Signing time: Thu 30 Mar 2023 15:34:50 +0000
ROA not before: Thu 30 Mar 2023 15:34:47 +0000
ROA not after: Sat 30 Mar 2024 15:34:47 +0000
asID: 204765
IP address blocks: 161.123.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 15:34:47 2023 GMT
Not After : Mar 30 15:34:47 2024 GMT
Subject: CN=6425ac1a-af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:81:2b:1a:4d:6e:42:b5:c4:2a:32:cd:06:
b9:45:c2:4e:55:f1:64:ed:f6:5b:9a:fc:5c:1b:fa:
db:5a:99:17:57:45:b5:b2:4f:ae:32:9c:08:b2:49:
3f:6e:b9:72:3a:6e:9b:13:e2:35:b4:27:e3:35:94:
30:6d:57:9e:c6:37:7e:de:a8:ef:29:df:20:47:90:
96:2e:4a:83:7c:47:8f:07:fa:d5:f8:cb:28:80:32:
e0:86:3e:d9:6a:54:1e:93:3b:6c:83:cd:fe:e5:50:
dd:2d:9b:56:72:b0:47:d4:27:ef:b8:4b:e5:76:bd:
84:5b:ea:c4:4c:ff:cb:6d:c6:6a:48:4f:db:18:03:
28:19:0d:fd:c2:3b:e6:80:bd:d0:06:38:a5:70:a8:
2c:98:32:95:95:75:af:8d:06:7d:b5:9b:c8:5f:ee:
1b:12:f0:3a:56:90:94:77:83:56:42:0f:42:61:ae:
0d:02:db:99:ea:cb:66:59:a8:09:63:cd:c4:e3:25:
90:54:a2:b8:06:29:33:bd:51:c5:d7:fb:1d:b5:21:
b7:e8:63:bb:17:5b:78:0f:58:4a:45:fa:8a:75:1a:
1d:8e:f7:f1:08:58:6f:de:52:2c:d3:9c:ef:ac:cb:
22:a8:3e:fd:d9:ac:9d:d3:cf:6f:cc:3c:ca:1f:d7:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:C9:37:69:FA:17:12:F1:04:53:75:B7:25:D0:5B:3A:71:53:B9
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/68DB295ACF1011ED87F14AF6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4b:06:76:f9:32:9a:b4:d1:5f:87:f2:13:2b:5c:61:61:88:
8f:39:51:3a:62:31:2b:be:df:ce:fb:fa:9a:44:75:66:04:69:
fe:1f:ee:25:f3:e8:5e:28:70:de:2c:4d:55:48:9e:e3:7e:50:
8a:b8:3c:c1:a6:32:a7:14:c7:ee:b8:a9:48:66:ad:d4:ad:2f:
b1:b1:e8:c6:05:c6:36:c7:b6:ea:f6:63:35:41:56:d9:2d:61:
8e:4c:f5:ae:ba:2c:f8:f5:b6:88:95:72:06:bd:17:2c:51:53:
e1:94:06:39:23:8a:f8:05:d7:5c:4d:d8:72:50:e0:a0:98:df:
7f:2c:01:89:9d:85:d6:50:b0:78:0e:2e:19:67:5c:b9:6b:13:
4c:20:af:91:4d:98:94:5b:a3:ba:42:d3:7a:ad:99:a4:f7:10:
63:0f:da:2f:46:8e:1b:84:3d:8c:27:6b:2a:1e:d5:34:38:17:
72:fc:0f:23:1f:15:00:8b:56:00:e4:94:ca:43:5a:1d:57:0a:
f4:67:5b:f3:ff:6d:2a:c4:61:fb:e1:3d:03:ca:1b:45:4f:8c:
d1:d5:83:b5:91:6f:73:ff:2d:6c:51:ac:44:a5:62:e8:db:2b:
de:13:a3:bb:d2:59:e4:d4:89:29:cc:4a:67:b4:cb:ff:61:67:
3e:d9:ed:14
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICClwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzAzMzAxNTM0NDdaFw0yNDAzMzAxNTM0NDdaMBgxFjAU
BgNVBAMMDTY0MjVhYzFhLWFmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDphoErGk1uQrXEKjLNBrlFwk5V8WTt9lua/Fwb+ttamRdXRbWyT64ynAiy
ST9uuXI6bpsT4jW0J+M1lDBtV57GN37eqO8p3yBHkJYuSoN8R48H+tX4yyiAMuCG
PtlqVB6TO2yDzf7lUN0tm1ZysEfUJ++4S+V2vYRb6sRM/8ttxmpIT9sYAygZDf3C
O+aAvdAGOKVwqCyYMpWVda+NBn21m8hf7hsS8DpWkJR3g1ZCD0Jhrg0C25nqy2ZZ
qAljzcTjJZBUorgGKTO9UcXX+x21IbfoY7sXW3gPWEpF+op1Gh2O9/EIWG/eUizT
nO+syyKoPv3ZrJ3Tz2/MPMof16dxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUjHJ
N2n6FxLxBFN1tyXQWzpxU7kwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzY4REIyOTVBQ0YxMDExRUQ4N0YxNEFGNkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe2YwDQYJKoZIhvcNAQELBQAD
ggEBAHVLBnb5Mpq00V+H8hMrXGFhiI85UTpiMSu+3877+ppEdWYEaf4f7iXz6F4o
cN4sTVVInuN+UIq4PMGmMqcUx+64qUhmrdStL7Gx6MYFxjbHtur2YzVBVtktYY5M
9a66LPj1toiVcga9FyxRU+GUBjkjivgF11xN2HJQ4KCY338sAYmdhdZQsHgOLhln
XLlrE0wgr5FNmJRbo7pC03qtmaT3EGMP2i9GjhuEPYwnayoe1TQ4F3L8DyMfFQCL
VgDklMpDWh1XCvRnW/P/bSrEYfvhPQPKG0VPjNHVg7WRb3P/LWxRrESlYujbK94T
o7vSWeTUiSnMSme0y/9hZz7Z7RQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org