Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/29DF3D38DDA511ED90D477F12F6D8C1D.roa
File: 29DF3D38DDA511ED90D477F12F6D8C1D.roa (raw, json)
Hash identifier: LPlhBpoF5/r9wKT1vHlvM1xzhzmfSIFP0xW8CT/WfxE=
Subject key identifier: BC:70:13:5B:DA:2F:FE:0D:78:8A:49:2C:E5:14:3C:3D:C3:A6:F0:43
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A7B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/29DF3D38DDA511ED90D477F12F6D8C1D.roa
Signing time: Tue 18 Apr 2023 04:54:56 +0000
ROA not before: Tue 18 Apr 2023 04:54:51 +0000
ROA not after: Thu 18 May 2023 04:54:51 +0000
asID: 149020
IP address blocks: 161.123.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2683 (0xa7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 18 04:54:51 2023 GMT
Not After : May 18 04:54:51 2023 GMT
Subject: CN=643e22a0-4576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:92:41:2c:04:60:80:86:ec:73:40:68:f6:
2c:b0:76:ae:a6:bb:a7:0b:4f:b5:15:93:bd:c7:40:
fe:48:f9:0d:51:ad:d0:98:b3:de:7c:54:89:f5:94:
e8:ed:08:5d:61:4d:b9:35:fa:5d:16:d0:c5:bc:4e:
5d:90:33:71:84:7e:c7:e2:fb:8d:8e:06:77:e7:47:
58:de:49:e6:84:2c:c8:70:6e:00:2f:5b:c7:86:79:
ed:f1:cd:40:a8:5e:70:09:06:0e:fc:3f:f6:f8:44:
06:49:ae:fb:c2:28:7d:98:1d:76:bd:ea:a0:bb:65:
0e:5b:1a:48:bd:2f:0f:60:51:e5:e0:0c:8a:e8:88:
ab:a4:b0:dd:f6:36:e6:1d:cf:84:68:95:10:00:6b:
3b:0c:9b:d5:c3:fb:2a:d7:be:85:f7:af:5d:2d:e6:
94:28:2e:c0:8c:50:d6:cb:97:aa:69:fb:7b:c9:3d:
39:7d:1f:f6:b0:29:ec:16:80:01:69:11:53:7e:9a:
6a:5a:24:27:c8:0a:24:e8:bc:f6:21:03:7f:f1:32:
14:82:05:5c:e1:f3:b8:60:5f:a9:2e:6f:4a:ce:27:
c1:6a:86:a8:81:a3:26:17:f7:53:b4:97:14:4f:5b:
b3:ef:32:b6:8d:74:3a:ef:7e:17:41:4f:cd:70:4d:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:13:5B:DA:2F:FE:0D:78:8A:49:2C:E5:14:3C:3D:C3:A6:F0:43
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/29DF3D38DDA511ED90D477F12F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.116.0/24
Signature Algorithm: sha256WithRSAEncryption
77:44:c4:88:34:36:6d:17:c8:4c:a2:1c:21:67:a9:3e:69:eb:
d3:9d:5a:b6:06:8e:dc:21:68:84:08:34:b7:5f:8d:8c:1b:bc:
96:d9:17:10:0c:83:48:4d:e0:d7:d9:49:00:fb:9c:41:dc:bf:
77:01:0d:05:be:59:7c:16:94:ea:31:26:41:36:4d:65:50:13:
f8:11:8f:c5:37:3d:a0:fe:18:10:7d:65:9e:be:2a:75:76:fb:
6a:52:8e:53:f8:97:2d:dd:f1:e1:42:f1:ec:f2:80:3c:a4:9c:
af:8e:bc:bd:ba:cd:8e:8c:ad:db:3a:0f:1e:f1:ef:9a:57:7a:
14:39:ac:b7:2d:18:82:d7:6c:44:63:d4:e5:93:f2:34:ba:60:
9d:5f:a9:7c:fc:61:08:f9:42:80:e3:0a:46:87:08:fb:75:a8:
36:6e:ba:64:05:f3:80:4f:da:09:30:19:f5:bd:cd:37:69:d3:
ea:6c:0f:a3:8d:56:ba:f7:6e:dc:63:fe:b5:1d:7b:a3:43:21:
37:28:20:13:8d:8d:3d:9e:c0:3b:d9:4f:62:e8:7c:ab:6c:e2:
83:3d:d8:62:c1:48:e2:aa:e4:e7:f2:ab:a1:cb:3d:56:d5:00:
c8:78:c6:ae:76:48:42:ab:f7:65:a9:18:26:70:17:2a:d6:86:
b3:76:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org