Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6E60969EC41111ED9792E8AAF1222468.roa
File: 6E60969EC41111ED9792E8AAF1222468.roa (raw, json)
Hash identifier: 6ldgIw4QTlvt1X7yXE7/M2KobgwWt7HqT8GBAZx3gZA=
Subject key identifier: 5C:31:D0:36:87:A7:CA:66:15:3C:6A:6D:3C:2B:8A:FF:E3:B9:23:9B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A27
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6E60969EC41111ED9792E8AAF1222468.roa
Signing time: Thu 16 Mar 2023 15:44:26 +0000
ROA not before: Thu 16 Mar 2023 15:44:23 +0000
ROA not after: Sat 16 Mar 2024 15:44:23 +0000
asID: 207990
IP address blocks: 161.123.28.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 16 15:44:23 2023 GMT
Not After : Mar 16 15:44:23 2024 GMT
Subject: CN=6413395a-5316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:d2:54:93:17:08:57:50:27:55:8e:6d:84:
75:f4:97:df:cf:32:12:8a:ab:68:fc:a2:cd:9d:3c:
2d:4d:08:e1:5d:31:6a:7e:83:96:85:bb:6e:03:79:
f7:fc:c1:3a:09:24:b4:7b:4d:70:ae:49:fa:0c:56:
ac:cd:8f:cf:e3:96:0a:74:51:b3:1d:83:9b:0d:31:
d4:89:b0:d2:21:b1:03:a8:0a:9f:04:46:73:55:7c:
4e:64:aa:eb:ce:3e:06:72:af:e7:31:bf:9f:ec:9d:
78:8b:50:99:e9:62:83:ef:8a:81:1a:5b:e6:3b:e6:
32:b9:88:90:96:d7:44:91:bd:b6:12:21:73:15:d0:
53:39:00:61:69:07:6d:4c:8f:a6:30:27:b0:41:37:
ba:93:41:00:dc:68:f4:14:84:e2:03:37:e9:66:52:
7b:48:1c:52:42:4c:32:3c:da:6f:c9:a8:34:cd:19:
60:d1:62:5a:0c:56:99:6d:76:1e:7e:d5:92:8f:7a:
27:d0:4f:93:b0:a0:7e:0c:3a:66:fc:e5:e6:1a:7e:
3e:66:b8:3d:a6:59:d2:1a:dd:10:5c:f2:5e:45:38:
5a:72:d8:ee:38:68:37:3c:fb:e4:4e:54:3b:f9:ae:
1b:b2:1d:46:ff:08:08:71:69:c0:1f:bf:eb:e4:ea:
79:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:D0:36:87:A7:CA:66:15:3C:6A:6D:3C:2B:8A:FF:E3:B9:23:9B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6E60969EC41111ED9792E8AAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:28:38:3f:68:4a:df:b4:1b:6f:f5:9e:e6:12:d3:16:f5:62:
d3:38:0b:f4:c0:a4:f4:1f:54:bc:f7:05:ca:ce:d3:69:19:38:
59:b5:ff:81:eb:f1:bd:b5:1b:25:ce:a2:0d:1f:57:01:a4:eb:
9c:98:e1:86:81:1b:e9:34:61:5c:ce:7a:ba:f9:e8:8e:f1:91:
e6:ab:13:a7:00:fc:a3:3e:ba:87:9f:65:42:e4:aa:15:bb:dc:
3a:97:57:51:9c:4d:06:75:f4:6a:74:9d:b8:1e:cc:37:6c:7a:
eb:9f:1a:1e:13:bb:15:1f:86:b4:8a:a0:f1:bc:e7:db:17:fd:
6c:a6:71:19:b7:7d:0e:f4:db:1b:42:ef:ea:e6:3c:a3:d0:7b:
39:da:a7:33:d7:eb:3f:71:c8:56:7b:0b:9f:17:76:f8:a5:a0:
84:4e:a3:e9:5e:1d:ea:3a:46:f2:83:08:46:22:4f:9b:6e:85:
96:e7:9e:36:76:37:8b:aa:35:16:54:91:35:11:ee:2a:78:6c:
01:cc:87:ad:76:14:d8:c8:d9:74:ac:39:5a:b0:36:9d:ac:d0:
07:2d:bf:1e:5b:c8:1d:18:76:b1:9a:68:42:2b:68:f1:df:b3:
7e:11:da:74:5d:fd:c2:36:ba:20:8e:f9:d1:f1:35:ba:50:ad:
c7:cd:85:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 02:54:25 2024 by rpki-client on console-fra.rpki-client.org