Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/84E4CF5A3BD911EC9768A53ED8A014CE.roa
File: 84E4CF5A3BD911EC9768A53ED8A014CE.roa (raw, json)
Hash identifier: PI/rTzC2Wah7+f98BJ1fA30KoWNHU9Uy4KHERAbt33I=
Subject key identifier: 7B:52:D7:6E:4F:78:93:DE:B2:AB:D6:B3:89:71:8C:DC:E3:8C:97:98
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 022F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/84E4CF5A3BD911EC9768A53ED8A014CE.roa
Signing time: Tue 02 Nov 2021 12:36:37 +0000
ROA not before: Tue 02 Nov 2021 12:36:33 +0000
ROA not after: Wed 02 Nov 2022 12:36:33 +0000
asID: 327790
IP address blocks: 161.123.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 12:36:33 2021 GMT
Not After : Nov 2 12:36:33 2022 GMT
Subject: CN=618130d4-38a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:09:df:d0:ec:5a:4b:c8:e0:a7:e7:32:9e:
56:e5:3c:f8:85:a3:40:a7:c1:a3:44:1e:2c:95:99:
06:30:70:af:92:82:7a:09:f6:72:9c:95:3e:88:3e:
c0:e2:d5:ed:07:c8:48:4f:60:67:84:7a:7e:51:96:
04:ee:35:de:8a:b9:92:6e:88:dd:b2:32:05:9f:c4:
be:17:24:53:e2:43:f6:66:eb:08:90:b1:6f:2e:3d:
ac:4b:c4:b7:e7:c9:6a:b2:f8:f6:cb:0a:74:53:2d:
6f:1b:83:5f:76:d3:d1:d5:5e:1a:49:ea:12:67:be:
ae:90:b0:91:f0:67:9e:d1:e6:68:77:67:74:33:f1:
67:4c:b5:f7:11:59:92:99:f3:e5:06:61:81:e2:71:
1f:d1:3a:a2:1f:80:2c:24:1f:ec:0d:fc:da:97:17:
8e:c6:aa:16:48:0a:fd:cb:87:10:79:99:c9:ba:bd:
2a:35:36:35:ff:d2:34:b7:3a:eb:c9:b0:50:f9:9f:
7d:7f:45:69:df:d4:7e:42:a8:b3:b0:5e:f6:0d:40:
b2:62:1b:4f:b8:92:d3:c3:0b:86:44:ae:f9:3e:34:
e5:6d:9c:ae:74:2f:47:b9:39:13:94:9f:19:1c:2d:
7b:14:01:a7:67:69:4c:df:a6:d0:93:20:c5:8d:00:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:D7:6E:4F:78:93:DE:B2:AB:D6:B3:89:71:8C:DC:E3:8C:97:98
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/84E4CF5A3BD911EC9768A53ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bd:19:6a:03:6d:33:7c:43:8d:b1:52:73:f5:27:38:67:3e:
ea:ef:72:34:5f:4f:05:c5:65:fc:be:4c:eb:c9:4e:f5:e1:fa:
26:38:ab:0e:dd:e6:e9:5c:cf:5e:70:1d:f1:93:85:38:29:4d:
3f:76:40:31:b2:93:16:4c:18:b6:d4:3e:fd:6c:d6:0f:33:97:
b0:f3:d4:b5:b1:02:96:75:17:0e:c5:2b:9e:35:84:fb:be:6a:
47:2f:24:65:d6:b8:6b:06:ba:d9:c8:a6:81:d1:e4:9e:e8:5f:
bd:1d:83:7b:fe:b1:30:d9:44:85:6b:b6:ff:50:51:6b:23:64:
77:39:20:96:68:9f:0b:5b:40:02:58:8c:a7:66:0b:91:bb:c2:
ad:86:90:9c:86:cc:69:44:25:a7:db:e7:22:70:30:05:c8:f5:
24:8a:11:74:58:21:2f:6f:1d:e1:69:65:d8:f6:42:c3:16:cc:
1d:4d:a6:90:8d:6c:a7:f4:d0:47:5a:80:5f:41:08:02:e7:c6:
fc:7f:ae:0f:b5:7d:59:5b:df:ab:ff:26:59:ed:be:ac:d7:40:
d9:99:63:64:e4:8d:d1:fa:f8:40:2f:e8:04:23:ce:36:94:87:
fd:33:2a:1e:af:9a:df:4d:3f:d6:ae:45:d9:76:cc:b3:21:df:
6a:56:7a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org