Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
File: 6F6876DC7DFA11ECAAF235D45A40D577.roa (raw, json)
Hash identifier: T2FNCCQGszsGkiCeRE+Vt8KBRbIVECHBZ1lI9D3DmAw=
Subject key identifier: 4D:C9:C9:08:9D:17:9D:DC:05:16:23:7B:54:75:38:FD:C6:FF:C7:EC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0520
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
Signing time: Tue 25 Jan 2022 16:18:31 +0000
ROA not before: Tue 25 Jan 2022 16:18:27 +0000
ROA not after: Wed 25 Jan 2023 16:18:27 +0000
asID: 327790
IP address blocks: 161.123.68.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:18:27 2022 GMT
Not After : Jan 25 16:18:27 2023 GMT
Subject: CN=61f022d7-3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:52:63:dd:d8:37:e4:51:aa:fa:eb:b8:fe:
8f:58:a8:5c:2f:39:7b:ad:aa:8d:5c:a4:e6:19:20:
63:69:fc:25:d8:3b:14:1c:67:d6:38:bf:fa:f4:aa:
b3:f3:45:9a:d0:fa:18:42:ce:5a:c1:15:1d:fa:9e:
bf:31:74:30:a8:ad:bf:2c:1a:fe:95:b2:05:30:0f:
61:40:bd:ed:a1:71:97:41:6d:98:07:8b:1f:73:79:
8d:da:1c:32:f3:1b:8e:d6:a1:b4:98:1f:c7:27:fe:
01:80:34:ab:c1:a9:45:07:1d:ec:e7:8b:a4:78:d8:
f5:97:09:17:fa:ad:55:73:61:97:ca:eb:8b:67:7a:
7b:c0:33:08:64:70:da:08:02:57:50:e8:b4:3d:53:
69:43:e7:1b:6f:b6:87:3f:b7:8c:49:2d:8f:a8:e0:
0f:d9:92:3c:8b:60:76:36:f2:fe:91:de:b9:0d:5e:
0b:f4:74:ba:14:30:e6:ce:07:b7:cf:59:6c:71:92:
1f:24:f1:2c:c3:90:4c:8a:ac:bb:8c:e5:2e:de:f2:
6e:8f:7d:68:a6:80:03:97:d8:25:ce:b4:ca:94:ff:
14:4d:85:45:c2:a4:0a:c1:cb:48:1a:1e:82:35:9a:
a5:f3:ee:30:c8:bc:44:61:5f:2a:5e:7e:3a:84:3e:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:C9:08:9D:17:9D:DC:05:16:23:7B:54:75:38:FD:C6:FF:C7:EC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6F6876DC7DFA11ECAAF235D45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.68.0/23
Signature Algorithm: sha256WithRSAEncryption
25:b2:bb:1a:af:dd:ca:b9:49:f0:50:49:11:1f:54:58:6a:30:
fd:52:eb:5f:41:15:f1:b9:90:4b:5b:43:46:82:4c:cb:0c:cc:
4c:b8:4e:4a:e9:f8:6e:61:fa:86:8d:89:87:fa:02:fb:0a:59:
64:8a:8b:15:72:ce:e7:92:54:6d:58:12:57:5b:ca:5b:6f:09:
73:63:ad:bd:44:c6:86:9c:80:b6:65:b2:70:2c:62:25:3d:3d:
13:15:ce:61:81:bd:51:49:f2:6c:68:fb:a6:35:87:06:9b:d4:
1f:d4:1b:10:46:03:44:d4:d3:a4:2f:8e:d8:0a:25:11:90:a3:
ab:41:82:6b:05:cc:b7:88:2b:76:ad:bd:ee:89:1c:3e:d7:4c:
72:12:a1:2f:0c:fe:c7:24:5f:04:81:71:27:2b:0e:f0:86:d6:
d9:8a:15:95:99:cb:ed:5e:45:5d:bf:70:fe:30:bc:29:92:d9:
d2:ac:92:95:55:d4:fa:80:de:33:8c:82:3a:62:47:70:e6:64:
a0:35:2b:12:a4:5e:af:08:11:f8:6c:fd:48:e4:d0:cd:47:7e:
03:19:a2:9e:28:fe:47:7a:cc:13:dd:f1:64:1d:a1:d9:2a:f4:
fe:97:6a:3a:1a:69:9e:1c:68:33:45:00:fa:42:bb:a7:d9:ce:
72:69:e0:36
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjE4MjdaFw0yMzAxMjUxNjE4MjdaMBgxFjAU
BgNVBAMMDTYxZjAyMmQ3LTM2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRUVJj3dg35FGq+uu4/o9YqFwvOXutqo1cpOYZIGNp/CXYOxQcZ9Y4v/r0
qrPzRZrQ+hhCzlrBFR36nr8xdDCorb8sGv6VsgUwD2FAve2hcZdBbZgHix9zeY3a
HDLzG47WobSYH8cn/gGANKvBqUUHHezni6R42PWXCRf6rVVzYZfK64tnenvAMwhk
cNoIAldQ6LQ9U2lD5xtvtoc/t4xJLY+o4A/ZkjyLYHY28v6R3rkNXgv0dLoUMObO
B7fPWWxxkh8k8SzDkEyKrLuM5S7e8m6PfWimgAOX2CXOtMqU/xRNhUXCpArBy0ga
HoI1mqXz7jDIvERhXypefjqEPlzRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTcnJ
CJ0XndwFFiN7VHU4/cb/x+wwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzZGNjg3NkRDN0RGQTExRUNBQUYyMzVENDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe0QwDQYJKoZIhvcNAQELBQAD
ggEBACWyuxqv3cq5SfBQSREfVFhqMP1S619BFfG5kEtbQ0aCTMsMzEy4Tkrp+G5h
+oaNiYf6AvsKWWSKixVyzueSVG1YEldbyltvCXNjrb1ExoacgLZlsnAsYiU9PRMV
zmGBvVFJ8mxo+6Y1hwab1B/UGxBGA0TU06QvjtgKJRGQo6tBgmsFzLeIK3atve6J
HD7XTHISoS8M/sckXwSBcScrDvCG1tmKFZWZy+1eRV2/cP4wvCmS2dKskpVV1PqA
3jOMgjpiR3DmZKA1KxKkXq8IEfhs/Ujk0M1HfgMZop4o/kd6zBPd8WQdodkq9P6X
ajoaaZ4caDNFAPpCu6fZznJp4DY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org