Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF1081CE5DF11ECA8F5C19DF1222468.roa
File: 9AF1081CE5DF11ECA8F5C19DF1222468.roa (raw, json)
Hash identifier: tHXN8bYjKIAkP1O5fjYnmKg2i4kJCKE+1ia1//2oIT8=
Subject key identifier: 84:22:93:42:0C:D3:BB:A4:A0:08:C1:D0:AE:01:C5:73:B2:D4:00:B7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0722
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF1081CE5DF11ECA8F5C19DF1222468.roa
Signing time: Mon 06 Jun 2022 21:28:28 +0000
ROA not before: Mon 06 Jun 2022 21:28:25 +0000
ROA not after: Tue 06 Jun 2023 21:28:25 +0000
asID: 203999
IP address blocks: 161.123.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:28:25 2022 GMT
Not After : Jun 6 21:28:25 2023 GMT
Subject: CN=629e717c-63f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:1a:5c:eb:ea:be:0a:63:9f:42:72:11:5b:
d0:7e:d2:cd:4f:4f:ba:dc:db:96:23:df:60:69:bf:
6b:fa:4c:15:3c:3f:d6:de:ba:5d:b7:73:9c:61:af:
e8:d8:85:3f:a4:f5:24:c1:72:45:e8:db:9a:37:90:
9e:55:e4:47:18:b3:89:eb:9d:9b:62:ae:9f:8f:9e:
dd:68:4e:c2:6a:02:0d:12:f7:99:68:43:c0:bc:b8:
9d:89:88:1c:02:78:a4:2b:ca:f3:22:ae:ca:0f:00:
ec:df:3e:b5:13:0e:b1:30:7c:1f:21:51:e1:53:16:
7b:13:a5:b1:4e:59:83:1b:a0:e8:0e:24:4e:d1:cb:
23:47:71:d6:84:5b:61:70:2f:36:d8:c7:d4:4f:5a:
08:7c:52:6a:72:b3:8d:61:f5:7a:5a:12:e3:d6:29:
39:0b:98:29:fd:e1:e3:98:6b:a9:ea:69:9c:fa:c8:
fa:a1:80:24:3d:ed:7e:55:bd:fe:7d:da:50:30:c4:
5e:e2:3a:28:0c:fa:fe:d5:09:93:85:e6:5a:45:f3:
ae:bd:92:9d:aa:8c:cd:26:b8:88:f4:c8:3b:b2:3b:
9d:a9:e7:10:63:d6:8f:97:2a:c3:86:e6:6c:38:6b:
34:b6:a7:15:b8:c5:7a:6e:94:50:36:5c:5a:89:d9:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:93:42:0C:D3:BB:A4:A0:08:C1:D0:AE:01:C5:73:B2:D4:00:B7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF1081CE5DF11ECA8F5C19DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.27.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8f:bb:4b:d6:3e:6a:fb:43:47:39:b8:ae:2c:62:a4:9b:a4:
83:3c:60:61:7b:1d:a2:33:25:e5:79:5d:6e:7e:d1:e8:af:aa:
96:6a:24:7c:25:fc:24:3d:e6:0d:e8:b7:c3:14:a9:fd:73:37:
71:2b:d3:72:b2:4b:9e:c0:c7:b2:52:7f:98:3e:19:7a:40:39:
fb:6f:9e:a4:e8:a1:92:b1:d8:42:2b:80:f3:e5:ca:98:a5:2d:
d3:78:42:f1:75:22:b2:a3:e8:e5:54:41:f5:cd:2d:d0:18:01:
79:aa:05:69:c7:49:9d:48:00:a8:e6:8d:24:e0:48:41:59:c6:
34:27:1a:d3:ba:98:9b:9b:dc:e9:1c:2a:ac:d1:ab:e1:fd:b2:
f7:92:e0:37:8b:3d:62:ef:00:c1:db:1c:ee:de:13:24:55:59:
9c:a3:93:6d:73:2c:b5:a2:5c:54:11:d5:3c:28:8b:ee:29:16:
0d:88:84:a0:f7:06:7a:0a:9f:ec:f9:49:b5:ff:30:ae:4b:84:
67:bc:56:4e:e2:b1:07:d9:db:57:ae:7a:7c:ae:c5:32:de:27:
56:29:6a:14:9f:21:db:c5:ed:14:5f:d6:1e:95:a7:60:cb:eb:
c7:61:0d:79:3c:b9:91:38:ff:7a:7f:f2:95:15:93:5b:6f:0e:
c2:f4:2b:70
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICByIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MDYyMTI4MjVaFw0yMzA2MDYyMTI4MjVaMBgxFjAU
BgNVBAMMDTYyOWU3MTdjLTYzZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2hRpc6+q+CmOfQnIRW9B+0s1PT7rc25Yj32Bpv2v6TBU8P9beul23c5xh
r+jYhT+k9STBckXo25o3kJ5V5EcYs4nrnZtirp+Pnt1oTsJqAg0S95loQ8C8uJ2J
iBwCeKQryvMirsoPAOzfPrUTDrEwfB8hUeFTFnsTpbFOWYMboOgOJE7RyyNHcdaE
W2FwLzbYx9RPWgh8Umpys41h9XpaEuPWKTkLmCn94eOYa6nqaZz6yPqhgCQ97X5V
vf592lAwxF7iOigM+v7VCZOF5lpF8669kp2qjM0muIj0yDuyO52p5xBj1o+XKsOG
5mw4azS2pxW4xXpulFA2XFqJ2Y5PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUhCKT
QgzTu6SgCMHQrgHFc7LUALcwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzlBRjEwODFDRTVERjExRUNBOEY1QzE5REYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexswDQYJKoZIhvcNAQELBQAD
ggEBADePu0vWPmr7Q0c5uK4sYqSbpIM8YGF7HaIzJeV5XW5+0eivqpZqJHwl/CQ9
5g3ot8MUqf1zN3Er03KyS57Ax7JSf5g+GXpAOftvnqTooZKx2EIrgPPlypilLdN4
QvF1IrKj6OVUQfXNLdAYAXmqBWnHSZ1IAKjmjSTgSEFZxjQnGtO6mJub3OkcKqzR
q+H9sveS4DeLPWLvAMHbHO7eEyRVWZyjk21zLLWiXFQR1Twoi+4pFg2IhKD3BnoK
n+z5SbX/MK5LhGe8Vk7isQfZ21euenyuxTLeJ1YpahSfIdvF7RRf1h6Vp2DL68dh
DXk8uZE4/3p/8pUVk1tvDsL0K3A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org