Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
File: D0E531167DF511ECAEDC14C75A40D577.roa (raw, json)
Hash identifier: dhZ5XjJiyWT8GyymbLQVXbVy0uL0ZaQVmwVprdApbg4=
Subject key identifier: DE:87:06:DA:A3:66:E7:84:F9:80:16:A9:12:52:69:24:5F:0C:CA:4C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 050C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
Signing time: Tue 25 Jan 2022 15:45:27 +0000
ROA not before: Tue 25 Jan 2022 15:45:23 +0000
ROA not after: Wed 25 Jan 2023 15:45:23 +0000
asID: 327790
IP address blocks: 161.123.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 15:45:23 2022 GMT
Not After : Jan 25 15:45:23 2023 GMT
Subject: CN=61f01b17-5431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:32:11:94:9d:c6:06:e0:9c:67:38:f0:8b:
85:c3:f6:0f:ac:fd:4d:f3:31:4b:46:8c:45:89:97:
f3:f8:bf:1e:c6:b1:44:99:f5:fb:6d:bd:5e:03:e9:
1b:14:de:0e:d5:8c:44:5e:80:bb:60:2b:91:bd:35:
54:26:7c:a7:bc:6e:44:b5:06:53:51:37:67:75:20:
38:70:ca:8b:e8:d9:a6:d5:29:d3:ca:a6:75:ea:47:
e2:d1:1c:0c:75:42:22:82:25:98:6f:c9:20:e7:fa:
31:b0:d0:12:53:59:c6:3d:1b:c4:91:97:e9:f4:61:
be:f5:fd:c3:5c:a0:3e:04:fd:df:f2:57:22:ea:a3:
81:0c:17:cc:d0:2a:78:a5:66:fc:18:70:7f:7f:1f:
d0:50:50:6d:35:85:9d:ed:bc:54:ea:07:30:12:88:
d2:15:62:86:18:c3:94:76:bd:7b:5c:da:2a:96:c9:
a9:35:29:8e:10:f6:f5:df:3d:00:7e:94:6d:6e:10:
2b:d2:ef:c6:1c:16:33:d6:7e:d4:7d:d5:95:b9:e5:
82:76:a2:31:1f:b2:48:42:7e:15:e1:a8:d5:18:03:
4f:da:38:71:22:be:bc:3f:54:b6:99:d9:dc:0a:74:
37:e0:fd:a0:62:9d:96:b8:2d:08:01:d3:3c:ec:86:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:06:DA:A3:66:E7:84:F9:80:16:A9:12:52:69:24:5F:0C:CA:4C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D0E531167DF511ECAEDC14C75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.26.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:9b:ba:96:99:64:6e:fe:f2:42:48:a8:d8:db:35:55:c9:84:
d6:fa:44:01:c3:23:48:c4:62:c2:54:3f:39:87:5f:dd:0f:e7:
f0:21:8b:a1:38:06:66:83:13:67:1b:42:8a:71:a7:3b:b2:e2:
d8:14:91:c5:af:35:44:19:3b:63:72:80:09:85:60:95:45:9f:
56:9d:f1:57:41:c3:9b:bd:52:a0:ff:22:36:e4:de:b7:7d:b6:
6f:82:c5:b8:2c:74:d2:2b:77:1f:3f:e5:e6:a0:fc:d8:16:7e:
d2:2e:65:3b:49:fa:46:6d:7f:af:05:f5:e4:77:89:9e:d6:b3:
d4:1b:f7:77:7a:b0:6a:2f:c2:ee:f8:55:79:28:05:72:07:ea:
36:c5:7b:10:34:43:c0:d1:e9:88:70:f6:9e:13:e2:94:d0:f2:
1a:63:f1:60:cb:41:27:84:ee:3e:c8:21:9b:83:eb:00:32:2e:
a7:ea:1b:5b:1f:ee:cf:14:5e:9f:f4:f8:ae:77:92:65:22:6a:
d6:5e:a8:96:49:e1:c1:f7:2a:75:90:68:c3:03:b6:69:e5:d9:
ac:42:a3:ad:d9:a8:ad:27:6b:7c:a5:42:9a:8a:c9:d1:4e:be:
b8:16:67:7b:df:07:15:97:68:f4:f7:ae:9e:65:48:11:ff:03:
3f:cb:be:d4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjAxMjUxNTQ1MjNaFw0yMzAxMjUxNTQ1MjNaMBgxFjAU
BgNVBAMMDTYxZjAxYjE3LTU0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCloTIRlJ3GBuCcZzjwi4XD9g+s/U3zMUtGjEWJl/P4vx7GsUSZ9fttvV4D
6RsU3g7VjERegLtgK5G9NVQmfKe8bkS1BlNRN2d1IDhwyovo2abVKdPKpnXqR+LR
HAx1QiKCJZhvySDn+jGw0BJTWcY9G8SRl+n0Yb71/cNcoD4E/d/yVyLqo4EMF8zQ
KnilZvwYcH9/H9BQUG01hZ3tvFTqBzASiNIVYoYYw5R2vXtc2iqWyak1KY4Q9vXf
PQB+lG1uECvS78YcFjPWftR91ZW55YJ2ojEfskhCfhXhqNUYA0/aOHEivrw/VLaZ
2dwKdDfg/aBinZa4LQgB0zzshgjlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU3ocG
2qNm54T5gBapElJpJF8MykwwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0QwRTUzMTE2N0RGNTExRUNBRURDMTRDNzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhexowDQYJKoZIhvcNAQELBQAD
ggEBAKabupaZZG7+8kJIqNjbNVXJhNb6RAHDI0jEYsJUPzmHX90P5/Ahi6E4BmaD
E2cbQopxpzuy4tgUkcWvNUQZO2NygAmFYJVFn1ad8VdBw5u9UqD/Ijbk3rd9tm+C
xbgsdNIrdx8/5eag/NgWftIuZTtJ+kZtf68F9eR3iZ7Ws9Qb93d6sGovwu74VXko
BXIH6jbFexA0Q8DR6Yhw9p4T4pTQ8hpj8WDLQSeE7j7IIZuD6wAyLqfqG1sf7s8U
Xp/0+K53kmUiatZeqJZJ4cH3KnWQaMMDtmnl2axCo63ZqK0na3ylQpqKydFOvrgW
Z3vfBxWXaPT3rp5lSBH/Az/LvtQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org