Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13F9B1F8E5DD11ECBCAC9F95F1222468.roa
File: 13F9B1F8E5DD11ECBCAC9F95F1222468.roa (raw, json)
Hash identifier: y3jPTBYTlnAx0EmvPKxHek1wP6UdQ4v7sztw0uVA36M=
Subject key identifier: F4:80:08:9D:6B:12:3A:EB:E8:BF:EA:0D:8C:53:24:00:F1:B2:D9:62
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06F9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13F9B1F8E5DD11ECBCAC9F95F1222468.roa
Signing time: Mon 06 Jun 2022 21:10:23 +0000
ROA not before: Mon 06 Jun 2022 21:10:19 +0000
ROA not after: Tue 06 Jun 2023 21:10:19 +0000
asID: 203999
IP address blocks: 161.123.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:10:19 2022 GMT
Not After : Jun 6 21:10:19 2023 GMT
Subject: CN=629e6d3f-3821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:b0:3f:d6:87:ce:37:e9:8b:96:db:c9:88:
08:cb:48:96:61:3e:7c:41:41:78:50:0c:95:28:f5:
68:e0:0d:73:b7:82:6f:c5:6d:ff:5c:3c:6c:00:4b:
7d:0a:5d:fa:6e:57:df:f5:ad:56:14:25:6f:89:e9:
62:db:d3:db:24:c5:2d:f9:0b:29:b5:a4:d4:7d:74:
86:58:53:67:f8:32:55:e8:84:eb:f0:23:ee:e1:0a:
cd:c1:21:c8:0d:00:3a:af:3e:90:3c:51:71:66:c5:
95:7d:6c:a9:c5:ff:b5:c3:f8:2f:0d:45:db:47:c5:
7b:0e:10:95:f6:7b:4c:7f:eb:bb:e8:37:c6:97:c4:
0e:86:70:c6:e2:8b:cd:d1:b8:20:d9:33:7e:01:32:
e5:a0:8a:5e:9b:ae:1e:50:58:43:40:4a:04:b2:41:
d0:e0:d8:42:37:76:25:5a:07:36:ae:23:e3:fe:50:
10:49:17:43:07:1e:9a:05:50:59:a1:ec:0b:77:8d:
4c:c3:9a:63:f5:27:10:79:fa:f2:41:00:9c:b4:89:
71:83:9e:aa:86:51:3a:73:a1:84:c5:71:96:dc:8a:
f3:6c:be:d6:3f:1a:73:3c:60:91:57:52:1b:51:a6:
20:b5:12:bb:37:ae:62:c2:93:62:a8:ea:36:96:ea:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:08:9D:6B:12:3A:EB:E8:BF:EA:0D:8C:53:24:00:F1:B2:D9:62
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/13F9B1F8E5DD11ECBCAC9F95F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:54:f3:f6:2a:03:e2:3c:42:3b:e3:be:65:b9:e0:97:8f:b3:
5a:00:82:07:30:41:e2:3e:1b:39:0b:db:56:a2:7c:c3:3e:f0:
43:77:a2:61:ad:a4:46:5a:01:c4:4b:ce:cd:86:ff:49:97:70:
b2:2e:39:a8:46:d3:53:c6:19:50:94:c9:ee:1f:88:26:9a:80:
bb:92:e0:d4:d3:88:fb:cf:ec:a2:52:69:f0:f3:df:ab:7d:07:
31:18:19:2d:ab:90:38:90:75:01:3e:49:69:bd:9c:3d:de:0e:
18:89:f9:d1:8f:d0:2c:e2:7d:0c:9c:2d:3f:d5:c3:47:d8:3f:
c8:eb:1d:fa:01:27:92:53:d6:7f:22:1b:9c:b1:e7:8f:22:9a:
dc:4e:6a:86:97:18:a7:6f:e7:70:91:6f:69:e1:01:b1:50:65:
3e:42:ea:5a:af:a7:4d:54:7e:90:82:80:d0:a7:90:53:07:91:
8e:fe:6a:3c:35:69:17:83:8f:92:e1:eb:89:e2:ce:ba:08:ec:
f2:ef:3d:2f:63:d9:47:18:df:67:0b:86:d1:ef:31:d5:a1:a5:
82:7f:d8:5b:c7:66:af:86:11:ad:5a:88:78:37:30:17:9f:43:
1f:d8:fb:bd:68:06:ef:ee:1e:04:77:2d:97:26:c1:06:a9:fd:
ad:61:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org