Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/19F84412FD1F11ECBDDC5486F1222468.roa
File: 19F84412FD1F11ECBDDC5486F1222468.roa (raw, json)
Hash identifier: 9Z9M6odDmJcOOitNGEI5sJ7L11gyULvYCxfT8yfzJEs=
Subject key identifier: 76:67:A3:7D:3C:61:33:F3:9D:49:11:9D:89:E4:83:4A:00:CD:9C:93
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 079A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/19F84412FD1F11ECBDDC5486F1222468.roa
Signing time: Wed 06 Jul 2022 11:30:56 +0000
ROA not before: Wed 06 Jul 2022 11:30:53 +0000
ROA not after: Thu 06 Jul 2023 11:30:53 +0000
asID: 44592
IP address blocks: 161.123.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 6 11:30:53 2022 GMT
Not After : Jul 6 11:30:53 2023 GMT
Subject: CN=62c57270-3a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:52:42:f3:2d:57:47:8c:0f:98:27:90:78:
63:d0:a4:ed:ea:18:4b:91:f7:3d:e1:6c:2a:b5:af:
fa:23:e5:0b:1a:68:c6:85:8e:5f:52:06:ed:9d:52:
08:ed:f1:6d:e1:dd:6b:b5:a2:81:b3:e9:c3:82:d0:
ad:1c:dd:85:87:a0:24:0a:07:7a:9f:f8:9d:64:68:
a6:26:53:d5:47:d1:d4:e3:e2:e2:14:33:e6:90:ad:
fd:04:39:9f:95:16:58:8c:0d:f9:7f:22:a3:d3:2d:
09:81:c1:0d:e0:69:47:d7:25:44:0b:d7:39:ec:89:
92:71:ad:98:c4:2f:6f:3a:72:aa:c5:6c:a6:36:26:
3a:de:a1:5b:eb:44:e6:40:eb:5c:e1:a5:b4:12:b9:
6a:ba:cf:de:12:5e:ab:e0:a9:5d:3e:1e:72:b0:b6:
95:b8:17:a9:64:a7:e0:ac:55:59:69:95:7b:d7:93:
be:a9:6e:e6:41:d5:0f:97:f1:a3:ea:57:63:d1:a7:
76:0b:5c:5a:c8:f0:4c:77:45:16:26:a8:19:a7:f8:
bb:5f:df:46:3c:a1:38:78:79:92:3b:75:de:c7:a1:
ff:90:5b:3c:51:e4:5d:49:64:0c:32:68:23:62:e5:
d9:85:aa:ab:a5:d8:2e:a8:e2:16:56:39:21:b9:49:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:A3:7D:3C:61:33:F3:9D:49:11:9D:89:E4:83:4A:00:CD:9C:93
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/19F84412FD1F11ECBDDC5486F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.216.0/21
Signature Algorithm: sha256WithRSAEncryption
45:2c:7f:c5:98:09:96:18:c5:c3:1b:6d:62:f8:ce:d9:80:76:
a5:22:aa:41:6a:40:ff:9c:17:8a:1d:e1:21:e1:a9:13:d9:34:
d2:af:9c:09:1f:75:57:3d:af:4d:5c:92:1d:d1:f5:f0:fa:88:
cc:72:e7:94:21:ba:5a:42:49:a9:d5:04:90:d8:c8:23:5b:ce:
52:bd:d1:34:8b:de:e8:a6:ab:c4:89:e6:4d:d0:d6:db:64:9e:
81:90:63:7f:6d:6c:2a:48:94:de:61:8e:a1:72:10:6f:cf:f2:
79:9f:b3:ac:d9:ea:94:17:76:c7:f3:88:03:b7:91:be:4e:c9:
55:ad:b3:53:ad:b6:e1:8f:39:e3:6a:10:3f:90:55:e9:90:15:
5b:48:e4:fc:af:94:41:46:f0:b9:31:60:74:58:98:a8:49:7b:
86:92:0d:c7:1e:ae:56:c2:ec:09:90:21:a6:a2:a7:b9:1a:40:
f4:2d:8e:53:f0:8e:31:21:1e:a8:f3:51:13:c5:e9:3c:af:53:
12:d6:64:bb:fd:a5:e9:4f:8c:cb:f9:04:56:a9:66:0f:83:fe:
92:6d:57:24:80:83:aa:5f:19:8c:14:1f:9d:1a:51:b7:37:91:
75:fd:53:f6:5b:f4:6a:c4:6e:f8:77:35:df:d7:47:22:f8:c4:
16:ea:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org