Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4C7AF5EEB0E11EDB9A3914A4AD9E6FC.roa
File: B4C7AF5EEB0E11EDB9A3914A4AD9E6FC.roa (raw, json)
Hash identifier: 7c4YE45b9KZW5e+DKv42hoX7q6kQzLbYcBTT3JgOl2E=
Subject key identifier: A4:46:27:10:5C:67:74:CF:17:B8:75:58:9A:4F:D1:97:ED:66:61:E4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A9A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4C7AF5EEB0E11EDB9A3914A4AD9E6FC.roa
Signing time: Fri 05 May 2023 06:33:11 +0000
ROA not before: Fri 05 May 2023 06:33:08 +0000
ROA not after: Sun 05 May 2024 06:33:08 +0000
asID: 399471
IP address blocks: 161.123.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2714 (0xa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 06:33:08 2023 GMT
Not After : May 5 06:33:08 2024 GMT
Subject: CN=6454a327-9d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:97:b1:c5:f5:43:07:d4:52:0d:eb:bf:a8:
97:57:3a:16:ab:10:ca:f9:dd:0d:f1:14:2d:4e:81:
bb:2c:a6:3e:71:f2:d4:be:af:9e:46:a1:41:bf:0c:
07:f5:6a:0a:7a:05:ff:cd:f5:67:fc:a8:e3:0d:06:
b5:41:a1:7e:e0:58:e2:72:47:76:89:ae:02:e1:6b:
74:3f:dd:11:65:34:ce:a5:fb:dd:f9:d1:07:be:da:
be:51:f7:64:d8:68:12:9d:e1:67:96:d5:59:b2:70:
cc:c7:ba:39:87:c0:0f:b1:8b:a4:e8:fc:6a:a7:21:
5e:30:f8:c7:4e:5c:c0:31:75:50:88:d1:c3:5c:3d:
61:5c:f3:25:78:c2:b4:1f:90:73:3c:58:9b:eb:c5:
ef:28:16:24:ab:9e:26:15:97:1d:a7:58:9b:3a:8c:
a7:e8:f8:db:c7:29:91:64:a7:2e:b4:50:16:5a:e6:
5f:19:5e:fe:f7:2f:6d:8e:c2:36:9c:ac:8e:df:ec:
52:d8:a4:0a:9d:ee:bb:17:30:64:eb:0b:78:9f:fe:
b9:f5:5d:04:cb:c6:68:99:59:3e:34:2b:b5:95:7c:
77:43:6c:bb:8c:ac:b2:da:43:d8:6a:ac:dd:7e:38:
68:e6:6e:53:a2:fa:34:bf:15:61:cd:fb:21:43:90:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:46:27:10:5C:67:74:CF:17:B8:75:58:9A:4F:D1:97:ED:66:61:E4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B4C7AF5EEB0E11EDB9A3914A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fa:c6:d8:20:75:54:6d:16:a1:e2:ed:21:0a:10:56:20:a6:
35:60:63:81:ab:f4:c7:08:dd:5f:81:97:8b:ac:61:9e:f4:71:
48:f7:c5:46:32:71:7d:ad:ac:2f:72:26:e6:5a:36:3a:84:38:
95:35:42:cc:2d:54:ac:ef:8f:a4:5f:4e:6c:a5:e4:9f:50:f2:
93:c4:26:95:44:ce:25:7c:b3:65:9f:99:8a:93:29:d5:af:0b:
ff:62:a0:04:04:b3:e3:a4:48:cc:ff:f6:de:6b:98:bc:0e:48:
93:02:8e:db:ee:26:a9:2f:b3:e0:59:d7:55:84:46:aa:1b:0a:
01:7f:bb:b2:ba:8c:33:b9:c0:15:18:31:db:36:f2:17:c3:41:
3d:0c:a9:4f:ee:85:a2:53:37:da:32:c0:8c:21:f2:7f:b9:b8:
d5:78:54:50:59:64:8d:50:3f:81:a8:81:3b:26:ad:fb:74:11:
35:09:4e:86:d0:ce:d6:cf:e4:4d:6c:1f:63:1b:99:4c:51:4f:
09:0e:42:78:c5:af:6f:61:44:08:6e:e3:53:6f:06:5d:51:1f:
3d:92:94:61:ce:6d:4d:f4:97:87:d7:6f:b7:ab:69:a6:fa:58:
77:f7:44:5a:59:04:28:35:fd:58:97:a4:4c:44:a2:0e:17:f1:
fa:fa:c1:a7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCpowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA1MDUwNjMzMDhaFw0yNDA1MDUwNjMzMDhaMBgxFjAU
BgNVBAMTDTY0NTRhMzI3LTlkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgZ5exxfVDB9RSDeu/qJdXOharEMr53Q3xFC1Ogbsspj5x8tS+r55GoUG/
DAf1agp6Bf/N9Wf8qOMNBrVBoX7gWOJyR3aJrgLha3Q/3RFlNM6l+9350Qe+2r5R
92TYaBKd4WeW1VmycMzHujmHwA+xi6To/GqnIV4w+MdOXMAxdVCI0cNcPWFc8yV4
wrQfkHM8WJvrxe8oFiSrniYVlx2nWJs6jKfo+NvHKZFkpy60UBZa5l8ZXv73L22O
wjacrI7f7FLYpAqd7rsXMGTrC3if/rn1XQTLxmiZWT40K7WVfHdDbLuMrLLaQ9hq
rN1+OGjmblOi+jS/FWHN+yFDkJmZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUpEYn
EFxndM8XuHVYmk/Rl+1mYeQwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0I0QzdBRjVFRUIwRTExRURCOUEzOTE0QTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACheyMwDQYJKoZIhvcNAQELBQAD
ggEBAHv6xtggdVRtFqHi7SEKEFYgpjVgY4Gr9McI3V+Bl4usYZ70cUj3xUYycX2t
rC9yJuZaNjqEOJU1QswtVKzvj6RfTmyl5J9Q8pPEJpVEziV8s2WfmYqTKdWvC/9i
oAQEs+OkSMz/9t5rmLwOSJMCjtvuJqkvs+BZ11WERqobCgF/u7K6jDO5wBUYMds2
8hfDQT0MqU/uhaJTN9oywIwh8n+5uNV4VFBZZI1QP4GogTsmrft0ETUJTobQztbP
5E1sH2MbmUxRTwkOQnjFr29hRAhu41NvBl1RHz2SlGHObU30l4fXb7eraab6WHf3
RFpZBCg1/ViXpExEog4X8fr6wac=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org