Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BBCD99FAFD1E11ECAEB42A85F1222468.roa
File: BBCD99FAFD1E11ECAEB42A85F1222468.roa (raw, json)
Hash identifier: eM/pYrXJYnuiYd2ph4lkTcBqLq+glYFwy+ctDg5nflE=
Subject key identifier: 5D:7B:CE:22:7A:00:6D:25:2F:41:55:7B:5E:3F:EC:0B:CB:0B:39:47
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0798
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BBCD99FAFD1E11ECAEB42A85F1222468.roa
Signing time: Wed 06 Jul 2022 11:28:18 +0000
ROA not before: Wed 06 Jul 2022 11:28:15 +0000
ROA not after: Thu 06 Jul 2023 11:28:15 +0000
asID: 44592
IP address blocks: 161.123.248.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944 (0x798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 6 11:28:15 2022 GMT
Not After : Jul 6 11:28:15 2023 GMT
Subject: CN=62c571d2-9461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:f3:21:81:de:63:0e:12:36:55:1e:10:a7:
64:8b:9a:e8:83:55:ef:99:a7:b9:f1:05:07:b0:3c:
34:ca:d0:09:7e:f1:e1:c0:33:80:5f:19:44:3f:25:
21:af:9f:fd:34:a2:24:32:05:94:1b:48:51:bf:bb:
83:db:a8:8f:92:5e:dc:c1:cb:de:ad:74:1b:36:7b:
95:db:3b:90:7e:29:8a:f8:68:75:28:89:e4:9c:a8:
4d:c7:d0:3d:1a:16:bc:f2:b5:95:6b:ab:1e:26:79:
bb:7f:9c:fb:3e:31:af:0a:a8:85:9b:cb:fe:d5:3a:
77:3f:14:67:c0:d5:64:58:45:74:cf:65:c9:61:e2:
2d:92:8d:6a:38:cc:16:32:08:d4:55:ad:92:93:0b:
6f:18:a1:fa:82:ce:41:2c:cb:1d:fa:6b:7e:0d:fd:
7a:b7:ba:47:d3:4e:64:0a:c1:f6:fc:f8:e1:eb:9f:
28:6c:ee:a5:0a:4b:69:27:e7:13:58:f5:8e:81:52:
62:3a:9a:1f:c8:54:08:01:16:05:2b:8f:5b:10:9a:
01:7f:ae:cc:bd:04:5d:10:d6:db:3d:0c:0e:33:f5:
be:58:c6:82:df:67:bf:49:4e:b3:fc:1e:12:1e:f7:
cf:86:dd:1c:ab:46:33:a4:95:d0:1d:ff:01:08:f7:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:CE:22:7A:00:6D:25:2F:41:55:7B:5E:3F:EC:0B:CB:0B:39:47
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BBCD99FAFD1E11ECAEB42A85F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.248.0/21
Signature Algorithm: sha256WithRSAEncryption
28:c7:0b:30:11:c6:4d:68:2d:9f:f8:70:90:07:06:44:c7:97:
21:75:3f:da:70:fd:5f:9f:0a:65:9c:f6:4e:96:7d:01:42:78:
75:83:db:f6:ef:8e:1a:68:e2:1d:7f:e1:d5:2d:29:79:a4:ec:
c7:ba:38:cc:95:3b:48:d0:3d:66:0f:8a:80:bb:68:af:ce:4b:
5e:c8:95:c8:f8:b9:7c:d3:02:f7:02:f8:2f:eb:7c:d4:10:67:
82:c2:a0:10:dc:be:e2:d9:6e:37:1d:98:09:c8:93:19:c0:46:
23:8f:15:d8:ac:21:f9:cb:8e:4c:70:5a:9c:a1:ea:70:0d:24:
94:c8:a0:f8:78:0b:d0:17:c2:08:c7:32:0f:09:7a:97:38:1d:
b9:39:ca:8a:be:70:ba:63:4e:ff:60:8a:f9:3b:1b:e8:ac:37:
82:75:bf:45:ad:69:82:55:b4:21:a7:b4:de:cf:de:77:a4:6a:
e0:53:13:a0:40:57:91:01:96:91:34:3d:1d:2c:08:b7:18:c3:
a0:17:f3:8e:d3:86:7c:c2:fe:86:32:f0:d3:5b:11:b3:03:10:
f1:e2:6b:8d:e1:ef:e0:6d:01:bf:74:e5:39:50:83:24:ae:4b:
7b:86:66:12:cb:d3:47:ae:33:df:ea:47:ee:75:ac:3a:78:06:
2d:bc:7c:08
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA3MDYxMTI4MTVaFw0yMzA3MDYxMTI4MTVaMBgxFjAU
BgNVBAMMDTYyYzU3MWQyLTk0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEsfMhgd5jDhI2VR4Qp2SLmuiDVe+Zp7nxBQewPDTK0Al+8eHAM4BfGUQ/
JSGvn/00oiQyBZQbSFG/u4PbqI+SXtzBy96tdBs2e5XbO5B+KYr4aHUoieScqE3H
0D0aFrzytZVrqx4mebt/nPs+Ma8KqIWby/7VOnc/FGfA1WRYRXTPZclh4i2SjWo4
zBYyCNRVrZKTC28YofqCzkEsyx36a34N/Xq3ukfTTmQKwfb8+OHrnyhs7qUKS2kn
5xNY9Y6BUmI6mh/IVAgBFgUrj1sQmgF/rsy9BF0Q1ts9DA4z9b5YxoLfZ79JTrP8
HhIe98+G3RyrRjOkldAd/wEI94P5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXXvO
InoAbSUvQVV7Xj/sC8sLOUcwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0JCQ0Q5OUZBRkQxRTExRUNBRUI0MkE4NUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOhe/gwDQYJKoZIhvcNAQELBQAD
ggEBACjHCzARxk1oLZ/4cJAHBkTHlyF1P9pw/V+fCmWc9k6WfQFCeHWD2/bvjhpo
4h1/4dUtKXmk7Me6OMyVO0jQPWYPioC7aK/OS17Ilcj4uXzTAvcC+C/rfNQQZ4LC
oBDcvuLZbjcdmAnIkxnARiOPFdisIfnLjkxwWpyh6nANJJTIoPh4C9AXwgjHMg8J
epc4Hbk5yoq+cLpjTv9givk7G+isN4J1v0WtaYJVtCGntN7P3nekauBTE6BAV5EB
lpE0PR0sCLcYw6AX847ThnzC/oYy8NNbEbMDEPHia43h7+BtAb905TlQgySuS3uG
ZhLL00euM9/qR+51rDp4Bi28fAg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org