Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A76BD0E5DD11ECA7CCE896F1222468.roa
File: 79A76BD0E5DD11ECA7CCE896F1222468.roa (raw, json)
Hash identifier: cx+8Km6KlMk/LLC+afeLReYmRkrhSlSUVLF/qT/LyE8=
Subject key identifier: D9:18:74:D7:B0:AE:B8:40:8A:99:5B:FD:8A:E8:10:49:DA:86:C3:AF
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06FB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A76BD0E5DD11ECA7CCE896F1222468.roa
Signing time: Mon 06 Jun 2022 21:13:13 +0000
ROA not before: Mon 06 Jun 2022 21:13:10 +0000
ROA not after: Tue 06 Jun 2023 21:13:10 +0000
asID: 203999
IP address blocks: 161.123.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:13:10 2022 GMT
Not After : Jun 6 21:13:10 2023 GMT
Subject: CN=629e6de9-a29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:31:7e:04:b5:70:38:12:37:8b:ab:c0:36:
1f:3a:66:5a:64:4d:9e:0f:c1:ce:78:e7:4c:6a:6e:
a5:48:cc:7b:55:5a:eb:52:b8:3b:33:11:60:58:fd:
57:97:77:b2:25:fc:b3:e8:6b:7e:22:2b:ea:27:24:
38:2d:0b:13:d1:2b:f9:9c:6e:93:1b:ad:c2:8d:f4:
0f:c3:8a:ed:71:10:fa:31:dd:68:9c:ee:aa:67:3d:
0d:12:85:7d:7b:0f:1b:19:ae:2f:57:af:7f:16:21:
41:f4:90:3a:26:a3:c8:dd:82:bb:b5:86:3c:85:af:
b3:44:32:5e:83:1a:a0:4c:9b:59:1d:5a:60:9d:35:
92:f0:d6:25:fb:4f:b3:99:ca:24:61:e1:92:2a:58:
3a:ca:15:9f:ef:70:e7:54:c7:3e:8c:83:1e:2f:e7:
2c:0c:ee:fc:b9:fb:7e:e6:8e:4a:58:dd:9a:b8:14:
04:f3:2b:80:90:b8:6e:4a:77:48:44:cb:1e:fd:8d:
de:9e:63:14:7c:64:68:ad:97:0f:55:99:85:c0:f4:
43:b7:ec:38:6e:9c:40:4a:c8:68:0c:00:e4:30:d8:
54:8c:2e:ee:f8:50:0c:6c:74:e8:95:00:24:26:b3:
e0:03:0f:17:2d:eb:d1:7e:a6:32:20:96:6d:41:2c:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:74:D7:B0:AE:B8:40:8A:99:5B:FD:8A:E8:10:49:DA:86:C3:AF
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/79A76BD0E5DD11ECA7CCE896F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6f:de:59:40:e5:b7:5c:ed:c5:b4:ab:28:52:5d:e2:e4:f0:
e9:57:1f:28:7a:e0:a9:a5:6e:cb:47:c3:f8:a2:d3:ee:c0:1c:
52:28:b3:3d:ed:6b:16:39:ba:3e:8f:79:b9:7c:eb:f7:7d:59:
de:d0:d9:ce:00:90:37:23:b4:78:cf:e6:5e:7e:a5:ca:99:71:
d2:1e:53:17:a2:4e:f1:2f:6d:f4:39:68:ce:09:e0:39:2a:d6:
9c:fa:8b:64:7c:20:7e:d2:e0:a2:e5:77:40:cd:9d:3e:9a:ca:
90:48:33:7f:10:77:97:0b:af:bc:12:41:7e:f1:c3:b8:9f:20:
bd:d2:8d:b6:83:d0:e9:64:f5:11:c6:9d:db:ce:94:b6:23:0c:
7d:f3:54:b3:26:24:d8:ca:f4:85:91:a6:80:27:3f:46:e3:e9:
7e:11:ba:fd:9e:fb:96:07:2b:29:55:98:9b:db:dd:9b:4f:7c:
b2:b9:b5:22:7a:c4:13:d2:5c:cd:1d:fa:62:10:ab:fc:18:5e:
40:0c:a0:f1:08:84:da:19:86:59:01:67:bc:f0:67:1b:73:b2:
d9:5b:43:24:0e:1f:84:66:6a:79:76:66:d9:f6:24:15:ea:3d:
0f:d7:b4:84:ec:c4:11:b4:28:b3:e2:de:8c:24:dc:16:b8:36:
32:f2:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org