Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AB5616D2F16211EC8CF8CEB4F1222468.roa
File: AB5616D2F16211EC8CF8CEB4F1222468.roa (raw, json)
Hash identifier: uokyjygpJqgUge5/hwTt0RpnO/Sg5EhagKkaP/OQMDw=
Subject key identifier: 7D:5B:BD:6C:A5:37:B4:45:26:0B:A6:88:7B:D8:4B:F9:3B:81:48:5C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 076B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AB5616D2F16211EC8CF8CEB4F1222468.roa
Signing time: Tue 21 Jun 2022 13:04:23 +0000
ROA not before: Tue 21 Jun 2022 13:04:19 +0000
ROA not after: Wed 21 Jun 2023 13:04:19 +0000
asID: 203999
IP address blocks: 161.123.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 21 13:04:19 2022 GMT
Not After : Jun 21 13:04:19 2023 GMT
Subject: CN=62b1c1d6-175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:6c:15:8e:f4:53:12:f7:d3:4a:d1:3a:9a:
28:78:32:dd:64:64:7b:5f:df:12:62:b6:19:74:f9:
69:0c:29:d5:f4:6e:db:ad:0d:1c:90:d0:47:04:a2:
e0:c4:11:34:33:58:08:56:4f:99:39:8b:58:6c:06:
03:83:c7:67:9c:a4:9f:72:ee:dc:ad:a8:67:70:60:
30:98:6b:d7:6a:b6:e4:94:74:5c:8f:a7:08:12:8d:
91:ea:4a:84:7e:20:72:07:8a:5e:b6:7a:da:41:71:
66:e6:6d:df:c5:dd:5c:9d:82:49:33:a0:c0:83:6a:
6f:6a:e7:90:6e:32:b2:d0:d6:22:47:86:38:e8:82:
fd:97:41:b2:29:36:c7:92:c0:ee:ea:de:22:05:c8:
5f:83:da:cd:48:3e:7a:5d:a7:57:c2:a7:0e:d4:74:
7d:02:8d:a9:b8:a6:33:20:ec:84:59:9f:ed:13:71:
f3:47:e8:cb:3b:8e:fd:1d:f3:87:89:44:53:23:fc:
02:cd:ff:3a:94:e0:2c:7f:2a:1c:31:7c:ae:31:3f:
dd:70:af:36:c6:0f:0e:6d:d9:2d:bd:80:12:14:1d:
d5:fc:74:78:9c:a0:af:fa:78:eb:4b:30:7f:74:a2:
08:a0:96:a3:6a:34:0e:e4:ff:ce:7b:19:f4:d4:bb:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5B:BD:6C:A5:37:B4:45:26:0B:A6:88:7B:D8:4B:F9:3B:81:48:5C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AB5616D2F16211EC8CF8CEB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.44.0/22
Signature Algorithm: sha256WithRSAEncryption
10:5d:7b:28:31:f6:76:b8:f5:ba:47:33:58:ab:c2:c4:0c:1c:
0f:82:87:7f:2d:da:69:bc:d3:4e:98:92:2d:02:f4:dd:40:c7:
21:85:ac:c1:43:3d:45:d0:1b:3a:0f:3e:23:4a:57:50:94:aa:
97:ec:98:cf:44:15:54:41:24:c3:76:4f:95:41:cd:d8:7c:cf:
2a:e5:a0:69:80:ba:ec:9b:68:9a:37:95:82:0e:22:85:c4:b5:
8d:2e:a7:af:a1:3f:17:5b:73:70:e3:78:6f:d9:f8:d5:00:93:
50:49:fd:05:f4:69:40:f1:0f:1c:0b:95:9b:8d:5d:fa:3c:4d:
7b:c1:23:0f:22:97:5d:c4:ec:59:93:d7:57:59:f3:24:d9:c8:
d0:8d:ff:b4:2d:c7:ce:49:ba:fe:e1:9c:be:11:69:ae:0e:39:
fb:ba:6d:08:d0:dd:7b:d6:78:cf:95:cb:ee:27:13:94:92:5f:
ef:44:56:62:64:5d:4a:82:81:30:15:fc:26:6d:aa:59:e8:06:
87:12:f8:85:d6:74:f3:4c:88:1f:ae:c6:78:f6:02:c0:db:23:
b4:85:42:a5:e9:e3:40:3d:d5:c7:a3:f3:56:95:66:4b:eb:99:
20:19:45:80:a6:cd:34:2c:b1:ae:3c:ab:6b:bc:73:b1:c9:db:
fb:69:77:69
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB2swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA2MjExMzA0MTlaFw0yMzA2MjExMzA0MTlaMBgxFjAU
BgNVBAMMDTYyYjFjMWQ2LTE3NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwNWwVjvRTEvfTStE6mih4Mt1kZHtf3xJithl0+WkMKdX0btutDRyQ0EcE
ouDEETQzWAhWT5k5i1hsBgODx2ecpJ9y7tytqGdwYDCYa9dqtuSUdFyPpwgSjZHq
SoR+IHIHil62etpBcWbmbd/F3VydgkkzoMCDam9q55BuMrLQ1iJHhjjogv2XQbIp
NseSwO7q3iIFyF+D2s1IPnpdp1fCpw7UdH0Cjam4pjMg7IRZn+0TcfNH6Ms7jv0d
84eJRFMj/ALN/zqU4Cx/KhwxfK4xP91wrzbGDw5t2S29gBIUHdX8dHicoK/6eOtL
MH90ogiglqNqNA7k/857GfTUu7n5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfVu9
bKU3tEUmC6aIe9hL+TuBSFwwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0FCNTYxNkQyRjE2MjExRUM4Q0Y4Q0VCNEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKheywwDQYJKoZIhvcNAQELBQAD
ggEBABBdeygx9na49bpHM1irwsQMHA+Ch38t2mm8006Yki0C9N1AxyGFrMFDPUXQ
GzoPPiNKV1CUqpfsmM9EFVRBJMN2T5VBzdh8zyrloGmAuuybaJo3lYIOIoXEtY0u
p6+hPxdbc3DjeG/Z+NUAk1BJ/QX0aUDxDxwLlZuNXfo8TXvBIw8il13E7FmT11dZ
8yTZyNCN/7Qtx85Juv7hnL4Raa4OOfu6bQjQ3XvWeM+Vy+4nE5SSX+9EVmJkXUqC
gTAV/CZtqlnoBocS+IXWdPNMiB+uxnj2AsDbI7SFQqXp40A91cej81aVZkvrmSAZ
RYCmzTQssa48q2u8c7HJ2/tpd2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org