Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/09242EFE3D8311EDA5A9B1B6F1222468.roa
File: 09242EFE3D8311EDA5A9B1B6F1222468.roa (raw, json)
Hash identifier: V4C7eEaG6Dc+aKgMxge2yprJw84189YIIzCR50UrtEM=
Subject key identifier: A6:2F:DE:66:4C:F3:26:19:7A:6A:9B:8C:E3:2C:FF:D9:7B:DD:7C:F9
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0895
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/09242EFE3D8311EDA5A9B1B6F1222468.roa
Signing time: Mon 26 Sep 2022 10:07:32 +0000
ROA not before: Mon 26 Sep 2022 10:07:29 +0000
ROA not after: Tue 26 Sep 2023 10:07:29 +0000
asID: 203999
IP address blocks: 161.123.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197 (0x895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:07:29 2022 GMT
Not After : Sep 26 10:07:29 2023 GMT
Subject: CN=633179e4-88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:53:89:89:6c:28:07:fc:30:2e:af:fa:20:
db:23:b3:49:dc:c2:6c:ff:03:62:1d:7b:3a:f1:65:
da:05:42:58:09:71:07:b6:10:dc:e7:8f:21:d6:cc:
5b:04:e2:ec:98:bb:7f:72:33:5e:2a:53:44:09:8e:
cc:5b:69:8f:0f:7f:a5:31:50:c4:da:20:ae:64:e5:
b1:b9:16:5d:0e:ee:f0:e7:24:a0:f6:d3:e0:d1:a7:
52:91:5c:a0:b2:8a:0f:a1:87:72:e9:42:f5:ce:8e:
f2:00:a6:b7:94:b0:43:0f:ff:63:de:f0:bd:c9:4f:
b2:68:c8:01:d4:37:58:7f:82:7d:86:d1:e9:b7:48:
7a:a7:1b:d1:8f:17:00:18:58:9f:54:a8:df:6d:33:
52:28:c4:95:08:f8:79:ac:73:a8:1d:bc:cb:34:8c:
49:45:96:6b:28:d8:16:1f:1d:b1:f8:b8:e3:8e:67:
19:ed:28:6f:69:5d:82:34:b6:08:a9:10:c7:7b:a0:
a1:45:f1:76:db:ec:99:60:fe:dd:cf:cd:a4:50:5c:
bc:ab:be:55:c2:ae:9b:0b:e1:83:3e:a9:4a:44:c6:
8e:fa:3e:83:dc:c6:82:d0:74:ab:dd:e6:30:cd:b4:
b9:0d:81:19:c6:bd:36:01:9e:a5:52:f2:49:14:95:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:DE:66:4C:F3:26:19:7A:6A:9B:8C:E3:2C:FF:D9:7B:DD:7C:F9
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/09242EFE3D8311EDA5A9B1B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:cc:e3:35:73:fd:a7:32:72:c8:f1:e3:82:52:b4:82:d1:dc:
dd:38:81:60:a7:d5:51:e7:ad:82:98:05:5b:18:89:d9:83:94:
96:83:5e:77:58:fb:81:3e:55:4f:5f:53:df:59:6f:e5:68:51:
da:92:d9:89:2a:1e:1c:a4:36:ff:0c:84:a5:66:f2:bf:06:59:
85:9f:24:8d:a3:5d:c5:8d:8f:69:57:32:a5:bf:09:ff:78:cc:
88:98:8c:0a:31:1c:92:0e:30:43:2d:b5:1d:63:65:91:bc:46:
bf:84:9a:a1:ed:9f:0d:13:7e:8f:e8:0a:36:5a:cc:f9:6e:df:
fd:9f:e3:9e:c0:9a:7c:10:4e:f8:86:a6:ad:45:13:e7:ec:78:
3e:db:9f:c7:dc:02:f2:06:c0:99:eb:34:01:17:57:82:d5:d8:
4e:46:76:68:f4:a5:52:66:99:ab:67:e7:67:0d:ed:69:b6:08:
31:5a:00:d5:63:99:c7:0b:00:49:4f:11:c4:08:ea:9b:e3:5f:
11:94:62:13:08:8f:fc:17:32:49:3c:79:66:9a:7f:3b:35:28:
9a:32:7b:34:9b:8d:a8:f7:7f:3a:52:23:df:00:ea:d8:ae:48:
fe:fa:d4:76:b3:68:9f:11:60:d6:85:0f:0b:91:44:bf:4f:3c:
5d:5c:ee:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org