Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD30BC0A8B911ED92C7CEE2F1222468.roa
File: 7DD30BC0A8B911ED92C7CEE2F1222468.roa (raw, json)
Hash identifier: 8QimQ2aaIhNsLWmQOhCsjsRJkoKK9Dsv9C2kKAvGhRo=
Subject key identifier: CF:0E:A8:94:49:52:AE:AD:2A:2B:B4:D9:A5:B2:4E:C1:12:09:91:10
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09AC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD30BC0A8B911ED92C7CEE2F1222468.roa
Signing time: Thu 09 Feb 2023 20:36:55 +0000
ROA not before: Thu 09 Feb 2023 20:36:52 +0000
ROA not after: Fri 09 Feb 2024 20:36:52 +0000
asID: 207990
IP address blocks: 161.123.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:36:52 2023 GMT
Not After : Feb 9 20:36:52 2024 GMT
Subject: CN=63e55967-e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:d6:19:8d:ac:8f:13:22:28:df:14:8a:e9:
29:b0:ea:e8:35:ae:18:16:6d:00:b8:38:46:bb:27:
6d:71:41:c1:a0:e1:f2:0e:a0:ab:8b:fb:a8:e9:4b:
f7:a3:e9:8a:00:2d:2b:de:ef:14:0d:77:87:83:17:
82:24:6b:cf:9a:5c:8a:89:3a:f5:4e:0b:f7:8d:ba:
bd:c8:65:db:55:90:cf:a5:4d:54:4d:a1:a3:bb:7f:
22:92:b5:a0:b5:ea:22:80:15:49:69:70:ff:53:af:
c5:f0:ed:31:68:cc:31:37:57:01:82:f4:10:24:7d:
bf:11:6e:b7:39:0f:8f:7e:84:21:9e:d9:3c:f8:79:
7b:63:ae:a1:7b:ba:b6:d5:da:37:64:2f:52:c9:4e:
3c:31:b0:5c:74:60:26:17:37:3e:df:f3:d0:99:58:
72:f7:37:f0:ff:6b:87:0f:d4:5a:2f:52:89:ce:b0:
f1:8d:5a:a2:b9:a5:75:6e:86:63:94:ef:2b:4e:ad:
fe:37:52:ad:29:91:b2:25:f1:e9:27:e1:da:27:73:
b3:5e:b5:d5:bd:62:d4:35:6f:07:01:06:28:45:24:
4e:f8:49:dd:a5:bc:86:10:a8:15:0c:be:45:a7:b5:
c0:43:4d:7f:67:eb:df:75:ca:eb:09:4a:6c:f9:6c:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:A8:94:49:52:AE:AD:2A:2B:B4:D9:A5:B2:4E:C1:12:09:91:10
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD30BC0A8B911ED92C7CEE2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b5:20:a4:9d:75:b1:25:d7:62:68:c6:f2:d2:a1:29:b8:e2:
aa:44:08:76:5b:d3:d1:15:d2:0f:91:13:a3:1f:6a:5b:3a:47:
33:6f:6b:ce:a2:27:c7:8c:97:7c:d5:8d:0c:57:a8:d9:3b:a8:
29:5f:cc:fa:bc:c5:4a:8b:4f:ec:c2:3a:bd:ad:bd:6d:c1:0f:
05:2d:df:15:9e:02:31:a0:2d:7b:a2:13:91:35:4b:46:10:5d:
19:37:15:8c:53:29:df:cf:6a:47:80:99:de:34:cb:ba:67:24:
32:28:68:8b:61:e4:2e:a4:79:84:9a:e2:2a:d8:98:c4:52:04:
20:24:82:be:47:d6:78:7e:fd:06:e5:34:3d:28:0f:2c:f7:78:
0f:a4:e1:b5:37:4c:22:be:31:26:cf:40:27:ae:c9:7a:f1:ac:
bb:53:94:1e:6d:cd:79:33:d4:2a:65:96:49:59:86:5e:68:eb:
b9:38:02:3f:8b:a2:ce:a1:b6:ad:af:ab:ac:8b:67:03:75:e8:
e6:82:5b:87:74:a7:a8:e2:f1:b7:7e:95:f1:be:98:7b:55:d2:
d3:5c:76:8a:7e:b6:e5:a9:6f:2a:6d:75:22:fd:c3:71:de:4e:
9c:ed:47:1e:cd:36:62:a0:a6:20:96:11:0f:47:58:71:97:96:
d2:f1:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 03:25:50 2024 by rpki-client on console-ams.rpki-client.org