Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A77DF486F0E811ED82EF63894AD9E6FC.roa
File: A77DF486F0E811ED82EF63894AD9E6FC.roa (raw, json)
Hash identifier: vosPvYrhLIy0VAvKCbpUv5pPxi73G948sGqEVV6msoI=
Subject key identifier: C5:98:D1:0B:0B:9A:61:DF:E7:8D:DE:4E:17:15:91:24:66:54:D5:45
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0ABE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A77DF486F0E811ED82EF63894AD9E6FC.roa
Signing time: Fri 12 May 2023 17:15:55 +0000
ROA not before: Fri 12 May 2023 17:15:52 +0000
ROA not after: Sun 12 May 2024 17:15:52 +0000
asID: 399471
IP address blocks: 161.123.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 12 17:15:52 2023 GMT
Not After : May 12 17:15:52 2024 GMT
Subject: CN=645e744b-c8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:12:f2:c4:35:3b:fe:bb:82:8a:5a:38:3e:
f8:e6:18:5d:75:95:a9:61:40:7d:ba:f7:ce:9a:ef:
21:1f:78:3c:6a:24:cf:90:09:54:48:ff:ec:be:f2:
44:88:f2:22:ee:46:03:52:12:15:9d:7f:c1:be:f8:
c5:53:2c:aa:b7:9f:2c:17:82:0a:ec:54:28:54:55:
08:24:79:27:a4:4f:f3:70:10:b7:b2:70:c5:cd:eb:
8a:c6:c7:47:e4:1d:75:8d:d1:48:d3:59:62:18:80:
6f:84:08:20:18:50:95:ba:da:3e:dd:71:0f:ff:b7:
27:6f:a9:4e:18:14:6f:90:ab:25:48:f6:1d:31:6e:
4a:04:1d:c2:34:fb:b4:c1:e6:7b:9f:14:78:ee:53:
82:31:85:29:f8:8b:b3:42:20:aa:66:95:b9:99:64:
4c:50:15:dc:d9:38:82:c8:b3:f0:64:c2:61:49:a8:
7f:e0:76:7e:63:03:38:64:ae:93:b6:4a:aa:f6:eb:
5a:9e:49:66:e6:f5:c7:50:88:0b:06:78:99:6e:57:
68:39:a5:c5:3f:25:b7:27:ce:38:9d:7e:88:97:ac:
62:7d:8c:f7:bc:47:07:99:f7:70:1e:e1:86:07:07:
db:9a:47:fa:79:58:23:f0:e7:f1:f5:fd:59:0c:5f:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:D1:0B:0B:9A:61:DF:E7:8D:DE:4E:17:15:91:24:66:54:D5:45
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A77DF486F0E811ED82EF63894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.100.0/24
Signature Algorithm: sha256WithRSAEncryption
34:da:e3:22:dd:81:d9:39:ac:10:4b:bd:b8:19:62:a4:61:f5:
5f:0e:ab:02:cc:6a:f8:a5:be:32:26:52:17:36:98:ae:5d:7c:
5a:e7:99:5d:b1:ff:f0:5d:d2:42:ee:aa:99:4e:b9:6c:ad:a4:
4a:64:0f:02:f3:d8:3d:89:74:fd:16:c1:13:82:b1:9f:8c:7b:
56:cc:03:7f:73:00:68:09:5b:61:14:ab:98:cb:08:6a:aa:8a:
f5:e8:af:17:cc:56:4a:86:88:7f:2e:98:9d:c2:14:f2:f5:83:
25:91:a9:0a:5a:ed:d1:f2:bc:4f:25:4e:22:2b:7d:93:01:9b:
eb:a4:6d:71:89:e8:f1:2e:0e:03:f7:d7:74:67:7d:43:a8:f3:
1f:87:72:91:76:33:2d:b9:0d:e5:3e:13:3d:85:eb:68:1d:f7:
ea:60:bf:b4:24:80:e7:48:0d:97:d9:4d:3a:3f:a5:d6:41:37:
5f:d2:23:83:f8:0a:e6:f6:b1:f2:40:30:75:55:9c:3c:42:62:
05:7e:c6:2f:f8:4f:1e:ba:ab:46:66:fa:2e:1d:e5:87:63:ba:
34:57:00:2c:a3:e8:ee:f5:8f:e5:9e:62:45:17:cb:6e:57:58:
aa:08:30:3e:e3:ca:63:e1:f4:2e:d4:70:ed:06:6b:1a:b6:73:
16:38:08:d9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA1MTIxNzE1NTJaFw0yNDA1MTIxNzE1NTJaMBgxFjAU
BgNVBAMTDTY0NWU3NDRiLWM4YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIrBLyxDU7/ruCilo4PvjmGF11lalhQH26986a7yEfeDxqJM+QCVRI/+y+
8kSI8iLuRgNSEhWdf8G++MVTLKq3nywXggrsVChUVQgkeSekT/NwELeycMXN64rG
x0fkHXWN0UjTWWIYgG+ECCAYUJW62j7dcQ//tydvqU4YFG+QqyVI9h0xbkoEHcI0
+7TB5nufFHjuU4IxhSn4i7NCIKpmlbmZZExQFdzZOILIs/BkwmFJqH/gdn5jAzhk
rpO2Sqr261qeSWbm9cdQiAsGeJluV2g5pcU/JbcnzjidfoiXrGJ9jPe8RweZ93Ae
4YYHB9uaR/p5WCPw5/H1/VkMX7V7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUxZjR
CwuaYd/njd5OFxWRJGZU1UUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0E3N0RGNDg2RjBFODExRUQ4MkVGNjM4OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe2QwDQYJKoZIhvcNAQELBQAD
ggEBADTa4yLdgdk5rBBLvbgZYqRh9V8OqwLMavilvjImUhc2mK5dfFrnmV2x//Bd
0kLuqplOuWytpEpkDwLz2D2JdP0WwROCsZ+Me1bMA39zAGgJW2EUq5jLCGqqivXo
rxfMVkqGiH8umJ3CFPL1gyWRqQpa7dHyvE8lTiIrfZMBm+ukbXGJ6PEuDgP313Rn
fUOo8x+HcpF2My25DeU+Ez2F62gd9+pgv7QkgOdIDZfZTTo/pdZBN1/SI4P4Cub2
sfJAMHVVnDxCYgV+xi/4Tx66q0Zm+i4d5YdjujRXACyj6O71j+WeYkUXy25XWKoI
MD7jymPh9C7UcO0Gaxq2cxY4CNk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org