Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
File: 875CF9B47DFC11EC8EAA65DA5A40D577.roa (raw, json)
Hash identifier: v0At8s5ULKa4XhvM2QLfk/oSl+mr4FCxelJHDeQ86eI=
Subject key identifier: 73:8A:10:CB:EB:41:C1:63:57:5F:88:7E:22:DD:00:63:F3:BF:08:79
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0544
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
Signing time: Tue 25 Jan 2022 16:33:30 +0000
ROA not before: Tue 25 Jan 2022 16:33:25 +0000
ROA not after: Wed 25 Jan 2023 16:33:25 +0000
asID: 327790
IP address blocks: 161.123.244.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:33:25 2022 GMT
Not After : Jan 25 16:33:25 2023 GMT
Subject: CN=61f0265a-c4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:a1:d5:fc:05:90:fe:67:a8:80:79:5c:10:
99:0d:a4:37:8e:2e:65:7a:6a:84:69:30:bf:70:b5:
a4:f7:0d:c4:14:07:e0:0a:39:85:77:b9:44:8e:85:
43:f0:99:33:63:fc:26:1e:3e:de:87:2f:f6:b4:bf:
21:79:7b:6b:42:3a:71:61:46:94:e7:f9:2f:47:12:
d8:99:dc:12:16:65:c4:9a:fa:5a:ac:db:bb:1b:9a:
af:4f:23:d5:a8:62:ac:cf:9d:f8:15:95:15:03:21:
e1:7f:68:cc:3e:96:2f:e1:ef:43:70:a9:9a:43:8d:
aa:c8:16:c0:73:f5:a8:a2:bd:69:c0:82:82:13:8d:
22:82:60:e6:37:ca:50:fd:e0:48:8a:81:23:4b:c6:
ac:49:4f:ba:5c:d1:03:47:88:fe:02:23:4c:65:ee:
12:21:be:8e:3b:19:63:88:c2:95:5f:e7:13:f1:a1:
c7:e1:b5:96:19:8a:a5:12:e2:2b:7b:88:11:ef:50:
ed:d9:c1:c3:3c:92:4e:63:96:f0:bb:57:09:29:99:
7b:07:87:9e:b0:ff:40:04:7d:ed:b3:e6:cc:86:b4:
72:34:56:17:23:f9:87:54:26:98:e2:7c:9f:58:c7:
03:6c:83:b3:d1:54:6c:70:51:b8:12:84:cf:d4:ec:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:10:CB:EB:41:C1:63:57:5F:88:7E:22:DD:00:63:F3:BF:08:79
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/875CF9B47DFC11EC8EAA65DA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.244.0/23
Signature Algorithm: sha256WithRSAEncryption
77:09:1b:a3:76:5f:f5:09:8b:f9:c9:cc:47:96:99:1e:ee:56:
1e:98:5e:0e:64:a3:84:2e:db:30:7e:58:d1:b2:b5:73:98:93:
e9:39:58:99:60:0b:d9:77:b6:19:91:37:fa:fd:b9:b6:46:aa:
d6:06:fb:b7:3f:50:a8:4a:d7:dc:2e:35:e9:da:22:8b:09:da:
71:e8:1b:2d:68:0a:d4:21:32:52:5c:e6:72:17:b6:ad:c3:4d:
c4:8a:09:fa:dc:37:c9:98:5a:0b:c5:e2:8b:cb:11:fb:42:9e:
92:00:35:db:9b:8c:a9:87:08:6c:b9:5e:f4:d6:88:8a:54:0d:
2e:d7:85:12:81:17:6b:5e:50:17:64:68:1d:4b:92:cc:15:b5:
f0:54:79:d3:d4:80:65:22:36:29:0d:32:b5:3f:f7:62:e1:20:
d6:a8:ab:c2:21:64:3a:27:75:fb:88:ba:f9:50:74:1f:77:9f:
9c:53:17:e9:38:4c:54:22:77:71:34:a5:b3:35:c4:6f:71:a2:
c9:16:47:59:e1:51:88:3f:a8:28:85:3e:90:89:b9:4a:99:3e:
cf:2e:9b:42:e7:c7:0f:7e:be:e6:43:2f:84:71:b2:89:d8:6f:
e1:6c:53:76:d7:d8:c4:83:04:7d:7a:bb:18:27:ef:dc:f8:b9:
10:51:85:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjMzMjVaFw0yMzAxMjUxNjMzMjVaMBgxFjAU
BgNVBAMMDTYxZjAyNjVhLWM0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIpaHV/AWQ/meogHlcEJkNpDeOLmV6aoRpML9wtaT3DcQUB+AKOYV3uUSO
hUPwmTNj/CYePt6HL/a0vyF5e2tCOnFhRpTn+S9HEtiZ3BIWZcSa+lqs27sbmq9P
I9WoYqzPnfgVlRUDIeF/aMw+li/h70NwqZpDjarIFsBz9aiivWnAgoITjSKCYOY3
ylD94EiKgSNLxqxJT7pc0QNHiP4CI0xl7hIhvo47GWOIwpVf5xPxocfhtZYZiqUS
4it7iBHvUO3ZwcM8kk5jlvC7VwkpmXsHh56w/0AEfe2z5syGtHI0Vhcj+YdUJpji
fJ9YxwNsg7PRVGxwUbgShM/U7PYnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUc4oQ
y+tBwWNXX4h+It0AY/O/CHkwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzg3NUNGOUI0N0RGQzExRUM4RUFBNjVEQTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe/QwDQYJKoZIhvcNAQELBQAD
ggEBAHcJG6N2X/UJi/nJzEeWmR7uVh6YXg5ko4Qu2zB+WNGytXOYk+k5WJlgC9l3
thmRN/r9ubZGqtYG+7c/UKhK19wuNenaIosJ2nHoGy1oCtQhMlJc5nIXtq3DTcSK
CfrcN8mYWgvF4ovLEftCnpIANdubjKmHCGy5XvTWiIpUDS7XhRKBF2teUBdkaB1L
kswVtfBUedPUgGUiNikNMrU/92LhINaoq8IhZDondfuIuvlQdB93n5xTF+k4TFQi
d3E0pbM1xG9xoskWR1nhUYg/qCiFPpCJuUqZPs8um0Lnxw9+vuZDL4RxsonYb+Fs
U3bX2MSDBH16uxgn79z4uRBRhbE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org