Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
File: 2B17DBBAA89411EDA0E8B67CF1222468.roa (raw, json)
Hash identifier: yAp8m8zLPY56vWdtL+9bgGrW4BeWQUtKiTRwU/90WiY=
Subject key identifier: 88:B2:93:31:68:12:F4:AD:F5:03:8E:93:6E:52:3E:DA:0D:D0:A3:1E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 099B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
Signing time: Thu 09 Feb 2023 16:09:45 +0000
ROA not before: Thu 09 Feb 2023 16:09:41 +0000
ROA not after: Fri 09 Feb 2024 16:09:41 +0000
asID: 207990
IP address blocks: 161.123.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2459 (0x99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 16:09:41 2023 GMT
Not After : Feb 9 16:09:41 2024 GMT
Subject: CN=63e51ac9-92c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:24:e8:e7:20:39:28:9e:f9:3f:97:f7:2b:
17:49:76:67:f8:c3:9e:76:a1:97:5f:8c:54:fc:3b:
ca:cc:fb:99:2d:5e:71:e2:fe:ba:7f:9f:31:09:5f:
bf:4a:bf:70:6c:9f:f7:9c:df:e7:84:48:8f:eb:33:
c8:0a:2c:79:14:ed:38:9e:c2:db:17:96:38:f2:72:
6f:8a:d3:6d:e2:df:9f:a0:41:9d:e7:05:2d:ae:8a:
b4:fc:bb:33:d5:43:26:b6:0d:25:ac:13:4a:0d:9b:
38:93:9a:1a:64:19:db:49:e5:70:9a:94:b6:99:53:
fd:12:2c:17:72:47:74:65:06:00:fd:ff:9c:df:24:
24:8a:a2:2e:86:45:12:6e:72:30:c4:c8:76:46:a5:
2f:30:97:f3:70:e2:8c:84:04:23:29:f9:38:07:51:
71:b6:24:40:d3:4b:31:c9:12:c6:04:3e:11:a3:c1:
35:cf:1a:46:16:52:10:eb:e5:21:31:d0:b8:c6:ee:
ff:08:54:16:6d:95:bb:53:25:4b:e9:12:f5:c6:34:
71:3c:af:ec:cd:ca:86:80:db:15:ef:1a:4b:7e:6c:
f2:ba:77:f3:d5:73:95:55:f3:f5:a5:2f:a2:26:f2:
f1:e6:d3:d6:81:dc:0d:1c:a6:bf:06:fe:2e:fe:70:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:93:31:68:12:F4:AD:F5:03:8E:93:6E:52:3E:DA:0D:D0:A3:1E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2B17DBBAA89411EDA0E8B67CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.152.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f4:2f:a3:6c:45:81:3f:78:0d:89:3e:8b:63:cb:7a:20:ed:
dd:aa:47:55:1b:12:e7:7e:43:df:25:af:c1:2e:e0:05:bd:61:
77:3a:bb:83:20:99:60:a2:ac:ce:04:e9:59:f1:3e:92:2b:44:
77:93:ab:82:16:b3:e4:2f:4b:c4:7c:5a:f3:fb:91:60:61:6c:
ef:20:c5:c6:74:9e:0c:14:da:55:95:54:22:ed:9c:7f:64:80:
51:e2:ff:7c:0e:49:4a:88:29:b4:9f:aa:a7:80:68:a2:5c:ce:
70:ac:c9:d4:38:fc:06:22:f7:55:29:f9:cb:1a:92:c6:6b:7a:
2c:cd:ab:38:c9:cb:8a:8e:e6:90:07:2c:c2:2c:da:3f:ae:d9:
72:ca:8f:74:a5:95:8c:37:ae:fb:2f:10:82:d2:9e:07:71:be:
e0:28:d8:a1:06:e8:19:ff:ff:ee:d9:7d:c4:52:d9:07:63:9a:
e0:2e:39:fb:3c:97:fc:64:2f:ee:4e:2c:4f:65:4c:aa:69:2a:
2e:31:2a:8e:01:08:c9:e9:c7:01:5e:27:59:95:97:4d:58:56:
70:39:71:af:c3:ea:a3:7b:7e:25:c6:8c:7e:75:9c:4c:e0:31:
af:1d:b4:3b:00:1b:2c:79:2c:ae:de:fb:2d:69:f5:60:7f:2f:
fa:d7:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 03:25:50 2024 by rpki-client on console-ams.rpki-client.org