Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C46E294CF0E11ED8A1C3BF0F1222468.roa
File: 5C46E294CF0E11ED8A1C3BF0F1222468.roa (raw, json)
Hash identifier: tAvXCQLmstByj5CPSudaVwuof9+u4ykEfuXdV0LshZs=
Subject key identifier: 09:A6:EA:F1:19:F7:C2:21:D3:85:D3:24:F1:84:70:70:8C:2D:BC:47
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A50
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C46E294CF0E11ED8A1C3BF0F1222468.roa
Signing time: Thu 30 Mar 2023 15:20:10 +0000
ROA not before: Thu 30 Mar 2023 15:20:07 +0000
ROA not after: Sat 30 Mar 2024 15:20:07 +0000
asID: 204765
IP address blocks: 161.123.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2640 (0xa50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 15:20:07 2023 GMT
Not After : Mar 30 15:20:07 2024 GMT
Subject: CN=6425a8aa-6242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:ce:ae:6e:39:7d:fb:a8:68:b6:43:36:7e:
80:d1:6c:68:7c:70:88:9f:8c:25:5f:b9:fe:af:df:
0f:44:80:f9:65:ea:1b:64:e8:83:87:36:91:3f:39:
70:9e:13:60:2d:b0:6a:01:0b:8d:64:61:5f:fe:b1:
e7:95:23:33:3c:c0:61:92:b5:e9:ec:27:14:5c:c5:
45:f0:7b:55:b9:b7:d2:0a:4b:92:35:e2:8f:f1:8d:
81:b9:f6:f5:7a:4c:25:18:d5:b3:e0:a3:ff:4d:e4:
95:35:e1:06:be:2a:21:4a:a2:5a:9f:83:3b:0b:93:
e6:52:f1:a3:12:9d:e4:38:78:82:bd:57:0d:8f:cf:
65:55:1a:51:69:0b:80:bc:4d:9c:c1:63:7e:4e:39:
0e:a2:73:e2:75:37:c3:59:69:28:c4:20:5b:1d:05:
07:b6:6a:24:16:8e:7d:f6:6d:84:e5:68:df:be:d3:
fc:22:5e:06:1e:1c:a0:c8:b8:98:1f:43:d7:c4:2a:
d3:83:3d:78:6b:4e:5a:ac:ce:d9:d5:ba:b2:2d:b3:
2d:4d:52:35:f3:3c:01:a8:6d:d8:c6:5f:ff:79:d8:
a8:ad:af:4f:06:45:28:14:19:90:46:9d:01:ed:b1:
92:7b:aa:dd:17:6a:2a:d4:27:96:28:57:5e:50:4f:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:EA:F1:19:F7:C2:21:D3:85:D3:24:F1:84:70:70:8C:2D:BC:47
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5C46E294CF0E11ED8A1C3BF0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.126.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:23:4d:52:1e:57:80:ea:95:32:91:72:1a:33:cd:32:71:
e4:e0:f2:2a:49:56:e0:bd:0d:28:8f:d4:1b:10:70:81:4d:21:
6c:37:d0:5e:b3:50:01:07:dc:5e:40:6d:ad:30:6f:b7:a4:68:
87:c2:26:a6:ed:ef:8d:21:5e:0c:90:71:51:10:37:55:29:be:
a5:8c:34:0c:26:bb:30:23:10:6f:a3:34:a3:f4:88:97:b9:c9:
76:b3:d3:9b:19:05:97:6e:be:ee:24:58:89:96:52:3d:8d:72:
c0:f6:60:0b:8b:a2:5a:99:bd:c2:2d:6f:a8:9e:8b:0d:a6:ee:
29:fb:dd:3e:4c:a6:d3:09:33:26:89:51:52:68:e1:40:f3:c2:
7e:a5:12:27:71:8d:03:a2:05:5f:1f:ad:25:c3:90:95:5c:f6:
15:69:03:4f:2c:f7:cb:d6:d1:6b:34:ac:ba:b5:25:65:c8:b9:
ca:41:b1:26:ba:61:29:43:4a:e9:92:3c:8c:92:b2:18:7d:bd:
f7:b2:cf:95:98:87:ee:96:57:fc:04:67:b7:54:79:92:38:99:
78:3f:0a:2c:25:bc:43:d9:de:43:5f:96:9c:5b:03:77:88:51:
b3:72:71:ea:c1:3c:fc:7e:50:59:b4:ed:59:22:d3:1f:1e:4d:
0d:64:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:36 2024 by rpki-client on console-fra.rpki-client.org