Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB7547F6404A11EEBE517C3D4AD9E6FC.roa
File: DB7547F6404A11EEBE517C3D4AD9E6FC.roa (raw, json)
Hash identifier: rYN0edUpD3HReBYSCkmIzf2+tRkAK1jGByHEv6u4JGw=
Subject key identifier: D4:6F:2C:AD:B9:48:D9:A0:D1:B4:82:A7:69:C1:6A:D9:F3:D3:8A:A5
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BB9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB7547F6404A11EEBE517C3D4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 17:47:55 +0000
ROA not before: Mon 21 Aug 2023 17:47:52 +0000
ROA not after: Wed 21 Aug 2024 17:47:52 +0000
asID: 207990
IP address blocks: 161.123.238.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 21 17:47:52 2023 GMT
Not After : Aug 21 17:47:52 2024 GMT
Subject: CN=64e3a34b-836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:64:49:4c:f2:5d:19:56:05:a1:b8:b0:83:
66:82:c5:e4:7d:12:c1:da:aa:6f:1e:e5:b2:7e:95:
b7:16:c5:5d:51:fd:b5:dd:90:84:4b:43:7e:f5:3b:
fd:18:53:df:f0:13:71:c1:78:3a:c2:9b:4a:98:e4:
55:77:f8:65:d5:6d:45:e6:b3:64:0f:9e:17:49:ad:
a1:88:9c:b3:5f:41:0f:05:81:be:0f:bc:72:a4:cb:
ea:97:86:0e:f7:58:9c:4b:71:4c:90:8b:3a:4f:87:
cb:77:1a:7f:94:93:62:36:c7:17:b3:48:15:ea:5a:
fd:9b:84:48:a3:8d:42:22:83:76:6d:c6:4b:f5:43:
75:06:9f:34:9a:0b:30:39:c2:70:57:df:27:79:80:
ec:f3:f8:c1:24:ce:c4:bf:f0:4b:c5:7a:6f:d2:b2:
d9:fe:6b:ad:28:77:4a:da:f4:69:63:db:7f:f4:e8:
28:0a:56:85:f2:15:05:31:e0:64:9c:c2:43:44:b3:
11:44:2a:49:29:06:77:df:95:da:0e:83:33:bf:5f:
4c:40:db:a4:b9:3d:65:1d:80:73:8b:24:04:3a:80:
f8:6f:62:cc:ac:6f:d0:b5:34:ef:8b:68:a6:10:05:
77:4a:c4:a7:80:0b:e8:4c:59:73:8e:e1:59:5b:81:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:2C:AD:B9:48:D9:A0:D1:B4:82:A7:69:C1:6A:D9:F3:D3:8A:A5
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DB7547F6404A11EEBE517C3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:2e:5a:6c:83:97:a8:81:7f:fd:4b:e2:33:f3:a1:94:9e:73:
09:72:2c:78:43:8b:92:26:06:53:70:78:98:a6:5c:43:4f:3e:
59:7f:34:c9:8c:2f:7a:cb:8b:b5:bd:ff:c7:07:08:01:4a:74:
c2:52:d5:f1:a9:c6:d6:01:c4:f5:18:91:0a:09:d8:0a:50:cb:
2d:0d:a1:0b:d4:90:f4:a1:0f:41:d3:60:f3:cd:e7:be:cd:36:
fc:8e:bf:6a:ea:bf:19:b5:92:91:96:1b:74:81:5b:2e:fd:88:
cd:49:8c:d6:c5:3c:78:4a:80:26:b4:20:50:ec:68:0c:b0:22:
23:13:d3:6c:5c:f4:81:2f:9c:50:f2:79:23:ef:2f:19:f7:f4:
e5:56:1a:6a:80:ec:2b:21:72:45:64:ba:6f:83:f7:17:fe:15:
a1:ac:82:1e:81:e5:1f:83:1b:8f:08:3f:66:f0:00:e7:17:1c:
1a:c8:c0:a3:c8:18:27:0e:45:a3:12:da:c1:eb:5b:20:7f:25:
15:26:04:b3:0e:89:d4:8b:2a:f0:9e:77:ec:78:de:c5:af:5e:
85:e0:32:78:40:06:c5:a3:e2:d9:82:c4:eb:7b:6a:e0:a9:d4:
a8:3b:f6:82:88:64:06:f8:6b:4c:69:a4:b8:93:79:78:d2:a7:
bd:b7:53:fa
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA4MjExNzQ3NTJaFw0yNDA4MjExNzQ3NTJaMBgxFjAU
BgNVBAMTDTY0ZTNhMzRiLTgzNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxFmRJTPJdGVYFobiwg2aCxeR9EsHaqm8e5bJ+lbcWxV1R/bXdkIRLQ371
O/0YU9/wE3HBeDrCm0qY5FV3+GXVbUXms2QPnhdJraGInLNfQQ8Fgb4PvHKky+qX
hg73WJxLcUyQizpPh8t3Gn+Uk2I2xxezSBXqWv2bhEijjUIig3Ztxkv1Q3UGnzSa
CzA5wnBX3yd5gOzz+MEkzsS/8EvFem/Sstn+a60od0ra9Glj23/06CgKVoXyFQUx
4GScwkNEsxFEKkkpBnffldoOgzO/X0xA26S5PWUdgHOLJAQ6gPhvYsysb9C1NO+L
aKYQBXdKxKeAC+hMWXOO4VlbgXuPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1G8s
rblI2aDRtIKnacFq2fPTiqUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0RCNzU0N0Y2NDA0QTExRUVCRTUxN0MzRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGhe+4wDQYJKoZIhvcNAQELBQAD
ggEBAKkuWmyDl6iBf/1L4jPzoZSecwlyLHhDi5ImBlNweJimXENPPll/NMmML3rL
i7W9/8cHCAFKdMJS1fGpxtYBxPUYkQoJ2ApQyy0NoQvUkPShD0HTYPPN577NNvyO
v2rqvxm1kpGWG3SBWy79iM1JjNbFPHhKgCa0IFDsaAywIiMT02xc9IEvnFDyeSPv
Lxn39OVWGmqA7CshckVkum+D9xf+FaGsgh6B5R+DG48IP2bwAOcXHBrIwKPIGCcO
RaMS2sHrWyB/JRUmBLMOidSLKvCed+x43sWvXoXgMnhABsWj4tmCxOt7auCp1Kg7
9oKIZAb4a0xppLiTeXjSp723U/o=
-----END CERTIFICATE-----
Generated at Thu Aug 22 01:51:12 2024 by rpki-client on console-fra.rpki-client.org