Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4AA406CC84E411EC9CE9E2A45A40D577.roa
File: 4AA406CC84E411EC9CE9E2A45A40D577.roa (raw, json)
Hash identifier: Tpl8cjOG5vPJ/MJNDsOND2/Jy/vNhbL9e4tNXMGhA0s=
Subject key identifier: F1:A8:4D:5F:7C:06:50:F3:01:D4:3A:09:BB:16:5A:C4:A1:16:CD:66
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 057C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4AA406CC84E411EC9CE9E2A45A40D577.roa
Signing time: Thu 03 Feb 2022 11:27:38 +0000
ROA not before: Thu 03 Feb 2022 11:27:35 +0000
ROA not after: Fri 03 Feb 2023 11:27:35 +0000
asID: 210654
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1404 (0x57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 3 11:27:35 2022 GMT
Not After : Feb 3 11:27:35 2023 GMT
Subject: CN=61fbbc2a-6894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:bd:ba:e8:37:fc:5a:bd:b4:c1:6c:c2:59:
6f:3f:4a:03:f8:57:7c:e7:b9:57:b4:b6:1b:9a:2c:
af:04:44:59:0a:5b:4a:60:5a:3d:79:53:36:2e:11:
97:fd:34:ad:59:00:21:d2:98:7b:c5:9c:80:5a:5e:
21:2c:ce:3f:6e:02:36:f7:eb:16:b3:00:cd:13:4b:
22:32:db:05:03:f8:99:c8:a6:3c:24:e6:f1:21:73:
7c:e9:8a:25:0a:11:e4:8c:6f:59:23:2f:2d:1a:b8:
58:90:e6:72:55:6b:6b:d1:7b:42:e1:e1:42:eb:84:
47:ce:b5:91:f8:28:69:5b:e7:03:c2:16:e2:bc:55:
5f:21:a2:78:04:1f:40:0d:8d:f2:20:a3:22:ed:36:
2c:08:bd:7b:6e:84:25:43:5b:ad:1d:6f:fa:77:b6:
53:99:3f:22:f0:f6:e2:f7:f8:2f:ac:f6:01:24:39:
a5:c9:d0:29:1b:79:a7:08:ec:03:92:f2:d5:b3:ce:
59:68:1c:a3:83:3b:29:9e:87:1f:d9:44:f1:a0:3d:
0a:06:17:42:ff:61:14:5c:27:33:f1:10:7d:78:df:
eb:1f:bf:41:85:bb:7b:c5:5a:7e:fc:30:ee:00:2c:
78:a5:c4:22:62:74:17:4d:ef:03:da:1e:97:e3:ae:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:4D:5F:7C:06:50:F3:01:D4:3A:09:BB:16:5A:C4:A1:16:CD:66
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4AA406CC84E411EC9CE9E2A45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:95:a7:37:5f:c7:e5:69:fa:dd:c1:f1:ea:81:b5:79:e5:7e:
30:91:ee:3a:8e:fb:3d:0e:51:59:b3:2b:9a:9a:fb:dd:e0:f0:
97:76:d9:fc:64:b4:cf:96:aa:ab:69:b5:a4:ea:d6:25:3e:b6:
a0:4a:84:74:48:8e:fa:f7:68:f9:b9:1e:17:53:cb:60:1a:f7:
28:82:f4:c9:fa:c2:58:11:9c:90:75:d9:8b:56:db:49:c5:48:
18:99:f9:30:54:bf:6e:20:96:0a:2b:28:9e:9d:0a:72:b2:00:
a9:27:0f:06:d3:30:16:d2:5f:3e:d2:14:00:cb:c4:38:5f:42:
e1:f4:57:bf:11:78:75:4a:22:68:76:78:c5:3c:1d:36:ec:06:
ff:26:b2:97:45:cb:54:51:50:d9:f3:fb:1d:1f:05:3f:44:a7:
5b:56:34:24:5b:62:2f:65:bd:9e:75:16:5f:69:22:66:8f:66:
1c:52:cd:db:e0:ff:c2:46:60:88:e3:a4:03:05:b5:b1:cf:ec:
9f:aa:bb:50:ea:6d:d2:26:85:e5:ac:1e:92:77:f6:ff:98:14:
22:91:93:d4:95:14:ff:c7:ff:2d:03:93:b5:7f:c8:94:9d:be:
c4:54:af:74:0b:05:40:21:9a:83:d7:9b:41:a1:40:8f:01:ea:
58:ea:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org