Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3AFCFD6AA8B911EDA1DC37E2F1222468.roa
File: 3AFCFD6AA8B911EDA1DC37E2F1222468.roa (raw, json)
Hash identifier: VWY71yxcIZ0nSSlwZuJ6DzIC+nCQUiNa6ZChfzQOA8w=
Subject key identifier: F7:5C:0F:7E:F7:BB:00:92:42:F7:13:42:54:AC:84:D9:3A:D1:F8:79
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09A8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3AFCFD6AA8B911EDA1DC37E2F1222468.roa
Signing time: Thu 09 Feb 2023 20:35:03 +0000
ROA not before: Thu 09 Feb 2023 20:34:59 +0000
ROA not after: Fri 09 Feb 2024 20:34:59 +0000
asID: 207990
IP address blocks: 161.123.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:34:59 2023 GMT
Not After : Feb 9 20:34:59 2024 GMT
Subject: CN=63e558f7-eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:e0:7e:ab:70:c4:ca:08:85:b4:69:57:5a:
85:ec:1e:8a:5c:09:fc:a3:bc:c6:94:8a:e4:78:d9:
63:4f:81:6b:74:6e:e8:bd:a6:a3:6d:18:f1:11:d6:
8b:26:5e:03:6e:71:0b:94:35:85:a1:65:20:68:ce:
6c:bf:f2:c7:95:29:84:d5:7f:2a:25:bb:02:6e:c6:
f2:5f:39:e7:3b:fb:5c:5e:cb:4c:d7:b5:f2:ca:18:
c2:57:7f:f4:31:ee:11:ee:76:a6:67:14:97:2e:74:
1e:77:57:e4:b6:a5:22:29:9a:06:fa:73:68:df:66:
0c:4f:04:15:d4:52:6a:7d:39:46:97:ef:e2:d7:fa:
1e:e7:2a:0a:fd:f0:55:92:a1:8d:4f:b3:ca:d9:95:
1d:81:45:68:e5:ca:26:55:86:af:54:84:78:2d:38:
fc:dd:a3:ad:3f:07:57:40:b7:15:3a:c0:8a:61:5f:
2c:c4:38:3a:0d:15:84:b1:f7:31:17:7e:b1:4e:12:
b0:f1:3b:27:e4:6c:7e:77:f9:00:3a:fd:97:c5:69:
16:ee:59:02:c7:11:8a:08:71:91:16:03:6e:6f:e9:
79:95:01:9e:bc:94:d2:83:51:d3:74:77:f3:1a:6d:
52:aa:72:83:7a:2c:14:46:ed:e9:80:27:cb:bf:c0:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5C:0F:7E:F7:BB:00:92:42:F7:13:42:54:AC:84:D9:3A:D1:F8:79
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3AFCFD6AA8B911EDA1DC37E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4d:ea:25:81:2a:cc:26:92:bc:b8:bd:52:0e:ee:ef:f5:dd:
08:15:15:ff:5e:7f:fc:5c:a4:1f:52:b0:1f:1e:19:bb:e7:6f:
57:9b:39:5c:aa:17:7e:f2:18:79:a0:a3:f5:0e:a3:3e:c7:92:
0e:6c:11:fd:da:17:4b:50:78:88:e3:94:3b:eb:56:26:6e:31:
a4:68:a0:72:a3:58:ed:38:51:ad:05:a7:bf:7a:21:1b:98:97:
f1:93:fe:ad:b4:c5:78:aa:4c:41:85:22:94:39:3c:39:61:17:
27:1a:83:99:34:e3:14:c5:2a:66:a8:63:bf:34:ab:0e:70:4a:
83:1c:27:7c:e1:76:a6:82:9e:25:c1:0e:d9:50:a9:cf:52:b2:
48:26:14:e7:9b:94:7c:28:32:ad:9d:b0:b3:35:4a:95:75:53:
0d:41:bd:b1:81:06:ca:96:c2:c5:ea:df:76:0a:ea:d9:8d:92:
f4:b8:5b:46:ef:f3:3d:80:05:12:43:11:c1:ef:db:9d:26:0b:
62:da:6a:93:10:ad:ad:02:62:a3:1b:68:da:c4:51:c4:31:5f:
d8:c8:fe:70:0a:f7:7a:f3:da:c5:8e:ae:29:df:d4:e8:44:2e:
11:d0:91:96:be:56:bd:a6:48:9b:60:4c:30:e9:3c:0c:59:75:
91:a9:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 03:16:46 2024 by rpki-client on console-fra.rpki-client.org