Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0D650741FE611EEA581D9564AD9E6FC.roa
File: A0D650741FE611EEA581D9564AD9E6FC.roa (raw, json)
Hash identifier: 4X7uyXFVFJqX4GGsTMIZ7FCaSZpyNx/8eH96JBdxyzw=
Subject key identifier: CC:4F:33:00:0B:3A:23:F8:70:91:75:65:7D:F8:DE:0D:73:E4:13:4C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B53
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0D650741FE611EEA581D9564AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:29:50 +0000
ROA not before: Tue 11 Jul 2023 12:29:46 +0000
ROA not after: Thu 11 Jul 2024 12:29:46 +0000
asID: 133499
IP address blocks: 161.123.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2899 (0xb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:29:46 2023 GMT
Not After : Jul 11 12:29:46 2024 GMT
Subject: CN=64ad4b3e-6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:27:11:ae:ca:f7:a7:d8:f9:c7:45:a9:8d:
ba:24:05:84:ce:f3:d4:b5:e3:c2:d4:e9:24:b1:dd:
7e:e0:57:62:c3:c4:04:1d:2a:32:e2:2a:f7:13:1c:
f9:ac:cc:4b:8d:da:5c:57:0a:f3:f4:ab:f2:5a:dd:
0e:33:68:ca:1f:a9:8b:b4:5b:8f:49:05:2f:22:28:
05:5e:9b:e9:d5:ca:0a:24:0a:e8:01:22:36:bc:24:
63:78:47:08:c5:a0:da:99:17:dd:c7:2a:5f:42:d7:
69:78:fa:66:d1:62:c2:dd:35:77:39:b8:e4:22:28:
eb:a9:fc:c8:fa:af:85:ca:89:c5:96:9d:67:75:67:
03:0b:d0:eb:a4:fb:b5:c4:f2:3e:63:b2:74:89:95:
eb:14:a7:7f:8d:6c:ab:af:9d:e4:4a:14:b9:62:4b:
e5:4d:af:fd:4f:61:e8:f9:c6:e7:6a:b6:5b:78:de:
2c:91:69:0e:3f:3c:82:4e:8e:50:c3:92:21:8f:1c:
d2:e7:ca:20:8c:83:f0:40:01:9d:c4:fc:b9:8f:2c:
99:cf:9b:14:e1:ef:1f:79:6e:75:ca:52:86:ab:15:
61:f3:d4:37:c1:7a:a2:45:94:32:0b:83:a9:0d:2d:
e8:8f:71:c9:0f:f7:e7:5d:91:4f:49:02:d9:d5:ad:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:33:00:0B:3A:23:F8:70:91:75:65:7D:F8:DE:0D:73:E4:13:4C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0D650741FE611EEA581D9564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.70.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ef:e6:32:91:27:dc:df:d8:22:10:52:b7:7e:94:b0:61:c0:
7f:b9:26:be:f2:3f:52:f2:e3:b9:04:af:f7:85:1f:57:bf:a6:
4b:42:24:77:83:61:10:b7:90:6c:b0:11:e0:6d:39:10:0e:e9:
2a:81:8e:75:cf:d2:f1:0a:a0:e3:a3:b5:4b:5e:96:50:ca:ae:
b2:0a:1c:dc:a7:d1:a7:33:ea:05:e2:56:fd:bc:e4:48:10:ac:
74:e6:bd:c1:65:53:23:3b:9c:c5:27:46:9a:67:14:e9:23:32:
9c:fb:8a:97:d5:09:c2:6e:a0:9d:24:74:ec:fc:98:90:16:af:
51:51:e3:f1:25:df:3d:80:0a:a6:d1:f3:e2:87:2c:a3:ba:42:
42:ce:68:1f:38:be:c2:e8:50:0f:4d:92:40:31:fc:1b:79:b2:
5b:8b:ff:cf:c0:2c:b8:c9:07:67:c6:f4:43:90:da:1e:9c:f8:
af:2a:f2:4e:aa:10:6d:48:81:48:2c:cd:24:2e:5f:f7:4c:21:
46:1a:f2:2c:90:1c:29:98:b2:24:25:26:67:c1:f0:3d:0c:9e:
b3:ba:49:db:d8:2c:55:d7:78:74:36:71:a7:b4:a7:78:d5:e4:
4a:cd:92:e1:fe:96:6c:21:af:9e:77:0b:14:24:87:d2:10:7d:
76:dc:68:48
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA3MTExMjI5NDZaFw0yNDA3MTExMjI5NDZaMBgxFjAU
BgNVBAMTDTY0YWQ0YjNlLTZkNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2GCcRrsr3p9j5x0WpjbokBYTO89S148LU6SSx3X7gV2LDxAQdKjLiKvcT
HPmszEuN2lxXCvP0q/Ja3Q4zaMofqYu0W49JBS8iKAVem+nVygokCugBIja8JGN4
RwjFoNqZF93HKl9C12l4+mbRYsLdNXc5uOQiKOup/Mj6r4XKicWWnWd1ZwML0Ouk
+7XE8j5jsnSJlesUp3+NbKuvneRKFLliS+VNr/1PYej5xudqtlt43iyRaQ4/PIJO
jlDDkiGPHNLnyiCMg/BAAZ3E/LmPLJnPmxTh7x95bnXKUoarFWHz1DfBeqJFlDIL
g6kNLeiPcckP9+ddkU9JAtnVrcJ9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzE8z
AAs6I/hwkXVlffjeDXPkE0wwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0EwRDY1MDc0MUZFNjExRUVBNTgxRDk1NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe0YwDQYJKoZIhvcNAQELBQAD
ggEBABHv5jKRJ9zf2CIQUrd+lLBhwH+5Jr7yP1Ly47kEr/eFH1e/pktCJHeDYRC3
kGywEeBtORAO6SqBjnXP0vEKoOOjtUtellDKrrIKHNyn0acz6gXiVv285EgQrHTm
vcFlUyM7nMUnRppnFOkjMpz7ipfVCcJuoJ0kdOz8mJAWr1FR4/El3z2ACqbR8+KH
LKO6QkLOaB84vsLoUA9NkkAx/Bt5sluL/8/ALLjJB2fG9EOQ2h6c+K8q8k6qEG1I
gUgszSQuX/dMIUYa8iyQHCmYsiQlJmfB8D0MnrO6SdvYLFXXeHQ2cae0p3jV5ErN
kuH+lmwhr553CxQkh9IQfXbcaEg=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:32:56 2024 by rpki-client on console-ams.rpki-client.org