Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E8A7F4EA3D8111EDBA418AB3F1222468.roa
File: E8A7F4EA3D8111EDBA418AB3F1222468.roa (raw, json)
Hash identifier: 4KvLLxBrY3qJy+6/6tMvnJs5tZ/pFYBbY1zPHKAWfgg=
Subject key identifier: 99:84:07:09:78:C0:AA:EF:18:C8:E3:6F:AD:D7:1D:9A:AD:F2:49:EE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 087F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E8A7F4EA3D8111EDBA418AB3F1222468.roa
Signing time: Mon 26 Sep 2022 09:59:28 +0000
ROA not before: Mon 26 Sep 2022 09:59:25 +0000
ROA not after: Tue 26 Sep 2023 09:59:25 +0000
asID: 203999
IP address blocks: 161.123.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:59:25 2022 GMT
Not After : Sep 26 09:59:25 2023 GMT
Subject: CN=63317800-2d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:92:42:8d:68:47:03:a5:c2:93:34:9e:0d:
21:c6:37:17:ce:8a:1f:ee:a2:14:88:d6:ff:a6:80:
74:76:3f:62:85:d2:d8:1b:53:58:67:b9:0f:45:18:
5d:23:ee:6b:9d:4b:6a:0b:c9:a8:7a:e3:6a:9c:35:
7a:4f:fa:00:2d:2e:ef:9f:c5:5c:51:92:52:48:97:
c9:b8:94:b9:5b:29:cc:c1:37:48:9a:10:a6:81:a1:
eb:6b:3c:4b:de:0f:dc:f4:96:c9:9c:05:46:53:bb:
87:6a:67:da:7f:60:70:e5:1d:54:ac:22:2c:cf:29:
ed:e6:16:77:61:5e:68:a9:a1:48:08:7c:4b:1c:dd:
a0:8a:58:a4:74:2d:74:2a:94:ae:6d:b8:60:51:bb:
92:4d:3f:cd:41:29:55:67:a0:c6:b9:62:26:1b:f5:
eb:ae:de:45:84:d3:2c:8d:38:84:f6:fb:55:1a:29:
84:d8:80:a4:d9:e3:34:8e:05:28:e5:64:9a:ef:24:
49:07:87:43:7f:80:66:61:15:3a:27:bb:ac:0c:37:
a8:c7:d3:12:66:f9:e2:18:79:2e:64:ba:e8:1f:f6:
d8:82:b4:7b:da:31:7f:43:d7:ac:7f:ce:9e:51:7f:
a3:41:50:57:52:e0:9c:13:f5:06:ed:6a:46:dc:fd:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:07:09:78:C0:AA:EF:18:C8:E3:6F:AD:D7:1D:9A:AD:F2:49:EE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E8A7F4EA3D8111EDBA418AB3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.156.0/22
Signature Algorithm: sha256WithRSAEncryption
94:42:9c:b8:ee:ed:ea:e5:69:72:d4:d1:78:32:d2:50:62:61:
2f:eb:46:5c:33:66:ab:f3:49:2a:c9:b1:9a:0e:7e:68:e7:45:
35:2f:93:9f:da:01:67:b8:19:37:86:8f:09:90:16:e9:c2:50:
42:61:a9:5f:3b:23:08:1e:24:05:b9:37:78:27:79:ba:d6:4d:
ff:03:36:d6:d9:5f:7d:9d:d0:ae:cc:7d:69:3e:98:2c:92:f1:
e0:bc:f8:b1:f9:0e:a5:6f:3e:76:55:c9:31:15:af:ea:93:ea:
71:d4:c3:93:69:90:11:e0:b9:b6:ce:ad:6c:0a:4a:ef:61:d2:
02:24:f7:ee:17:19:74:7f:e9:da:45:23:7f:b7:13:fa:b9:65:
9a:52:90:16:39:86:b3:54:96:bc:a4:7f:f4:20:21:ae:fe:29:
fc:24:49:19:0f:b9:e7:46:5c:b2:ae:14:83:3b:cb:36:06:39:
3a:32:cb:f7:7d:65:4d:10:ea:be:c6:99:7b:e1:30:63:b3:38:
60:ba:19:79:7e:5e:6d:64:db:63:d9:ac:cd:64:f5:87:80:46:
b8:4f:63:92:08:81:30:b3:10:cc:bc:c0:a4:14:89:98:34:c0:
e8:84:81:a0:41:1e:8c:71:6c:95:c8:ea:8b:09:ae:43:79:08:
64:c1:4c:76
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMjA5MjYwOTU5MjVaFw0yMzA5MjYwOTU5MjVaMBgxFjAU
BgNVBAMMDTYzMzE3ODAwLTJkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK75JCjWhHA6XCkzSeDSHGNxfOih/uohSI1v+mgHR2P2KF0tgbU1hnuQ9F
GF0j7mudS2oLyah642qcNXpP+gAtLu+fxVxRklJIl8m4lLlbKczBN0iaEKaBoetr
PEveD9z0lsmcBUZTu4dqZ9p/YHDlHVSsIizPKe3mFndhXmipoUgIfEsc3aCKWKR0
LXQqlK5tuGBRu5JNP81BKVVnoMa5YiYb9euu3kWE0yyNOIT2+1UaKYTYgKTZ4zSO
BSjlZJrvJEkHh0N/gGZhFTonu6wMN6jH0xJm+eIYeS5kuugf9tiCtHvaMX9D16x/
zp5Rf6NBUFdS4JwT9Qbtakbc/bV3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmYQH
CXjAqu8YyONvrdcdmq3ySe4wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0U4QTdGNEVBM0Q4MTExRURCQTQxOEFCM0YxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhe5wwDQYJKoZIhvcNAQELBQAD
ggEBAJRCnLju7erlaXLU0Xgy0lBiYS/rRlwzZqvzSSrJsZoOfmjnRTUvk5/aAWe4
GTeGjwmQFunCUEJhqV87IwgeJAW5N3gnebrWTf8DNtbZX32d0K7MfWk+mCyS8eC8
+LH5DqVvPnZVyTEVr+qT6nHUw5NpkBHgubbOrWwKSu9h0gIk9+4XGXR/6dpFI3+3
E/q5ZZpSkBY5hrNUlrykf/QgIa7+KfwkSRkPuedGXLKuFIM7yzYGOToyy/d9ZU0Q
6r7GmXvhMGOzOGC6GXl+Xm1k22PZrM1k9YeARrhPY5IIgTCzEMy8wKQUiZg0wOiE
gaBBHoxxbJXI6osJrkN5CGTBTHY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org