Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
File: 7A50D1041FE611EEAD9B54564AD9E6FC.roa (raw, json)
Hash identifier: L5ERZJKo4CrH+fBI4l72dn45H0rcn9VXGQuh12uIr+4=
Subject key identifier: 2A:77:6F:5B:2E:5F:78:88:2C:F9:44:71:B5:B6:64:04:9C:76:4A:D6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B51
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:28:45 +0000
ROA not before: Tue 11 Jul 2023 12:28:42 +0000
ROA not after: Thu 11 Jul 2024 12:28:42 +0000
asID: 133499
IP address blocks: 161.123.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:28:42 2023 GMT
Not After : Jul 11 12:28:42 2024 GMT
Subject: CN=64ad4afd-17d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:fe:02:66:dd:8a:a8:76:9a:f6:2f:bb:17:
f8:71:4d:29:4f:97:99:d0:49:f1:06:95:12:d9:89:
1d:3b:15:49:80:1b:ea:f8:75:da:5a:b4:13:f7:4a:
bf:dd:71:a0:b4:db:bf:a0:01:99:42:71:0e:3c:b3:
3c:f0:02:aa:fa:50:43:78:e2:1a:eb:01:c9:f1:97:
38:52:1e:e1:11:62:42:4d:7b:ed:31:42:2a:af:e4:
4a:3c:05:a3:68:af:22:d1:8c:17:38:70:b9:60:22:
d8:f8:a3:39:a2:2f:42:ae:ed:f1:d2:15:70:c7:aa:
25:61:53:b5:a3:26:41:0e:4e:16:aa:0a:c9:f4:37:
b0:3b:e0:e3:5d:97:0c:2e:df:4f:63:79:d9:c5:84:
00:10:86:79:4d:e8:0e:5b:1e:c5:6b:7e:6b:92:80:
40:88:1d:b5:62:61:f4:46:9f:db:1c:2f:b9:ac:c9:
72:75:7a:53:a0:50:42:2d:07:e3:ee:59:fd:62:8f:
c5:31:c4:8e:6b:b6:f8:cf:b8:48:1a:13:63:1d:48:
7f:13:09:64:b1:05:aa:bb:81:ff:01:b0:d2:14:7b:
f2:c9:36:f5:83:5d:43:e9:5a:9d:e8:2f:cf:00:dd:
fe:cd:44:d3:05:6c:f7:99:bc:4b:05:a0:80:d3:e4:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:6F:5B:2E:5F:78:88:2C:F9:44:71:B5:B6:64:04:9C:76:4A:D6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:78:96:5d:55:c8:20:9e:6f:13:36:83:66:aa:b3:20:bc:c9:
70:77:60:e9:30:6f:d1:1f:8f:c3:7c:49:58:fe:62:06:63:d4:
1a:45:1c:5d:a4:9e:65:79:2e:e2:f5:d1:53:d9:7b:6c:5d:c4:
23:69:20:00:b4:94:47:c7:97:3e:d8:00:e5:e8:95:b4:8e:e2:
80:a4:58:55:3e:cf:b0:99:83:3d:95:84:f5:ab:09:58:6c:b4:
78:8c:7b:4a:7f:75:32:23:e7:96:d3:e8:38:9c:d0:5a:b9:52:
22:40:3c:6d:5d:e1:e0:28:60:72:79:0c:44:84:56:58:59:52:
4c:cd:66:1f:e0:d7:19:93:c8:5c:3e:76:f0:b9:e8:7e:85:1a:
c5:bf:4d:4f:62:2d:a4:93:0a:06:59:62:20:60:90:e1:12:ef:
e2:82:ee:56:72:ef:86:2e:c7:88:a6:dd:b3:9a:02:c6:ef:1d:
6e:39:55:09:e5:87:65:00:7f:68:41:af:5e:48:b7:3b:44:30:
25:bc:ab:f8:90:fd:23:ae:79:36:ba:1c:ce:4a:a3:97:7f:f8:
89:2c:1a:3d:c3:94:d6:e8:07:6c:16:ab:41:23:64:56:21:b8:
3a:25:b6:1c:c5:cf:dc:03:3f:30:5b:68:d6:12:66:83:10:6f:
8b:43:26:05
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA3MTExMjI4NDJaFw0yNDA3MTExMjI4NDJaMBgxFjAU
BgNVBAMTDTY0YWQ0YWZkLTE3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeQP4CZt2KqHaa9i+7F/hxTSlPl5nQSfEGlRLZiR07FUmAG+r4ddpatBP3
Sr/dcaC027+gAZlCcQ48szzwAqr6UEN44hrrAcnxlzhSHuERYkJNe+0xQiqv5Eo8
BaNoryLRjBc4cLlgItj4ozmiL0Ku7fHSFXDHqiVhU7WjJkEOThaqCsn0N7A74ONd
lwwu309jednFhAAQhnlN6A5bHsVrfmuSgECIHbViYfRGn9scL7msyXJ1elOgUEIt
B+PuWf1ij8UxxI5rtvjPuEgaE2MdSH8TCWSxBaq7gf8BsNIUe/LJNvWDXUPpWp3o
L88A3f7NRNMFbPeZvEsFoIDT5Mb3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKndv
Wy5feIgs+URxtbZkBJx2StYwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzdBNTBEMTA0MUZFNjExRUVBRDlCNTQ1NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe90wDQYJKoZIhvcNAQELBQAD
ggEBALV4ll1VyCCebxM2g2aqsyC8yXB3YOkwb9Efj8N8SVj+YgZj1BpFHF2knmV5
LuL10VPZe2xdxCNpIAC0lEfHlz7YAOXolbSO4oCkWFU+z7CZgz2VhPWrCVhstHiM
e0p/dTIj55bT6Dic0Fq5UiJAPG1d4eAoYHJ5DESEVlhZUkzNZh/g1xmTyFw+dvC5
6H6FGsW/TU9iLaSTCgZZYiBgkOES7+KC7lZy74Yux4im3bOaAsbvHW45VQnlh2UA
f2hBr15ItztEMCW8q/iQ/SOueTa6HM5Ko5d/+IksGj3DlNboB2wWq0EjZFYhuDol
thzFz9wDPzBbaNYSZoMQb4tDJgU=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org