Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/61888F5ABBE111EC81C529AC5A40D577.roa
File: 61888F5ABBE111EC81C529AC5A40D577.roa (raw, json)
Hash identifier: Hh9YOPorFl5ipEDc+ShE9A0JfO1UwjALHFixP040loo=
Subject key identifier: D0:E6:E1:8D:4D:E4:F6:0A:4C:31:02:4B:4E:0F:8E:C6:DF:B0:E1:FD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 066B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/61888F5ABBE111EC81C529AC5A40D577.roa
Signing time: Thu 14 Apr 2022 10:55:22 +0000
ROA not before: Thu 14 Apr 2022 10:55:18 +0000
ROA not after: Fri 14 Apr 2023 10:55:18 +0000
asID: 400377
IP address blocks: 161.123.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 14 10:55:18 2022 GMT
Not After : Apr 14 10:55:18 2023 GMT
Subject: CN=6257fd9a-e837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6b:fc:44:52:12:5a:2d:a1:ff:d6:51:6e:81:
d0:68:89:75:0a:49:b8:c2:16:c0:fc:be:4f:33:50:
f2:05:30:2d:dd:a6:f6:78:75:69:4d:a6:9d:dc:7e:
40:57:0d:3d:08:32:88:af:c0:1b:6e:70:ab:0a:95:
23:55:19:ce:6e:4a:5c:01:2d:59:78:fb:29:be:b1:
00:68:6b:0d:e5:35:d0:59:78:d3:59:8d:ca:05:08:
a3:62:c5:ed:51:22:13:8e:31:0c:1e:7a:bd:30:07:
0b:5a:9e:2a:41:20:43:d6:27:81:1b:e3:a1:15:d5:
ba:85:5d:41:38:0a:0d:d3:92:81:70:a9:3e:67:6b:
8f:4a:45:2c:20:1a:51:2f:b0:32:b7:7a:8f:d1:20:
85:f9:61:fb:cd:dd:28:f2:2d:8d:35:7d:44:bc:54:
6c:29:b5:80:3f:76:26:95:1c:dc:b3:e9:81:e2:85:
cf:f9:eb:23:cd:df:4c:24:ad:af:26:13:b5:51:9f:
fa:b4:7d:49:1f:d4:bc:04:03:e9:02:8c:94:9f:ba:
37:7b:39:fd:c9:dd:93:ba:52:2d:27:36:34:27:e8:
01:2f:75:6f:98:73:6c:c9:28:a4:b1:65:9d:ef:97:
b8:5d:09:56:26:e5:e0:1e:a5:83:d9:f7:3e:98:2c:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:E1:8D:4D:E4:F6:0A:4C:31:02:4B:4E:0F:8E:C6:DF:B0:E1:FD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/61888F5ABBE111EC81C529AC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.44.0/24
Signature Algorithm: sha256WithRSAEncryption
13:39:34:01:15:bc:a8:a8:87:3d:5a:24:bb:43:a5:84:cb:72:
c5:66:c6:51:9d:f3:7b:de:e1:39:eb:6d:b8:62:4d:26:22:e1:
a0:6c:7e:d2:8f:1d:9b:32:4b:d5:99:13:48:67:b9:da:44:55:
3d:4c:99:fb:bd:b9:f4:20:f9:af:bd:f9:6a:b2:53:33:6e:7c:
7b:32:27:ec:4d:57:6a:49:b9:be:8a:37:1f:8b:41:81:14:45:
50:e8:65:de:fe:65:33:2b:eb:48:9e:e8:85:d0:cd:bb:4c:29:
15:04:02:92:3b:43:9b:9b:8a:50:1f:77:6c:1c:5d:97:fa:59:
b8:fb:4c:15:09:15:63:0a:1e:aa:25:a1:94:ce:47:4d:d8:75:
03:83:58:a6:09:d4:03:ef:fb:b8:70:fc:e4:ec:12:09:f3:4e:
a3:00:1e:43:aa:9c:71:ec:62:7e:1e:7c:1f:14:0b:3c:dc:b2:
91:6d:20:e0:e2:60:e9:09:42:20:8d:8b:1a:a2:c6:56:e9:ab:
ce:ef:e3:08:6d:52:9f:1f:58:05:a9:c4:01:7b:52:c7:3b:35:
6a:af:86:6b:80:fb:f6:b2:52:84:11:f2:6d:47:f1:63:c7:98:
93:c1:ca:37:fb:cc:63:99:47:2e:9a:92:04:fc:d4:22:7b:b1:
9a:fc:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org