Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BA3EED8F16311ECB5CF02B6F1222468.roa
File: 0BA3EED8F16311ECB5CF02B6F1222468.roa (raw, json)
Hash identifier: dvX1E4tm+56OG0u63o5jZsOTN2EMJrizuE7aMRwykj4=
Subject key identifier: 5D:0E:D0:49:41:73:48:70:3A:E5:42:82:A6:B0:4B:AD:C3:71:5E:11
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0771
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BA3EED8F16311ECB5CF02B6F1222468.roa
Signing time: Tue 21 Jun 2022 13:07:04 +0000
ROA not before: Tue 21 Jun 2022 13:07:01 +0000
ROA not after: Wed 21 Jun 2023 13:07:01 +0000
asID: 203999
IP address blocks: 161.123.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 21 13:07:01 2022 GMT
Not After : Jun 21 13:07:01 2023 GMT
Subject: CN=62b1c278-0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:7f:c6:7d:b2:d2:f4:91:c0:a8:59:28:14:
46:41:7f:c5:fd:91:d2:14:9c:c0:b3:94:b9:6b:af:
b5:e4:b4:03:e9:4f:1f:72:87:fa:cc:71:8d:14:d4:
59:5b:ca:98:0d:2e:92:34:a8:31:8f:33:4c:0e:f6:
07:14:ec:1c:ad:ff:d8:4d:b5:03:60:58:54:e4:c1:
a5:c1:61:68:19:4c:31:6e:1e:4d:d3:a8:a1:3c:c8:
43:00:80:fa:cd:97:35:07:3b:ce:be:78:c8:53:2c:
78:68:38:f0:4d:d6:9d:63:a9:ac:f0:3d:82:89:c2:
5d:a5:72:c8:7c:d8:6a:9f:f2:2f:e7:9e:17:a5:c1:
f1:86:a2:75:a4:47:2c:fe:3f:ba:6b:a1:bb:12:5d:
31:19:e4:78:47:78:53:2b:1e:83:71:d6:e7:ff:d5:
13:97:f2:90:af:45:08:39:e6:26:42:31:1d:98:00:
1a:6b:00:bb:c8:87:df:48:bb:ec:00:4a:92:03:0b:
49:a0:c5:cc:25:16:66:65:9f:50:77:e3:f9:05:c6:
e7:e0:7b:c9:6c:68:86:63:24:fc:81:bc:e7:80:b0:
d2:b5:8d:32:e3:29:00:a2:13:98:2a:6d:30:90:4e:
8c:d6:bc:00:ae:c5:6d:74:df:84:60:eb:71:4d:7a:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0E:D0:49:41:73:48:70:3A:E5:42:82:A6:B0:4B:AD:C3:71:5E:11
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BA3EED8F16311ECB5CF02B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:37:0d:72:eb:8c:78:95:16:ee:74:6e:e8:f8:37:0d:1b:74:
30:6f:eb:7d:8f:84:ff:b2:67:87:4d:ea:8e:9a:62:3b:c2:03:
0e:89:a1:19:41:49:ae:00:3d:3d:63:9b:75:7b:41:ab:0c:b2:
fa:c3:d6:65:bd:3d:30:f9:d7:90:f4:fa:45:9b:15:1d:fe:ab:
05:7f:09:2b:35:8b:e8:30:a0:93:42:f5:2c:39:7c:a2:2d:e9:
7c:2d:84:e0:e6:02:c6:35:84:e3:f0:ce:d0:08:b3:c3:38:40:
27:c0:56:ae:f0:a1:ea:29:1e:87:9d:68:20:97:8a:46:3b:6f:
11:d4:19:03:d5:32:20:ce:0a:c1:30:eb:11:b6:4a:21:d0:a0:
71:16:a8:3b:8e:06:3f:e7:99:12:6e:29:36:8f:0a:03:71:ff:
9e:a6:2b:a5:96:82:32:cb:73:8f:6b:1d:59:33:d1:00:7b:c8:
df:46:38:45:63:60:48:94:1d:cb:ff:73:8b:10:17:5c:46:0e:
20:4c:f3:cc:50:06:13:60:56:f4:85:02:44:9a:6c:27:ce:a3:
b3:07:dc:74:3a:b1:b2:84:d0:c9:ff:e4:27:18:87:48:48:e5:
25:01:8e:6d:2d:e3:fe:f0:62:c4:38:e7:22:04:27:03:31:6f:
87:10:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org