Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EF0669A3BD911ECA5CB1A3ED8A014CE.roa
File: 2EF0669A3BD911ECA5CB1A3ED8A014CE.roa (raw, json)
Hash identifier: Bb0oB48/4/ViSk0drvoW5iQr1CT1ymrSrM9kI1bajuY=
Subject key identifier: 29:C5:E6:A6:46:8C:36:3B:13:34:6F:35:6B:C4:AA:CD:9E:0D:3A:51
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 022C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EF0669A3BD911ECA5CB1A3ED8A014CE.roa
Signing time: Tue 02 Nov 2021 12:34:12 +0000
ROA not before: Tue 02 Nov 2021 12:34:09 +0000
ROA not after: Wed 02 Nov 2022 12:34:09 +0000
asID: 327790
IP address blocks: 161.123.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 12:34:09 2021 GMT
Not After : Nov 2 12:34:09 2022 GMT
Subject: CN=61813044-2978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:3b:48:ec:da:93:9c:17:dc:4a:dc:44:1f:
0e:1c:6b:2c:b2:77:a0:17:38:6a:29:60:1f:c2:3a:
35:04:4f:2c:65:06:29:b4:94:9b:da:03:b7:d9:4f:
18:f4:e4:26:2e:33:e5:62:c1:27:82:02:6f:3d:d2:
44:97:91:19:83:5a:c5:68:16:1a:67:58:52:12:9a:
17:04:95:63:57:50:22:1c:77:8e:5a:5d:13:49:36:
81:77:5a:f3:96:52:85:34:c6:28:e3:d1:56:ea:07:
57:4a:8c:5f:39:e8:a6:9f:66:78:01:6c:1c:8e:8a:
29:78:c2:7a:6b:26:7d:ef:9d:20:02:4c:71:6e:9d:
4d:ab:aa:a1:27:80:97:d1:de:c7:5b:23:5b:33:3c:
43:c1:f5:99:c5:7c:0c:f2:5c:6c:b3:c9:5d:e6:88:
df:1f:b5:e5:b1:6e:0b:59:7e:50:35:d5:7f:03:9f:
b7:d1:aa:d3:2d:f4:a3:de:8e:52:63:db:18:ff:b0:
a1:af:f2:ae:e8:91:22:ce:04:ed:77:c0:c1:d5:49:
e8:b8:ff:09:0b:77:13:bd:78:46:28:d2:65:29:12:
a5:63:3d:6c:53:fc:ef:5f:60:3d:c3:be:ee:92:46:
47:10:04:a8:97:62:9d:02:eb:05:aa:0d:67:bc:f2:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C5:E6:A6:46:8C:36:3B:13:34:6F:35:6B:C4:AA:CD:9E:0D:3A:51
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/2EF0669A3BD911ECA5CB1A3ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.122.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dd:d9:0c:d4:28:63:d7:01:19:f8:99:34:95:1b:89:73:d2:
57:97:0e:b2:0c:b7:fd:c9:fd:3a:73:05:17:84:15:c7:2f:0e:
5e:08:e7:a2:4f:c7:0d:4d:3d:46:6f:52:48:86:9d:90:4e:c6:
d5:9a:cd:ce:24:6a:e1:06:60:bb:1b:12:fa:7e:94:b9:52:f6:
ba:b1:ee:48:a0:32:36:34:90:7c:d4:ab:48:b5:c7:62:a1:e0:
d2:ff:a5:0e:28:47:12:ec:d9:93:d7:32:53:9f:6f:37:34:bc:
0d:d3:ef:2f:28:bf:8e:54:79:f7:78:e8:cc:36:58:86:1e:c5:
a2:a8:84:39:0b:7b:af:fc:1a:36:9d:fe:ac:42:47:0b:c8:2f:
95:40:47:88:45:fe:30:a2:4e:23:4b:2a:13:fd:08:97:e2:eb:
1f:70:41:d3:c6:e3:da:bc:2d:3a:2b:d8:34:9a:26:cc:df:43:
73:2c:26:0f:03:0f:42:ea:22:c5:8c:81:7a:e1:98:f6:5b:0e:
56:a2:db:8b:a4:3c:c7:19:01:62:04:fc:98:13:6f:ff:1c:c3:
76:fa:87:88:20:9a:da:42:a7:55:06:35:40:cd:6c:bc:5c:0f:
56:0e:a0:6e:09:d5:55:cc:c7:ef:7f:92:4a:67:14:48:c7:df:
69:4b:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org