Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1F4EF9EC919911ED97C1BBD8F1222468.roa
File: 1F4EF9EC919911ED97C1BBD8F1222468.roa (raw, json)
Hash identifier: xD5BsBL1GMjKm8XQXaPUdq3twLFDqjWoGevM+E2Yn0Y=
Subject key identifier: 01:DB:E6:42:0A:A1:C7:11:59:42:F9:B6:98:AD:AC:B6:F7:82:27:8B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 095A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1F4EF9EC919911ED97C1BBD8F1222468.roa
Signing time: Wed 11 Jan 2023 10:17:16 +0000
ROA not before: Wed 11 Jan 2023 10:17:12 +0000
ROA not after: Thu 11 Jan 2024 10:17:12 +0000
asID: 133499
IP address blocks: 161.123.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:17:12 2023 GMT
Not After : Jan 11 10:17:12 2024 GMT
Subject: CN=63be8cac-2241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:2f:4f:4c:46:0b:35:f2:ce:93:35:39:4c:
ad:50:3c:99:30:32:0f:a8:2d:19:06:67:bd:7a:6a:
81:54:ee:d6:36:d1:fb:ab:47:fe:98:e6:6f:52:14:
ab:87:07:23:94:db:18:ee:dd:07:e4:b2:62:9b:a0:
a2:0e:40:65:0b:2c:8a:a7:b3:9e:8f:44:d9:5c:d0:
97:e8:46:b7:7b:45:44:29:40:61:f2:ad:8e:f3:a5:
48:6d:61:ef:cd:fd:a7:0b:82:29:10:36:7f:69:6f:
05:8b:b5:50:cc:9e:15:cd:72:a9:ed:8c:cf:04:90:
5e:37:c0:27:89:d6:d2:41:c3:60:60:7f:46:4b:68:
a4:da:7f:c6:b8:24:23:ce:0b:e6:df:b8:eb:dd:72:
c8:99:30:83:5d:4b:31:3b:79:ba:76:28:84:62:75:
63:0b:fe:d3:09:e0:7b:3a:07:c5:b3:e3:8b:46:4f:
1c:f3:7d:0d:78:cd:86:5e:aa:0a:00:0f:38:21:61:
0f:3f:ab:9b:47:08:2c:dc:08:27:7f:af:ad:bc:7c:
f9:59:30:90:34:b4:cb:25:55:95:65:9d:9b:b7:f6:
55:25:c2:05:16:8d:22:7d:7b:69:32:04:89:de:2c:
90:2e:ce:54:22:d7:8f:3d:26:4e:72:35:9a:91:79:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:E6:42:0A:A1:C7:11:59:42:F9:B6:98:AD:AC:B6:F7:82:27:8B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1F4EF9EC919911ED97C1BBD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.60.0/22
Signature Algorithm: sha256WithRSAEncryption
11:fe:40:5f:de:56:2f:fd:52:6a:76:58:a9:4a:7c:21:de:f1:
92:f7:0b:d8:93:90:eb:05:3e:c8:ce:b0:b5:42:16:c1:36:be:
16:f1:eb:a7:54:fd:91:6d:42:0e:53:0d:c4:c5:ab:fa:dc:f1:
07:49:8e:ca:dd:71:d5:db:a2:37:91:d7:24:33:20:82:71:76:
58:ee:fc:14:ea:7b:eb:f3:de:a1:db:16:83:c5:ea:95:75:d6:
78:f8:0d:98:ec:d7:8f:fb:39:97:6b:8c:3b:83:c6:47:b7:7f:
7b:6c:98:2d:9c:ed:e7:4c:ba:c0:26:42:bb:1c:7e:33:ae:35:
71:3f:b3:58:33:6c:ad:c6:40:64:8f:0d:9b:f9:a2:61:45:08:
c9:3c:e2:23:fc:ad:6a:0e:8c:75:44:cd:a7:d2:62:91:ab:b7:
cf:04:f8:b6:ca:ad:fb:65:50:67:76:1b:43:91:21:0c:20:5e:
29:b9:4f:79:0b:23:33:87:ac:10:57:c2:fe:c6:c9:84:d0:96:
b6:04:12:33:4f:55:a2:7e:af:aa:94:ca:f6:9f:a5:a4:87:ff:
6a:c5:a7:0a:d7:f9:3f:f8:41:62:e0:fb:66:d9:9b:5e:8b:6c:
11:94:45:7e:c4:e9:b6:26:b5:84:b7:fb:dc:1f:9d:f2:6f:21:
16:f3:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 02:02:47 2024 by rpki-client on console-fra.rpki-client.org