Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
File: B3B2717A7DEC11ECA5AD33AD5A40D577.roa (raw, json)
Hash identifier: Z2ajLyN2HlhqU2eILPAe+IDD24gOnhoc30vAncPMiXw=
Subject key identifier: B1:A2:65:32:C9:E6:3C:DB:0B:E8:6E:FC:8E:7D:39:DA:BA:5B:C5:84
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 04EE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
Signing time: Tue 25 Jan 2022 14:40:12 +0000
ROA not before: Tue 25 Jan 2022 14:40:09 +0000
ROA not after: Wed 25 Jan 2023 14:40:09 +0000
asID: 58202
IP address blocks: 161.123.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 14:40:09 2022 GMT
Not After : Jan 25 14:40:09 2023 GMT
Subject: CN=61f00bcc-b68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:6f:67:74:57:74:87:c8:47:2f:71:46:39:
d9:3e:1f:f5:a8:43:76:29:c7:c4:23:1f:d0:85:3b:
8a:69:ec:a5:2d:0a:f6:79:b3:c8:7d:f1:ad:9e:a4:
42:25:8d:76:9e:6f:5f:1f:e4:2a:37:93:85:88:09:
8b:2d:59:12:91:a8:1b:8a:c0:66:e3:2a:98:a9:a6:
79:6d:49:4d:94:2d:aa:4e:b1:fa:56:b5:f1:19:25:
3f:41:9c:5c:cb:84:af:6b:a8:4a:4a:94:9b:3c:45:
d7:5b:6e:49:30:f7:b5:9b:0a:6b:f3:0c:d2:29:a3:
0a:6a:9c:90:30:72:27:97:74:6b:fb:7c:cd:7e:e1:
53:df:4b:89:71:e0:c0:a7:d6:aa:da:02:07:fa:88:
e5:2a:0f:94:bc:0c:36:49:0a:3a:6c:26:c4:29:e0:
2a:0b:13:39:dd:6e:45:03:8b:d0:75:fd:5c:01:2b:
ee:7b:9a:f9:bc:86:21:bb:7c:ac:b0:36:76:14:93:
ef:94:27:16:39:1b:d7:89:b2:80:28:f6:95:b6:8a:
d3:1f:8d:6b:de:81:d7:11:38:b8:69:40:a3:43:8d:
f5:7c:e5:f9:cc:af:31:11:e4:d1:43:81:1b:f7:eb:
76:9d:5d:d1:a7:ad:9e:6e:bd:c7:35:39:31:f9:7d:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A2:65:32:C9:E6:3C:DB:0B:E8:6E:FC:8E:7D:39:DA:BA:5B:C5:84
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B3B2717A7DEC11ECA5AD33AD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.224.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3c:68:38:38:87:4a:38:7e:db:ab:08:b1:04:fe:a7:11:6a:
e7:d3:51:75:0f:48:b3:3b:ae:b2:97:73:a5:b1:2a:4b:f1:4a:
c9:27:72:d5:a2:41:3b:82:44:1e:37:b3:63:c1:69:ed:fb:9b:
06:c9:97:25:72:7d:38:23:30:86:1b:98:99:fb:3b:46:3e:25:
71:f7:ee:91:63:fe:78:6b:0c:94:c7:2d:19:99:d5:00:7c:dd:
e3:78:14:6d:c6:02:b1:f1:73:29:47:03:9b:14:9f:8e:59:8c:
fc:9c:e2:67:20:dd:9b:b9:f4:9f:6b:95:80:e2:60:8f:38:c0:
07:31:a2:63:de:34:37:a8:ab:37:a3:4c:87:66:bb:40:17:e7:
4c:4c:18:01:6a:33:8b:33:db:3e:25:8e:57:cd:76:b7:ba:94:
61:4f:e6:80:8c:94:d8:37:12:a3:f5:52:cf:81:f2:f0:92:f5:
04:8e:cc:17:99:de:ad:7b:38:28:08:10:03:cc:31:91:6a:57:
50:89:00:be:de:50:1c:7c:05:bd:a5:f5:a6:01:8c:c5:10:2d:
e9:7e:b6:74:29:b1:41:8a:2e:34:c8:9e:3c:b2:98:17:7c:5a:
57:ec:f4:36:dc:ab:1f:22:da:1b:66:8d:5a:2f:75:39:65:38:
e0:73:e9:40
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNDQwMDlaFw0yMzAxMjUxNDQwMDlaMBgxFjAU
BgNVBAMMDTYxZjAwYmNjLWI2OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVqW9ndFd0h8hHL3FGOdk+H/WoQ3Ypx8QjH9CFO4pp7KUtCvZ5s8h98a2e
pEIljXaeb18f5Co3k4WICYstWRKRqBuKwGbjKpippnltSU2ULapOsfpWtfEZJT9B
nFzLhK9rqEpKlJs8Rddbbkkw97WbCmvzDNIpowpqnJAwcieXdGv7fM1+4VPfS4lx
4MCn1qraAgf6iOUqD5S8DDZJCjpsJsQp4CoLEzndbkUDi9B1/VwBK+57mvm8hiG7
fKywNnYUk++UJxY5G9eJsoAo9pW2itMfjWvegdcROLhpQKNDjfV85fnMrzER5NFD
gRv363adXdGnrZ5uvcc1OTH5fcSzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUsaJl
MsnmPNsL6G78jn052rpbxYQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0IzQjI3MTdBN0RFQzExRUNBNUFEMzNBRDVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe+AwDQYJKoZIhvcNAQELBQAD
ggEBADg8aDg4h0o4fturCLEE/qcRaufTUXUPSLM7rrKXc6WxKkvxSsknctWiQTuC
RB43s2PBae37mwbJlyVyfTgjMIYbmJn7O0Y+JXH37pFj/nhrDJTHLRmZ1QB83eN4
FG3GArHxcylHA5sUn45ZjPyc4mcg3Zu59J9rlYDiYI84wAcxomPeNDeoqzejTIdm
u0AX50xMGAFqM4sz2z4ljlfNdre6lGFP5oCMlNg3EqP1Us+B8vCS9QSOzBeZ3q17
OCgIEAPMMZFqV1CJAL7eUBx8Bb2l9aYBjMUQLel+tnQpsUGKLjTInjyymBd8Wlfs
9Dbcqx8i2htmjVovdTllOOBz6UA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org