Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CF4A8C0DD9E11EC91B28196F1222468.roa
File: 3CF4A8C0DD9E11EC91B28196F1222468.roa (raw, json)
Hash identifier: Dst+BXKs3RTmjfqoYLZXJtWnWRsbQa1Gcnd3pScxDLU=
Subject key identifier: 85:DC:B9:E8:7D:86:AF:32:E0:A5:A2:61:3C:9B:32:10:3F:B9:3A:77
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06DA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CF4A8C0DD9E11EC91B28196F1222468.roa
Signing time: Fri 27 May 2022 09:20:24 +0000
ROA not before: Fri 27 May 2022 09:20:20 +0000
ROA not after: Fri 05 May 2023 09:20:20 +0000
asID: 58202
IP address blocks: 161.123.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 27 09:20:20 2022 GMT
Not After : May 5 09:20:20 2023 GMT
Subject: CN=629097d8-f89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:a7:7d:fd:35:35:82:4b:65:bb:ab:c3:de:
9f:fa:90:2e:9a:bd:29:b8:bc:16:77:1a:05:c0:e8:
13:2e:8d:d9:c9:83:9a:9e:74:6e:17:f5:5b:51:53:
b7:56:d8:37:41:e0:13:a3:f2:a4:91:a7:5e:1c:60:
ba:1c:9e:3c:88:c3:e3:3f:e7:69:a9:4e:91:46:17:
31:1c:c6:97:8f:e5:a1:bb:99:a0:74:8d:39:0e:13:
c9:87:5d:36:08:de:5b:6a:aa:89:7b:8a:05:6a:df:
a2:ed:00:bb:c5:81:4d:58:14:f4:f9:19:73:e6:e9:
7b:e7:c1:cb:be:20:c2:c9:63:c6:99:6e:cb:31:ab:
60:11:c5:3b:0e:80:47:d4:ff:5e:8d:ed:b6:0a:29:
10:03:32:fc:a6:d2:98:b4:b4:33:61:61:f5:11:09:
76:13:09:03:05:cd:98:ef:cd:99:a9:fc:e8:cc:d5:
46:12:03:58:f7:a8:a5:c4:50:8a:57:d2:07:7d:89:
94:a8:09:aa:9c:86:2e:29:97:5f:c7:9b:53:01:f1:
22:e2:60:49:4a:c9:b6:ad:f3:3b:50:b4:ad:f2:b7:
f6:18:4b:b1:82:19:a3:cf:9a:b3:7b:8e:03:6e:6f:
8b:9d:78:2e:35:eb:9d:81:eb:90:7e:f6:80:80:19:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:B9:E8:7D:86:AF:32:E0:A5:A2:61:3C:9B:32:10:3F:B9:3A:77
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CF4A8C0DD9E11EC91B28196F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:e1:91:48:84:30:99:9b:3b:24:dd:c2:07:b1:cb:46:72:2b:
5b:4c:9a:7f:0c:bf:a1:be:28:8a:d4:f8:d5:37:86:a8:a4:2a:
58:f6:87:18:59:e5:f8:ad:9b:98:e6:0f:ca:75:97:0f:93:ba:
39:05:89:48:62:cb:76:04:b4:a0:06:1a:e7:fb:f0:0a:44:c6:
26:7a:ec:be:f5:2d:26:aa:04:94:b3:53:62:5b:22:0f:9e:a3:
bc:75:15:81:73:c4:2d:12:94:35:fa:6f:ee:52:93:9b:00:c9:
06:24:6d:91:6d:e3:fc:82:be:cb:83:5b:e4:a3:59:68:d0:4f:
5b:6a:f2:42:58:44:85:3b:30:9e:e7:84:bf:1d:63:f3:07:fa:
19:84:85:f9:01:b4:2c:83:41:06:a5:35:ce:04:6b:d8:77:99:
53:6d:eb:f5:68:3a:68:8a:99:05:b1:97:02:77:1a:fc:6d:f3:
a7:26:53:ad:35:0f:70:00:c2:db:c2:1f:a2:01:53:b0:98:48:
52:21:36:44:ea:97:05:80:c5:79:ea:52:57:9c:33:38:f5:9a:
6c:b4:6e:8c:9f:d1:d9:d8:bf:a0:f1:0b:63:0f:59:86:90:3f:
07:3d:70:a6:f4:73:30:43:a6:7f:c3:e1:23:e2:4b:ff:0f:d5:
c5:4e:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org