Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BA244F1A7DFB11ECBEF501D85A40D577.roa
File: BA244F1A7DFB11ECBEF501D85A40D577.roa (raw, json)
Hash identifier: 7RGnKQW/hIY1Wb/a8c6cHHZIPY+m/ia6KAPXJYRqYEA=
Subject key identifier: 10:80:87:12:B4:01:57:37:43:80:89:68:45:68:5F:1C:49:EA:C1:DA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0534
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BA244F1A7DFB11ECBEF501D85A40D577.roa
Signing time: Tue 25 Jan 2022 16:27:45 +0000
ROA not before: Tue 25 Jan 2022 16:27:42 +0000
ROA not after: Wed 25 Jan 2023 16:27:42 +0000
asID: 327790
IP address blocks: 161.123.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:27:42 2022 GMT
Not After : Jan 25 16:27:42 2023 GMT
Subject: CN=61f02501-5074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:ec:4e:95:4d:fe:de:05:04:75:43:14:1b:
e6:bf:6b:af:79:ae:31:a8:99:ef:68:e0:12:b1:53:
38:82:51:da:83:2e:9d:82:1e:0b:dc:d5:13:e7:73:
bc:59:18:2a:60:d6:6b:8a:de:c3:eb:01:88:1f:b0:
10:7f:4b:1b:25:31:20:78:dd:4c:a4:ba:0e:35:31:
20:28:00:bf:65:a3:19:a9:35:33:51:40:25:7b:28:
e4:11:0b:3a:91:1a:c0:dc:ca:bd:96:8c:e3:28:c4:
ef:6b:96:ee:03:01:09:b6:7d:8b:f8:35:4c:7e:a3:
5e:2c:ce:5b:cd:97:c2:64:9e:bd:1d:23:30:54:be:
0d:45:41:86:3a:b8:98:b9:cf:82:cc:2a:fa:86:07:
58:f8:49:03:6b:d4:c8:3d:df:7b:4a:cc:6e:d0:fb:
70:d1:28:40:45:4a:69:33:ff:7d:75:4a:93:69:f2:
f9:b2:b4:70:ad:ba:83:f5:75:94:e3:6c:3f:83:b8:
8f:72:cc:35:ab:ba:49:81:5b:f9:4c:a2:02:5a:ca:
d4:b8:4e:45:9d:41:d4:f3:66:99:b1:05:1a:a8:bf:
2e:86:28:52:28:49:a6:f0:44:b0:a8:79:5c:ec:ff:
3d:0e:02:4e:8c:8b:b4:04:99:ec:57:f9:39:d1:69:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:87:12:B4:01:57:37:43:80:89:68:45:68:5F:1C:49:EA:C1:DA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BA244F1A7DFB11ECBEF501D85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:37:2d:18:a8:28:5f:f4:2d:43:fd:39:dc:63:16:9f:df:29:
67:a0:31:ea:3b:42:e1:99:fd:14:21:95:05:7c:b3:57:d6:92:
43:90:75:d6:ce:2a:75:6d:53:b6:8d:0e:7a:68:9b:53:b1:6d:
ca:78:59:0f:d8:5a:9f:5e:e3:fb:20:35:fc:71:f2:6c:79:cd:
24:74:97:47:0e:40:f0:7a:35:25:32:83:a0:2a:64:02:d9:71:
c8:c8:23:e5:72:0f:67:d0:90:c0:d0:6d:0f:5c:5b:46:f4:d9:
dd:56:27:a9:c0:5b:a7:56:a8:21:fb:53:8f:57:04:74:80:92:
99:45:b5:35:cf:99:33:bc:9d:66:f5:c3:1c:5e:dc:f9:39:3e:
06:74:3b:fb:c4:16:7e:c8:06:e9:23:f7:52:1a:82:2f:e0:81:
cf:4c:e9:3f:bb:3b:60:02:1e:3f:10:f7:9c:c3:d2:f2:d8:48:
87:51:ba:8e:7d:13:4e:8a:19:25:e1:0a:59:e7:bb:65:08:a4:
29:84:a7:d0:83:3d:2e:b0:3e:f4:82:50:99:1e:72:30:3b:aa:
81:42:01:05:4d:ea:d5:fe:72:64:54:35:27:cb:1f:bc:23:a2:
0b:33:6c:19:70:09:83:1a:2a:c7:63:ca:6e:d7:b9:b8:52:db:
39:6a:6d:49
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNjI3NDJaFw0yMzAxMjUxNjI3NDJaMBgxFjAU
BgNVBAMMDTYxZjAyNTAxLTUwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvL+xOlU3+3gUEdUMUG+a/a695rjGome9o4BKxUziCUdqDLp2CHgvc1RPn
c7xZGCpg1muK3sPrAYgfsBB/SxslMSB43Uykug41MSAoAL9loxmpNTNRQCV7KOQR
CzqRGsDcyr2WjOMoxO9rlu4DAQm2fYv4NUx+o14szlvNl8Jknr0dIzBUvg1FQYY6
uJi5z4LMKvqGB1j4SQNr1Mg933tKzG7Q+3DRKEBFSmkz/311SpNp8vmytHCtuoP1
dZTjbD+DuI9yzDWrukmBW/lMogJaytS4TkWdQdTzZpmxBRqovy6GKFIoSabwRLCo
eVzs/z0OAk6Mi7QEmexX+TnRacRXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEICH
ErQBVzdDgIloRWhfHEnqwdowHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0JBMjQ0RjFBN0RGQjExRUNCRUY1MDFEODVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe/AwDQYJKoZIhvcNAQELBQAD
ggEBAE43LRioKF/0LUP9OdxjFp/fKWegMeo7QuGZ/RQhlQV8s1fWkkOQddbOKnVt
U7aNDnpom1Oxbcp4WQ/YWp9e4/sgNfxx8mx5zSR0l0cOQPB6NSUyg6AqZALZccjI
I+VyD2fQkMDQbQ9cW0b02d1WJ6nAW6dWqCH7U49XBHSAkplFtTXPmTO8nWb1wxxe
3Pk5PgZ0O/vEFn7IBukj91Iagi/ggc9M6T+7O2ACHj8Q95zD0vLYSIdRuo59E06K
GSXhClnnu2UIpCmEp9CDPS6wPvSCUJkecjA7qoFCAQVN6tX+cmRUNSfLH7wjogsz
bBlwCYMaKsdjym7XubhS2zlqbUk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org