Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4E2BB45685BC11ECA3CC8E9E5A40D577.roa
File: 4E2BB45685BC11ECA3CC8E9E5A40D577.roa (raw, json)
Hash identifier: wd2nW8RxfLrqftQ99JSorbGfRb7YpjyxGujJewey9ag=
Subject key identifier: 1A:05:F9:DB:D6:D1:0A:FA:DA:AF:54:52:48:8D:B8:B0:28:00:5E:0D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0595
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4E2BB45685BC11ECA3CC8E9E5A40D577.roa
Signing time: Fri 04 Feb 2022 13:13:55 +0000
ROA not before: Fri 04 Feb 2022 13:13:52 +0000
ROA not after: Fri 03 Feb 2023 13:13:52 +0000
asID: 58202
IP address blocks: 161.123.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:13:52 2022 GMT
Not After : Feb 3 13:13:52 2023 GMT
Subject: CN=61fd2693-a0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:57:fe:37:97:54:30:55:76:0b:36:ac:52:
86:0c:db:bc:41:4f:37:bb:a2:a7:fb:3d:b8:46:3b:
e1:9a:50:00:40:94:53:ef:66:12:51:ed:a6:c7:a1:
04:fe:2f:01:fa:10:0d:f1:42:32:20:21:5c:01:a1:
5a:23:46:02:71:2d:57:9d:85:9a:cd:86:01:98:02:
b2:d9:27:14:6d:42:cf:64:ae:3a:77:df:2c:88:39:
f8:df:57:eb:4a:9b:5a:92:52:0a:bd:be:0e:1a:0d:
55:b8:05:a1:d4:4b:45:d8:83:b7:d6:24:2a:bb:c4:
0a:b1:1e:56:8d:c5:fa:01:d4:c8:15:31:c1:86:c7:
1d:dc:e9:39:d8:8d:94:27:7c:2c:07:82:e3:20:91:
29:7a:75:c9:0d:81:4e:36:82:ed:62:fd:43:2e:de:
87:4b:2c:ec:1b:0d:3f:70:91:dc:dc:b1:66:b8:a9:
0c:a7:33:c9:e4:ac:6b:ee:6a:a4:f6:2c:59:61:e9:
31:c7:74:73:f0:2d:52:1c:d3:b1:d0:cb:01:42:56:
83:00:a3:97:ac:5d:7b:61:17:f4:1c:f8:80:b5:f2:
7d:bb:78:34:34:25:60:fd:95:6f:c9:f2:1c:f1:15:
3a:27:10:20:a0:17:e0:58:11:68:27:88:93:58:c8:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:F9:DB:D6:D1:0A:FA:DA:AF:54:52:48:8D:B8:B0:28:00:5E:0D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4E2BB45685BC11ECA3CC8E9E5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.235.0/24
Signature Algorithm: sha256WithRSAEncryption
68:42:f7:f2:50:37:1f:06:3c:d6:f9:7c:08:c8:58:09:21:e4:
fc:60:5f:1a:7e:b2:79:d2:d3:2c:69:35:cb:12:cf:b4:4a:63:
18:6d:87:17:ab:0e:4b:f7:0c:aa:8a:91:86:ef:51:90:41:66:
c5:86:61:53:bd:27:38:3c:d3:36:cd:dd:74:87:59:10:a1:fb:
1f:3e:2b:04:62:d9:cf:19:86:b3:8c:04:d8:45:c4:b7:00:b5:
33:6e:37:28:6f:53:17:2c:bd:19:b5:60:ab:3f:05:68:e5:cd:
d1:5b:54:c7:7d:47:50:e5:79:4e:b2:4d:4c:d0:a7:dc:ff:c3:
98:df:91:6f:de:f6:dc:02:59:31:2e:ce:2d:7f:45:17:80:d8:
93:a7:a4:bc:f5:e8:37:ef:14:de:4f:b3:45:bd:05:0a:01:08:
8e:b4:5b:aa:6b:6e:d4:6a:e1:27:1e:20:86:c3:bb:ce:66:5d:
5a:ad:dc:22:da:1f:8a:b7:93:6b:dc:ea:65:90:fc:0a:08:d0:
84:8a:e8:2d:ba:67:39:7d:3f:01:7d:1d:d7:5e:9d:35:c1:8e:
c2:be:aa:85:56:25:bc:69:cf:c9:7e:bb:53:00:d1:2a:29:6c:
e4:56:24:ea:0b:46:9a:d7:90:a7:e4:ae:0e:2c:8d:05:c8:27:
9f:59:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org