Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/31E16C5A85BC11ECBB764C9E5A40D577.roa
File: 31E16C5A85BC11ECBB764C9E5A40D577.roa (raw, json)
Hash identifier: g6M3rx/9MvI72XNp8gXoi2QNl3kPPULlO6ruemzqCcg=
Subject key identifier: FE:C1:87:BD:B8:EF:BB:BF:8F:E1:C3:86:4E:C0:1D:2E:7F:3B:01:84
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0593
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/31E16C5A85BC11ECBB764C9E5A40D577.roa
Signing time: Fri 04 Feb 2022 13:13:08 +0000
ROA not before: Fri 04 Feb 2022 13:13:04 +0000
ROA not after: Fri 03 Feb 2023 13:13:04 +0000
asID: 58202
IP address blocks: 161.123.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1427 (0x593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:13:04 2022 GMT
Not After : Feb 3 13:13:04 2023 GMT
Subject: CN=61fd2664-e3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:6f:18:c1:63:70:5e:b3:b5:f0:ce:89:ae:
8d:21:58:9d:83:b6:55:a9:f8:8d:75:f4:07:88:3f:
85:e7:d5:9b:e4:a9:c0:28:3b:66:88:2d:30:b3:4a:
51:c0:66:ae:80:b8:a3:39:90:f8:d8:71:9d:85:d9:
19:67:eb:42:f4:93:53:80:3b:0d:6e:e5:08:c5:99:
f1:00:7e:26:16:07:a0:8c:a0:44:6a:9e:1b:c5:fc:
69:64:c6:46:b4:c6:90:c7:ed:f6:9c:14:bc:e5:72:
2b:c7:ad:c6:ee:ca:2c:99:33:8b:5c:d3:74:fe:c5:
15:fb:f5:92:72:51:f8:69:cf:d9:f7:ea:91:c5:f9:
5e:2c:23:6f:79:01:6f:79:26:ec:c2:eb:88:9e:44:
ed:92:49:74:2f:32:46:24:55:1a:e4:95:ea:81:12:
e1:41:54:2b:d3:a0:e6:39:4e:20:7e:c2:6f:7d:ef:
8c:f5:8b:5c:1f:42:9b:ea:2f:45:88:e6:9b:6e:ec:
ba:0a:07:97:42:4a:b5:69:9b:b2:50:a2:d2:a4:f7:
ab:84:99:78:1a:91:a0:ff:70:a6:1c:d6:d7:14:92:
1e:74:a6:e4:0a:26:35:1c:08:f3:b6:0f:cb:e8:6f:
df:32:ac:98:2e:ef:e7:1d:ca:99:c6:5d:c9:f7:8b:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:87:BD:B8:EF:BB:BF:8F:E1:C3:86:4E:C0:1D:2E:7F:3B:01:84
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/31E16C5A85BC11ECBB764C9E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.232.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:cb:72:08:d8:80:7b:8e:79:9a:19:d9:08:f8:c5:59:ff:a6:
12:bb:97:49:43:dd:cb:02:e2:64:da:c2:7c:ae:2d:ad:54:05:
8c:6c:f9:f1:13:9b:6a:d2:17:28:16:22:88:9f:49:08:b0:cc:
81:54:11:93:fe:e5:71:6b:b5:43:c7:8c:63:93:19:34:82:45:
79:47:86:90:1d:c9:c3:ea:8e:f1:5d:bd:86:d3:c6:4c:f6:44:
31:33:3e:85:fa:0e:51:5c:cc:ae:05:9e:e4:8a:47:c0:82:9c:
7a:fa:e0:cb:ce:c5:0d:fb:5a:ca:eb:87:0c:1c:93:28:f6:75:
04:5b:68:96:60:d3:0f:97:d7:6f:3c:b6:4f:7c:2a:00:6e:8b:
42:39:3e:51:ec:89:18:0e:28:a3:c0:3e:4f:a1:a3:e8:22:f6:
ca:9d:ae:a2:56:90:6a:4b:38:84:18:d3:a3:bf:b4:19:e5:0c:
0f:9f:ff:fb:ae:6f:ae:4e:63:8d:b9:f0:90:25:c9:39:ba:8d:
97:af:05:f9:a2:d9:89:70:4c:fd:7c:af:b0:27:bd:49:a0:b5:
96:9b:97:6b:6a:7d:a9:99:2b:f7:0e:0a:95:89:58:49:79:2f:
f6:9e:81:ea:01:f9:5b:d8:fb:18:00:7e:ee:cd:08:a8:ec:c7:
77:ea:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org