Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B0AF9C2A02D11EE87E5B775D25BE465.roa
File: 2B0AF9C2A02D11EE87E5B775D25BE465.roa (raw, json)
Hash identifier: WUh85btzHtn2bNX2a8g5Fhtz6DZoEU2UAos+TVNyel4=
Subject key identifier: 65:2E:FA:4E:DE:B6:1C:BA:8B:05:72:4B:02:D8:DC:A4:18:B5:27:92
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CEB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B0AF9C2A02D11EE87E5B775D25BE465.roa
Signing time: Thu 21 Dec 2023 18:17:15 +0000
ROA not before: Thu 21 Dec 2023 18:17:12 +0000
ROA not after: Sun 21 Jan 2024 18:17:12 +0000
asID: 216440
IP address blocks: 161.123.0.0/16 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3307 (0xceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 21 18:17:12 2023 GMT
Not After : Jan 21 18:17:12 2024 GMT
Subject: CN=6584812b-0d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:8b:8f:47:2d:8c:43:4b:12:c9:df:a4:59:
9c:91:1e:05:f4:55:fe:f6:6a:19:6d:34:d6:3c:3f:
d9:63:c6:0b:1f:24:89:05:00:de:f1:d0:e7:6d:3f:
f2:4c:34:17:3a:72:cc:81:db:d8:f3:34:01:f7:b8:
4e:cc:b0:35:56:9a:5b:df:58:63:58:59:0f:4a:7a:
a2:ec:15:ef:d8:b0:9e:09:1a:d1:fa:d6:00:cf:41:
54:2e:53:0e:0a:47:32:50:fb:a2:42:39:6a:19:59:
6b:0a:10:eb:78:90:0a:0a:8a:74:79:be:66:8b:94:
9b:9b:4c:e9:d0:4d:2b:4d:b4:e1:07:20:33:d2:ac:
e4:7e:d6:c5:33:77:8c:11:49:09:f3:ca:a8:44:7f:
7e:fd:d1:53:bf:8c:b3:b0:65:d9:94:9e:52:8b:d9:
3a:f6:3c:97:2e:b7:96:3d:01:5a:14:5e:53:8e:75:
dd:fb:75:04:04:b8:36:e2:99:1a:22:3a:a6:ea:34:
1d:50:49:5b:40:ed:06:4b:5a:8e:40:85:ae:50:a8:
5f:59:a8:59:c6:0f:2e:94:26:00:54:90:b1:68:da:
47:68:d9:f2:83:60:0e:29:ba:04:9e:26:c6:b8:c6:
03:ed:18:40:cb:e0:6a:73:56:89:0c:bc:76:9a:0b:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:FA:4E:DE:B6:1C:BA:8B:05:72:4B:02:D8:DC:A4:18:B5:27:92
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B0AF9C2A02D11EE87E5B775D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:72:58:d1:28:8f:9b:13:ed:96:47:56:d9:5f:19:eb:5d:54:
f7:96:be:2c:50:fb:ee:35:e5:3c:f4:1f:c5:c6:b6:f0:bd:b4:
e0:6d:f4:28:b0:e8:1c:2a:c4:02:27:67:7e:0d:0c:66:0d:cc:
35:64:b3:42:ff:3c:65:fa:99:45:0f:bf:14:20:d7:36:68:38:
67:1a:45:02:e9:49:18:3c:04:80:1d:f4:c3:51:63:40:41:3d:
33:f7:04:28:c0:0a:4d:57:9c:a6:cf:25:8a:0b:32:47:be:59:
f4:d0:62:9a:84:3b:5e:5c:98:59:6e:79:1d:7e:0e:57:4c:e3:
8d:44:2f:11:ae:ab:4a:54:79:d8:c8:ff:70:2d:b1:a1:19:99:
d1:1a:0a:16:b8:04:d7:a8:19:e1:c9:ce:a6:1c:ef:6d:fc:07:
49:de:4e:aa:fd:37:a6:ac:ca:b0:de:d4:e5:a6:b7:a0:13:2e:
02:e0:12:f3:1b:c7:4f:e7:e8:c2:3c:60:ef:96:1f:92:20:59:
25:34:a6:65:58:3c:a8:a7:f0:93:84:d7:99:5d:02:33:83:32:
7a:0a:88:d4:ce:9b:f0:8f:47:f6:56:eb:db:71:69:da:26:76:
5e:82:a6:96:87:fd:5b:ab:af:81:f7:65:74:05:5d:a2:b8:6f:
76:06:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 04:52:39 2024 by rpki-client on console-fra.rpki-client.org