Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5BB4DCF60911ECAE5B0381F1222468.roa
File: 6B5BB4DCF60911ECAE5B0381F1222468.roa (raw, json)
Hash identifier: Y7EHSv5GVtl/zhUgUrRjKRd8DJpE3OOyepQK9+rftIg=
Subject key identifier: 63:48:9B:57:83:23:00:DE:E9:9B:39:00:20:FE:54:26:FE:1A:00:4D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0788
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5BB4DCF60911ECAE5B0381F1222468.roa
Signing time: Mon 27 Jun 2022 11:08:06 +0000
ROA not before: Mon 27 Jun 2022 11:08:02 +0000
ROA not after: Tue 27 Jun 2023 11:08:02 +0000
asID: 203999
IP address blocks: 161.123.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 27 11:08:02 2022 GMT
Not After : Jun 27 11:08:02 2023 GMT
Subject: CN=62b98f96-c74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:ab:90:9e:48:f5:7b:a1:76:76:66:fa:28:
6e:e1:cf:ca:46:6c:39:3b:98:2a:ab:a2:3c:c7:d8:
79:0e:8e:17:f1:f7:07:9d:8c:42:cf:28:bb:3b:76:
72:e9:16:6c:40:10:1f:69:28:d1:de:8a:5a:e6:27:
fa:d6:69:cf:83:c7:67:07:86:8a:c4:ef:84:77:73:
1c:4e:09:a3:0e:e0:33:90:e6:a1:00:04:45:88:80:
c2:4d:2a:92:1e:ab:a9:e9:e3:82:ee:cf:76:b9:c4:
c3:86:82:82:8d:ba:d9:34:5c:53:a6:07:2b:a9:17:
bf:23:54:58:fc:08:94:0f:81:07:bc:5c:cd:43:ad:
c9:f8:0c:ff:30:57:23:49:f8:8a:fe:97:5a:4c:d8:
7f:ac:0a:d6:86:ae:63:a7:9a:38:c1:9b:c9:7b:cc:
21:cb:ec:3f:d8:5e:c0:63:17:58:a4:4e:de:aa:3f:
62:58:c4:e4:6c:71:23:68:6a:f2:0c:ba:b8:42:2c:
c6:67:39:04:74:43:aa:aa:ea:37:fc:2a:ee:38:a1:
2f:18:5b:a5:e9:2b:75:5c:93:c8:da:3d:5c:18:41:
79:9c:31:5a:8b:55:e2:07:ef:67:23:0d:ae:66:53:
f2:46:bb:d2:cf:04:69:63:e4:7c:ce:9f:01:10:31:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:9B:57:83:23:00:DE:E9:9B:39:00:20:FE:54:26:FE:1A:00:4D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6B5BB4DCF60911ECAE5B0381F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:94:ec:f3:6c:64:15:db:4d:61:a6:71:d4:9c:4c:86:62:b6:
b3:a6:02:8a:9f:42:4f:23:0d:05:59:67:30:15:fc:23:8f:76:
a5:1e:a6:64:84:3b:28:bd:a4:ba:5c:5d:3d:4d:b0:38:3b:f6:
8e:c5:5a:93:ef:d1:89:03:ed:14:be:c9:80:f0:66:fa:98:32:
e5:af:98:18:51:b9:41:8f:99:7f:4c:b1:d4:ab:81:1b:61:78:
ab:c8:44:e9:bf:77:4e:ad:0e:77:8c:e2:77:22:0b:0a:14:e6:
ae:0a:3c:3e:69:60:f7:94:0e:77:21:93:3b:79:8a:b3:fb:21:
94:84:3d:27:71:d1:31:8a:08:30:3e:0e:e1:ba:c2:ca:f0:64:
93:50:82:dd:66:e2:d3:02:14:65:42:65:d6:2d:cc:8f:d8:5a:
18:6e:7a:1f:90:b8:79:26:eb:a4:b5:e5:4b:7c:ab:e7:b2:22:
29:2e:cf:d5:90:44:36:43:09:9b:0b:63:fe:4f:7e:1c:ec:97:
3f:74:7d:ba:03:ab:e7:69:6a:42:69:fb:7d:b6:51:5c:91:34:
06:a5:7c:90:57:08:84:a0:d0:46:27:59:fc:01:33:0a:b0:57:
87:3a:75:a7:18:27:ce:1b:23:ed:02:22:8f:c4:b7:3c:ce:a9:
3c:da:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org