Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/387D0AF25AEF11ED9FD9FDD8F1222468.roa
File: 387D0AF25AEF11ED9FD9FDD8F1222468.roa (raw, json)
Hash identifier: qzuCWyR4DwR4Qz+/8vwkLNZdlCsK4yOHdKkywVFtlQQ=
Subject key identifier: BB:37:9D:47:28:B3:03:38:CC:23:5D:D8:38:57:09:24:10:9E:29:41
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08D9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/387D0AF25AEF11ED9FD9FDD8F1222468.roa
Signing time: Wed 02 Nov 2022 20:45:01 +0000
ROA not before: Wed 02 Nov 2022 20:44:57 +0000
ROA not after: Thu 02 Nov 2023 20:44:57 +0000
asID: 203999
IP address blocks: 161.123.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 20:44:57 2022 GMT
Not After : Nov 2 20:44:57 2023 GMT
Subject: CN=6362d6cd-1d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:9e:9f:2f:af:11:ef:7f:4c:d4:a4:e0:7b:
09:a0:fe:c5:bf:db:13:49:f4:a5:82:6a:b1:37:3a:
9d:a6:15:90:1f:d5:d4:c0:28:e4:65:02:64:65:80:
7f:91:e0:65:6b:05:41:32:71:93:ec:0e:40:ff:6a:
0a:cc:90:f9:c0:38:9a:03:0e:ef:fa:04:6f:78:f8:
d2:f4:ea:40:d3:e8:8a:2a:6d:9c:2d:cb:c5:10:7e:
3a:e6:08:cc:44:b7:54:29:b2:c9:cc:bd:ec:3d:4d:
52:77:58:0e:42:61:c5:cb:4c:c7:e4:82:74:f0:a3:
40:6b:ec:ad:48:a9:92:89:cd:a9:da:79:7e:1a:a0:
ca:65:48:56:95:f5:81:67:53:8a:2d:0d:e2:e2:69:
be:c9:56:5a:ec:a9:38:23:07:0a:d1:59:1a:45:da:
99:23:3b:90:9e:9f:b7:c7:d1:e5:09:39:1e:19:9d:
d5:e1:ba:5e:43:df:1d:03:48:19:e4:c7:42:d3:ba:
09:cd:60:ed:ea:67:f1:31:51:d8:9b:e5:62:6d:aa:
db:9f:1f:f7:37:d1:c7:60:d6:44:03:49:67:79:2f:
68:a8:00:bd:0c:b0:42:b8:fd:9d:ac:42:8d:7a:8d:
c2:7f:aa:b7:87:fd:4c:a4:f1:03:5d:35:0f:57:6f:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:9D:47:28:B3:03:38:CC:23:5D:D8:38:57:09:24:10:9E:29:41
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/387D0AF25AEF11ED9FD9FDD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.44.0/22
Signature Algorithm: sha256WithRSAEncryption
02:ca:02:bf:28:b2:2b:66:bc:76:8a:bc:d2:d5:c1:80:e5:09:
9e:0c:65:5d:46:80:9c:7e:c2:a3:a0:17:40:80:22:12:2d:35:
7e:42:20:de:24:e8:73:73:d4:e2:dc:35:61:15:9a:c6:a4:9a:
84:b1:34:3a:4c:b9:8e:43:d0:f0:5c:9c:71:50:9f:cb:65:fa:
c8:cb:43:39:b4:e2:49:79:34:1b:46:c4:28:3a:81:63:f0:b8:
81:fc:76:24:5c:5c:70:29:84:c1:9f:02:18:f3:a1:50:94:0e:
01:bf:fe:33:54:b0:cf:0c:46:39:13:97:80:b1:11:eb:01:e5:
e3:d9:e2:51:47:7e:91:20:5b:97:af:76:33:61:1f:00:4a:05:
d0:9f:79:7e:17:8c:6c:de:fd:9e:3f:49:bc:d0:74:15:6c:6d:
8b:01:4c:7d:e2:54:10:aa:22:bb:b1:8e:b3:5a:95:6d:39:13:
7f:df:78:34:a6:ee:8a:83:52:ef:bf:78:ac:ba:f8:98:7d:57:
6e:bd:a2:e4:06:1b:9a:3d:4a:5d:be:9a:13:5b:34:be:fe:8a:
2a:c3:8f:53:c8:78:f1:34:84:a0:b8:99:7e:8c:4c:a5:05:e9:
f8:38:64:db:53:01:0d:6f:31:5f:29:9e:ac:73:b5:89:78:33:
e7:0c:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 01:55:23 2023 by rpki-client on console-fra.rpki-client.org