Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DDAE98501E6E11EDA7A1BFD8F1222468.roa
File: DDAE98501E6E11EDA7A1BFD8F1222468.roa (raw, json)
Hash identifier: T+hHi/W9/+DRGepFSpusP64unlcis21rZfTj0bKuXb0=
Subject key identifier: 75:00:7B:D6:92:64:50:BB:65:D0:6C:1A:AD:02:18:87:44:5A:0D:F5
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 07EA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DDAE98501E6E11EDA7A1BFD8F1222468.roa
Signing time: Wed 17 Aug 2022 20:55:03 +0000
ROA not before: Wed 17 Aug 2022 20:54:59 +0000
ROA not after: Thu 17 Aug 2023 20:54:59 +0000
asID: 35916
IP address blocks: 161.123.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 17 20:54:59 2022 GMT
Not After : Aug 17 20:54:59 2023 GMT
Subject: CN=62fd55a7-25f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:89:d8:3a:1e:08:92:5e:e8:7b:66:ac:a5:bc:
0d:62:a6:95:ed:a2:2f:96:e6:7b:a6:36:10:25:19:
39:8f:ae:94:8b:b4:3f:91:3e:27:37:e3:c0:a6:4e:
df:a3:e4:25:58:41:92:cd:f6:fe:f1:a0:35:78:06:
63:cf:5a:c5:7b:25:c9:ca:77:0d:d8:e6:a0:40:99:
6d:a3:7f:45:c4:42:ab:41:63:1b:e8:b2:dc:56:29:
57:89:df:b3:a6:80:1e:67:9e:2c:6d:53:9a:c1:e8:
63:5d:df:d3:c5:94:39:d5:bb:b1:1a:cd:91:bc:31:
d8:06:63:ac:0a:dd:8b:3b:5a:3f:82:76:65:64:74:
37:1b:b7:22:1d:73:83:60:6c:77:05:0a:37:cd:d4:
fa:91:03:5d:67:2d:ad:f5:a5:c8:04:c1:70:57:70:
d5:da:51:fe:01:c2:38:7f:d3:87:a5:3b:8a:d9:cd:
7c:06:7d:32:93:39:80:79:77:14:0a:e8:c3:07:d6:
bd:f2:d7:40:3f:e5:fd:72:91:fb:b8:9c:60:ac:88:
59:27:a0:a1:8d:8d:e8:94:6b:c5:17:7e:a0:b3:cc:
f2:e8:81:ff:81:41:3d:4e:92:fe:ad:45:24:1c:eb:
21:c4:87:d5:f3:3b:81:86:92:f0:f9:ae:b0:8b:a4:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:7B:D6:92:64:50:BB:65:D0:6C:1A:AD:02:18:87:44:5A:0D:F5
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DDAE98501E6E11EDA7A1BFD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.131.0/24
Signature Algorithm: sha256WithRSAEncryption
21:28:60:92:bc:cb:3b:34:2b:0d:bb:d2:f1:d2:1c:01:05:fc:
ff:b2:79:44:f6:15:5b:71:c4:51:ad:f9:f8:64:8a:99:60:65:
cb:2c:e1:70:a4:fa:0e:2f:63:c5:77:24:16:4d:dc:cd:2c:75:
7f:db:71:93:d9:d7:64:46:75:fb:f7:4b:8b:d2:98:08:98:62:
cb:65:89:9d:86:80:a7:d1:42:1b:b3:c1:af:ae:27:d3:ca:d7:
69:1e:38:03:a8:42:41:16:11:9a:a1:e7:8f:25:e6:99:9e:15:
29:dd:9d:04:94:0e:4d:d1:9b:dd:8f:23:65:10:a6:b3:67:68:
be:1e:7e:c2:b0:86:f1:73:0b:59:ff:30:91:d5:b9:15:70:ba:
b2:19:bd:18:da:10:cf:1d:1f:79:78:f1:75:3e:a7:35:23:cd:
31:c7:6c:f2:00:78:2d:a1:93:19:cd:e6:f2:dc:02:39:2c:8c:
25:24:df:a9:be:15:33:e2:72:2c:af:7b:f4:2d:61:1b:f9:c4:
88:b2:fd:9e:95:f4:76:8d:63:20:99:ab:ff:17:cd:cf:e0:14:
b3:d4:10:7b:cb:40:44:26:cc:35:d0:78:b9:11:d0:26:ad:ce:
d6:61:8b:4c:45:26:5b:9a:60:e2:30:0a:44:41:23:16:36:c1:
ca:ac:6d:2d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB+owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA4MTcyMDU0NTlaFw0yMzA4MTcyMDU0NTlaMBgxFjAU
BgNVBAMMDTYyZmQ1NWE3LTI1ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1idg6HgiSXuh7ZqylvA1ippXtoi+W5numNhAlGTmPrpSLtD+RPic348Cm
Tt+j5CVYQZLN9v7xoDV4BmPPWsV7JcnKdw3Y5qBAmW2jf0XEQqtBYxvostxWKVeJ
37OmgB5nnixtU5rB6GNd39PFlDnVu7EazZG8MdgGY6wK3Ys7Wj+CdmVkdDcbtyId
c4NgbHcFCjfN1PqRA11nLa31pcgEwXBXcNXaUf4Bwjh/04elO4rZzXwGfTKTOYB5
dxQK6MMH1r3y10A/5f1ykfu4nGCsiFknoKGNjeiUa8UXfqCzzPLogf+BQT1Okv6t
RSQc6yHEh9XzO4GGkvD5rrCLpPTrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUdQB7
1pJkULtl0GwarQIYh0RaDfUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0REQUU5ODUwMUU2RTExRURBN0ExQkZEOEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe4MwDQYJKoZIhvcNAQELBQAD
ggEBACEoYJK8yzs0Kw270vHSHAEF/P+yeUT2FVtxxFGt+fhkiplgZcss4XCk+g4v
Y8V3JBZN3M0sdX/bcZPZ12RGdfv3S4vSmAiYYstliZ2GgKfRQhuzwa+uJ9PK12ke
OAOoQkEWEZqh548l5pmeFSndnQSUDk3Rm92PI2UQprNnaL4efsKwhvFzC1n/MJHV
uRVwurIZvRjaEM8dH3l48XU+pzUjzTHHbPIAeC2hkxnN5vLcAjksjCUk36m+FTPi
ciyve/QtYRv5xIiy/Z6V9HaNYyCZq/8Xzc/gFLPUEHvLQEQmzDXQeLkR0CatztZh
i0xFJluaYOIwCkRBIxY2wcqsbS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org