Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D91C2C021FE511EE95F071544AD9E6FC.roa
File: D91C2C021FE511EE95F071544AD9E6FC.roa (raw, json)
Hash identifier: 6/5OFszO9qdgHL8qVF+jHgR4279QEz/slIp1A1SLsb0=
Subject key identifier: 9F:69:4B:99:8A:9E:FC:28:42:D0:C1:6A:CA:76:46:98:92:50:9E:83
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B4B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D91C2C021FE511EE95F071544AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:24:15 +0000
ROA not before: Tue 11 Jul 2023 12:24:11 +0000
ROA not after: Thu 11 Jul 2024 12:24:11 +0000
asID: 133499
IP address blocks: 161.123.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:24:11 2023 GMT
Not After : Jul 11 12:24:11 2024 GMT
Subject: CN=64ad49ee-133c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:24:9b:78:08:5e:c9:76:ae:1d:d1:ad:4a:
9e:09:10:cf:1d:67:3b:6a:d5:71:2e:48:91:35:da:
41:1d:29:36:ac:c9:b4:00:0c:9f:5d:8b:50:51:6e:
a5:48:29:ee:93:a4:0f:55:56:32:71:23:b7:a7:6f:
8e:0d:36:d2:b0:ed:ba:ec:2a:d8:41:4a:ee:5c:b4:
05:b5:d3:d1:a7:d8:34:a2:09:08:10:e4:d1:8f:6c:
00:17:ad:01:0e:a9:a9:5c:79:0a:96:b8:ca:56:70:
30:81:6f:ef:e9:fd:7d:30:dd:21:8d:f6:10:b0:88:
55:9d:f5:e0:60:14:8e:06:4e:30:42:73:3f:d8:50:
79:b5:f7:0d:d5:12:09:c5:93:22:b2:de:6f:ec:d0:
e7:a9:d2:a2:ab:37:34:79:fc:6f:c2:83:d5:c3:54:
0b:6e:0e:6e:b6:89:96:24:51:e9:ca:6e:89:af:74:
63:06:44:07:f9:8d:b0:e1:3b:9d:81:c0:33:74:8f:
ef:d7:f7:6e:c1:4d:6e:68:f3:ab:f4:8b:34:27:61:
c2:38:8b:47:1a:eb:ea:54:0d:e5:04:15:ae:b7:39:
9d:3d:51:02:8b:86:10:c3:90:09:2f:64:e3:73:08:
33:82:96:ca:8b:b3:e4:91:08:90:fc:ce:ae:3c:b8:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:4B:99:8A:9E:FC:28:42:D0:C1:6A:CA:76:46:98:92:50:9E:83
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D91C2C021FE511EE95F071544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e1:85:ad:eb:98:4a:34:b9:14:56:2b:a9:ee:e6:3f:22:2a:
6e:93:f2:dd:0f:b5:01:36:24:6a:15:2a:44:8a:2b:19:3a:e6:
2a:b8:11:c3:93:ec:b1:04:94:5e:73:22:42:f1:05:f1:7c:e5:
57:b6:04:43:5b:7a:2d:b6:a9:b2:21:c1:01:2c:93:09:38:ca:
76:a5:dd:c3:f8:b8:36:94:1e:b7:5a:62:65:40:81:f6:ca:12:
dd:5f:4c:98:6b:f1:fb:c2:53:f1:5c:6d:80:43:1e:a3:79:57:
b6:15:cd:96:71:89:3f:12:da:d3:be:e8:ea:bb:c5:bc:06:2f:
80:92:b4:5b:7c:df:54:d4:a2:c9:9f:41:9f:06:ef:95:97:17:
7b:b3:5c:74:4e:34:db:01:3e:05:76:0b:56:ab:d9:b5:f5:de:
a0:68:aa:37:6d:ab:0e:13:a4:f3:9e:81:7e:37:4b:b0:89:ae:
aa:16:97:89:35:aa:52:22:1e:b1:3e:d0:15:fc:32:fb:e0:9b:
15:d9:ea:8a:bb:ab:71:97:4c:ae:7e:1e:ae:31:8b:d0:cd:70:
9b:c8:74:6c:89:fa:a4:ae:10:40:63:4f:8b:ec:39:51:71:69:
8f:8d:ef:ac:2c:cc:20:ce:07:f5:3e:aa:aa:83:8b:70:5d:45:
b7:05:66:f5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA3MTExMjI0MTFaFw0yNDA3MTExMjI0MTFaMBgxFjAU
BgNVBAMTDTY0YWQ0OWVlLTEzM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8KiSbeAheyXauHdGtSp4JEM8dZztq1XEuSJE12kEdKTasybQADJ9di1BR
bqVIKe6TpA9VVjJxI7enb44NNtKw7brsKthBSu5ctAW109Gn2DSiCQgQ5NGPbAAX
rQEOqalceQqWuMpWcDCBb+/p/X0w3SGN9hCwiFWd9eBgFI4GTjBCcz/YUHm19w3V
EgnFkyKy3m/s0Oep0qKrNzR5/G/Cg9XDVAtuDm62iZYkUenKbomvdGMGRAf5jbDh
O52BwDN0j+/X927BTW5o86v0izQnYcI4i0ca6+pUDeUEFa63OZ09UQKLhhDDkAkv
ZONzCDOClsqLs+SRCJD8zq48uOj7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUn2lL
mYqe/ChC0MFqynZGmJJQnoMwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0Q5MUMyQzAyMUZFNTExRUU5NUYwNzE1NDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe9IwDQYJKoZIhvcNAQELBQAD
ggEBAEvhha3rmEo0uRRWK6nu5j8iKm6T8t0PtQE2JGoVKkSKKxk65iq4EcOT7LEE
lF5zIkLxBfF85Ve2BENbei22qbIhwQEskwk4ynal3cP4uDaUHrdaYmVAgfbKEt1f
TJhr8fvCU/FcbYBDHqN5V7YVzZZxiT8S2tO+6Oq7xbwGL4CStFt831TUosmfQZ8G
75WXF3uzXHRONNsBPgV2C1ar2bX13qBoqjdtqw4TpPOegX43S7CJrqoWl4k1qlIi
HrE+0BX8MvvgmxXZ6oq7q3GXTK5+Hq4xi9DNcJvIdGyJ+qSuEEBjT4vsOVFxaY+N
76wszCDOB/U+qqqDi3BdRbcFZvU=
-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org