Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D95B5F49D8D11ED97F369A2F1222468.roa
File: 7D95B5F49D8D11ED97F369A2F1222468.roa (raw, json)
Hash identifier: 3d95hNPvED3etSjgZPXF37zHeiyCfMGaf1VbSgImsXc=
Subject key identifier: 19:12:DF:DC:2E:43:F6:D5:17:4F:B0:09:8E:B6:AD:AD:12:EA:7B:49
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0981
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D95B5F49D8D11ED97F369A2F1222468.roa
Signing time: Thu 26 Jan 2023 15:24:14 +0000
ROA not before: Thu 26 Jan 2023 15:24:10 +0000
ROA not after: Fri 26 Jan 2024 15:24:10 +0000
asID: 136744
IP address blocks: 161.123.0.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 26 15:24:10 2023 GMT
Not After : Jan 26 15:24:10 2024 GMT
Subject: CN=63d29b1e-8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:2b:03:47:e6:bb:8e:da:2a:dd:2c:de:7a:
31:54:cd:20:77:01:b0:2f:53:39:4f:81:d2:57:e0:
0a:9c:11:9f:f0:90:aa:40:0b:65:3b:f5:1e:5b:03:
81:39:ce:e7:e0:66:37:29:6a:9a:dc:c7:2c:6c:c8:
d8:2f:6f:48:95:24:97:cb:d6:b7:ba:ca:74:d6:6c:
eb:11:1b:ce:c2:b7:38:7d:a8:13:cc:62:a7:f1:5d:
b9:6c:1b:08:fa:21:4d:eb:7a:64:1c:4d:a0:55:8e:
ec:10:a4:88:45:46:ac:04:a0:5c:3b:d4:a9:c3:48:
c4:43:2d:24:43:82:0a:a2:0e:dc:d8:19:bb:50:fb:
7c:5a:86:f1:05:c9:e8:b4:f0:c4:8a:17:59:18:b2:
46:05:6b:0c:fd:7f:5d:ae:9f:bd:47:fb:cf:44:ea:
d4:f7:97:8f:16:00:49:d1:43:bd:f5:f5:b9:8b:de:
55:82:47:1b:38:59:2b:e9:9a:52:cd:46:a9:50:98:
62:a9:d3:6e:c2:44:91:b5:50:ba:ee:e7:85:6e:a9:
e8:81:45:74:70:b3:f9:35:7b:dd:95:95:63:05:1d:
70:d7:0a:81:aa:bf:bb:9f:87:22:95:4b:66:97:aa:
05:21:ea:13:47:f2:99:69:77:a8:bd:56:0b:6c:e5:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:DF:DC:2E:43:F6:D5:17:4F:B0:09:8E:B6:AD:AD:12:EA:7B:49
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D95B5F49D8D11ED97F369A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0a:a9:bd:41:b0:bd:c6:39:7a:d9:96:23:f1:60:f8:cc:2e:
06:8d:f6:96:b8:b8:17:f2:ef:4c:1d:30:f4:7e:ba:d3:18:75:
71:0c:dc:f0:73:97:c5:2c:46:3b:fe:09:a1:b3:db:13:a4:1d:
f2:b4:1f:d6:64:36:27:02:91:4b:7e:48:83:fa:d9:b7:d0:b3:
b0:c7:63:fa:77:53:e3:04:8f:0d:88:20:54:ac:3f:05:96:f9:
fa:e7:e6:4a:07:05:27:bf:95:7a:19:4f:81:de:89:4a:f1:1c:
f4:b7:63:f7:3c:b5:3b:c7:56:65:85:16:a5:c4:aa:ba:59:bd:
c4:3f:67:ac:0f:51:13:04:47:42:e3:a6:fa:78:7a:ea:b5:fd:
c8:ec:4e:9b:46:56:2a:96:03:88:6b:2e:c2:5c:a1:47:38:33:
b8:90:6f:2a:9b:90:af:59:22:0b:5f:0d:13:0e:71:6c:ba:d3:
75:e6:2b:1c:4d:da:8e:fa:72:a2:73:96:f8:f7:30:45:3f:c4:
27:39:b8:a6:48:be:71:2c:b2:2b:4e:d8:2d:46:a4:2c:3e:d9:
18:8a:68:5e:47:3a:9a:c2:f7:a1:8e:55:d7:d3:9f:37:d6:c2:
ac:e4:12:ea:49:c9:4d:49:7e:94:85:f8:5e:bd:13:c6:a9:18:
0e:ce:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 21:38:57 2024 by rpki-client on console-ams.rpki-client.org