Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
File: 89F3741E1EAC11EC8CA75D59D8A014CE.roa (raw, json)
Hash identifier: Msl8/9s14h0YVkKXMHXenttD0m/906LcSO4I8mXhECM=
Subject key identifier: F0:57:07:31:2C:9B:52:67:A6:E5:2B:FF:91:00:C4:86:3B:E3:D7:81
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01A4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
Signing time: Sun 26 Sep 2021 09:31:34 +0000
ROA not before: Sun 26 Sep 2021 09:31:30 +0000
ROA not after: Mon 26 Sep 2022 09:31:30 +0000
asID: 327790
IP address blocks: 161.123.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:31:30 2021 GMT
Not After : Sep 26 09:31:30 2022 GMT
Subject: CN=61503df6-121e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:68:fd:38:3b:56:fe:80:d8:f7:36:c8:c5:
54:de:81:66:74:de:a4:69:05:72:6b:a3:3a:48:0d:
34:5a:f7:fd:99:da:39:f1:17:88:a2:42:43:49:cf:
63:55:da:8b:74:0a:d4:25:61:2d:35:c7:45:d6:31:
fb:77:61:da:43:7a:3e:fb:f2:56:2d:90:9b:0e:f5:
6f:bc:58:4a:d8:6e:1c:ff:4f:b8:ba:84:fa:ef:ee:
5b:41:33:f0:fa:30:31:fb:96:97:39:40:2d:e7:25:
d5:86:0d:58:93:c5:08:05:05:18:fd:e9:86:8a:62:
0d:3f:13:61:cb:c4:b6:e0:79:cb:53:e0:3e:5f:74:
f1:09:ed:a9:f7:52:38:1f:52:73:bb:7d:83:95:48:
7c:f2:d0:50:40:d0:c5:0c:9d:81:5c:6a:e3:43:40:
21:1c:eb:a5:1a:51:21:3b:12:12:e3:4d:c3:b3:0f:
0b:a5:fb:8b:c7:89:b3:e5:2e:60:a7:62:4b:8c:a7:
b5:bc:9a:69:d9:77:a9:51:c8:02:49:dd:6f:ca:34:
d0:dc:2f:e8:fd:3f:78:2d:2b:a7:0b:1f:33:bf:24:
69:3a:fd:60:4c:f0:f8:82:b2:4b:13:bc:dc:a3:b1:
90:a0:a6:90:9d:35:b1:7f:90:99:b2:25:48:88:f9:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:07:31:2C:9B:52:67:A6:E5:2B:FF:91:00:C4:86:3B:E3:D7:81
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/89F3741E1EAC11EC8CA75D59D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:bb:cb:f0:b1:50:c3:ce:0b:c6:c8:5d:44:6d:4f:a7:f1:b9:
c5:67:65:54:e2:7e:ad:bb:cc:52:e9:45:ef:22:03:a0:55:1b:
33:9a:53:11:69:c0:ba:07:4f:b7:7e:fa:14:3a:b7:cd:1e:7c:
b9:09:fe:c5:28:c9:18:e4:e4:a2:f9:94:27:92:e8:ee:a8:ad:
72:f5:11:82:da:94:f1:c6:51:d3:24:fb:b8:1f:d0:d2:89:4d:
8e:4a:03:4c:8c:4e:e7:5f:87:40:97:a4:9d:84:7e:b8:3f:ca:
bf:f7:a8:37:2e:95:8b:9b:9f:ce:1a:11:e2:a4:9a:fa:a8:86:
85:31:bc:09:b0:3d:ea:3a:be:cd:e8:44:ea:ce:36:6c:89:a9:
71:89:5d:86:01:0e:56:ca:d2:da:4b:14:27:3c:6e:92:33:82:
bd:3d:fb:00:9e:fb:75:1c:ee:e5:c9:31:ef:75:3a:de:82:94:
7c:8f:56:ba:7a:97:37:21:e8:4e:ee:fd:1c:3d:64:ce:9b:d1:
12:70:ca:2c:22:f4:24:b8:c6:1d:3f:01:0a:4c:2a:4c:25:0a:
44:e1:a0:e5:21:91:67:96:e5:83:e6:e3:ab:c6:9a:dd:13:8e:
0b:1d:35:55:36:0c:4d:48:14:60:f0:ac:24:4b:51:ee:0d:71:
93:71:c3:ea
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMTA5MjYwOTMxMzBaFw0yMjA5MjYwOTMxMzBaMBgxFjAU
BgNVBAMMDTYxNTAzZGY2LTEyMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhGmj9ODtW/oDY9zbIxVTegWZ03qRpBXJrozpIDTRa9/2Z2jnxF4iiQkNJ
z2NV2ot0CtQlYS01x0XWMft3YdpDej778lYtkJsO9W+8WErYbhz/T7i6hPrv7ltB
M/D6MDH7lpc5QC3nJdWGDViTxQgFBRj96YaKYg0/E2HLxLbgectT4D5fdPEJ7an3
UjgfUnO7fYOVSHzy0FBA0MUMnYFcauNDQCEc66UaUSE7EhLjTcOzDwul+4vHibPl
LmCnYkuMp7W8mmnZd6lRyAJJ3W/KNNDcL+j9P3gtK6cLHzO/JGk6/WBM8PiCsksT
vNyjsZCgppCdNbF/kJmyJUiI+WevAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8FcH
MSybUmem5Sv/kQDEhjvj14EwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4Lzg5RjM3NDFFMUVBQzExRUM4Q0E3NUQ1OUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe7gwDQYJKoZIhvcNAQELBQAD
ggEBAKS7y/CxUMPOC8bIXURtT6fxucVnZVTifq27zFLpRe8iA6BVGzOaUxFpwLoH
T7d++hQ6t80efLkJ/sUoyRjk5KL5lCeS6O6orXL1EYLalPHGUdMk+7gf0NKJTY5K
A0yMTudfh0CXpJ2Efrg/yr/3qDculYubn84aEeKkmvqohoUxvAmwPeo6vs3oROrO
NmyJqXGJXYYBDlbK0tpLFCc8bpIzgr09+wCe+3Uc7uXJMe91Ot6ClHyPVrp6lzch
6E7u/Rw9ZM6b0RJwyiwi9CS4xh0/AQpMKkwlCkThoOUhkWeW5YPm46vGmt0Tjgsd
NVU2DE1IFGDwrCRLUe4NcZNxw+o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org