Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65F419B6E5DE11EC92A1CA99F1222468.roa
File: 65F419B6E5DE11EC92A1CA99F1222468.roa (raw, json)
Hash identifier: pvibBormqrk9J3SphO2oXbVcvirX5l5tFGEGmGqeFnE=
Subject key identifier: AD:D7:DC:39:64:B9:E7:F3:BF:EE:43:EA:17:7E:D1:CD:9F:1A:AC:F6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 070A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65F419B6E5DE11EC92A1CA99F1222468.roa
Signing time: Mon 06 Jun 2022 21:19:50 +0000
ROA not before: Mon 06 Jun 2022 21:19:46 +0000
ROA not after: Tue 06 Jun 2023 21:19:46 +0000
asID: 203999
IP address blocks: 161.123.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:19:46 2022 GMT
Not After : Jun 6 21:19:46 2023 GMT
Subject: CN=629e6f76-5011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:8d:23:31:44:e6:ad:4a:1d:48:55:35:6c:
f2:17:e4:3d:a1:4f:f2:06:3e:22:7f:76:9c:e7:a8:
0e:24:d3:80:85:a0:10:c1:ed:f4:29:64:d0:82:e2:
67:53:02:60:c2:04:32:51:cf:2c:3d:f9:19:92:80:
6e:7b:69:9c:2d:33:33:94:2f:23:1e:30:cf:9c:06:
1b:c7:0e:db:69:5d:bd:41:5d:c5:f3:c7:6c:a1:8c:
34:ee:88:1e:54:e2:f3:b3:e7:05:11:3a:dc:35:03:
91:9f:66:08:19:5c:3b:7a:c4:cc:bc:75:0b:52:d3:
af:51:e2:89:00:94:f2:60:db:a0:2e:5a:78:09:ee:
3e:96:fa:b7:e0:93:66:93:9f:80:60:21:2f:d6:1f:
d5:45:bb:4a:46:7d:d2:8c:a8:08:b8:9d:f1:cb:2a:
c7:61:25:87:3d:43:72:44:8c:20:37:89:1e:2a:b0:
5f:f8:55:44:c9:6d:03:ec:9f:bb:a0:d4:be:cc:8a:
fa:46:b8:71:22:c0:9e:d7:43:de:04:58:5e:a6:dc:
8b:2b:f8:96:6b:b6:2b:0f:37:19:ae:e6:c1:3e:42:
b1:bb:5d:a7:46:64:4a:74:03:96:c2:2c:b4:a3:77:
ef:5e:15:9d:64:47:d9:54:03:f6:3b:9a:26:8e:84:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:DC:39:64:B9:E7:F3:BF:EE:43:EA:17:7E:D1:CD:9F:1A:AC:F6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/65F419B6E5DE11EC92A1CA99F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.15.0/24
Signature Algorithm: sha256WithRSAEncryption
31:46:66:8b:c9:3f:ce:e0:45:8d:c3:c1:72:71:de:54:e8:16:
2d:6b:1f:e8:72:e6:48:91:a5:d1:3f:b5:2d:5e:69:fe:35:ee:
b4:64:95:63:bf:8b:19:a4:82:75:bb:0c:28:a3:5b:ba:1d:d9:
92:a9:e5:90:fe:ab:1b:60:e4:f9:b2:01:3d:c5:49:e3:d4:56:
91:83:28:35:2f:ce:26:b5:b5:6e:ff:65:98:21:32:25:2e:78:
03:ec:83:8f:d7:76:4c:e4:0d:f3:c5:23:11:69:04:34:79:c2:
4c:9d:47:97:d9:f5:e5:ce:8d:87:39:0e:ad:67:b0:26:2b:3a:
bc:02:17:a5:64:fd:af:d8:e3:87:d6:df:62:8a:7d:92:58:f1:
d9:b8:4f:69:88:a4:54:1b:d1:c0:f5:ab:32:11:35:91:fb:14:
81:15:74:c8:fd:24:ce:1c:ec:26:a3:f1:27:9d:de:41:53:9f:
8f:c2:fc:50:1a:37:8d:b0:5f:5a:b4:d8:39:29:c3:af:d9:5d:
88:c6:97:7d:0f:1c:96:54:e5:ab:96:9a:dd:ea:97:11:75:ad:
ba:f9:3f:dc:a6:49:e5:81:b9:b1:41:1c:0e:e9:08:27:50:52:
c9:a1:31:1d:bc:d6:d0:4c:a4:0d:84:2f:66:a1:c0:36:41:cd:
0d:05:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org