Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/88D0B9ACCF0E11ED9394D7F0F1222468.roa
File: 88D0B9ACCF0E11ED9394D7F0F1222468.roa (raw, json)
Hash identifier: Fs220oxaq9wQhekJwnZzPc6lZdCOkp8mi/hS5BBA8F0=
Subject key identifier: C0:85:C1:BF:F0:6A:41:45:61:D8:71:D0:46:C9:1E:8D:F7:E1:95:C3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A52
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/88D0B9ACCF0E11ED9394D7F0F1222468.roa
Signing time: Thu 30 Mar 2023 15:21:25 +0000
ROA not before: Thu 30 Mar 2023 15:21:22 +0000
ROA not after: Sat 30 Mar 2024 15:21:22 +0000
asID: 204765
IP address blocks: 161.123.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2642 (0xa52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 15:21:22 2023 GMT
Not After : Mar 30 15:21:22 2024 GMT
Subject: CN=6425a8f5-4932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:c7:df:fc:3b:03:b8:10:82:40:54:00:d9:
f3:97:2f:60:8c:b3:43:7a:cb:79:fb:62:6f:9f:20:
f6:29:76:8b:13:23:66:27:76:f9:2f:11:5c:64:8a:
88:85:9d:0e:05:aa:d2:d1:ac:8e:b2:87:c8:11:95:
b3:fb:f6:e9:da:20:c7:94:e7:23:85:4a:b8:84:18:
4e:58:88:42:ca:52:e1:78:7e:7b:41:9b:cb:3d:c1:
b2:4e:59:d5:5e:e5:88:d3:73:a8:2f:46:e1:4d:14:
1e:65:d0:70:b0:6e:6a:47:07:b8:78:30:71:05:69:
82:18:23:47:c1:7c:fd:8a:d2:c5:60:b7:7e:49:5a:
25:b1:73:c2:de:cc:0b:5b:c0:d0:1d:61:24:f6:97:
02:72:6a:66:b0:e3:f8:f3:34:13:46:b0:35:a2:9c:
57:d7:b4:8b:0b:98:e6:6c:be:0d:c4:03:9b:9e:d3:
56:ff:21:b2:e4:1a:33:d6:82:4e:82:84:50:26:c4:
d1:81:f6:1e:a2:2a:d6:40:83:f1:e5:1b:f4:a1:13:
b4:b0:57:c2:c8:03:c2:71:01:05:db:22:10:ca:6b:
e8:d5:33:7d:99:28:bc:9b:e0:e5:71:51:b2:7d:f6:
0f:6b:37:3f:e6:c4:75:fc:94:50:62:65:95:2e:ba:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:C1:BF:F0:6A:41:45:61:D8:71:D0:46:C9:1E:8D:F7:E1:95:C3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/88D0B9ACCF0E11ED9394D7F0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.236.0/24
Signature Algorithm: sha256WithRSAEncryption
94:67:22:50:d3:9b:6a:94:44:1f:63:26:c0:02:51:74:85:4c:
7b:0a:20:1c:f0:25:77:c6:cd:92:e9:94:f3:de:28:85:4e:06:
2a:68:61:9c:33:29:64:17:77:a0:e6:ba:32:87:15:d4:4f:25:
6e:fe:38:81:7a:1c:53:54:c9:40:42:fe:6d:ce:0e:f1:68:c0:
fe:f1:df:23:a6:14:2d:3b:9c:c8:7b:7c:98:6e:1f:ff:99:74:
94:70:a9:fb:13:02:d9:9f:2a:ed:fd:53:c3:cd:9b:5a:f1:22:
9a:11:0e:87:d7:40:72:10:ae:76:5e:9b:c1:06:f5:a1:ba:78:
dd:77:f9:a4:ca:21:a0:a0:cc:62:7b:15:8a:fe:6b:13:ea:ca:
cf:5c:b1:3e:cd:4c:fb:36:7b:2c:78:75:ec:eb:04:72:db:b9:
f0:7b:57:e7:05:dd:5e:b0:1d:ef:c0:9d:1a:ee:07:16:d8:c8:
15:30:95:ab:11:04:be:d6:a1:dc:eb:96:d5:37:bc:92:05:4a:
83:f5:a8:27:da:dd:90:24:c3:52:6f:38:6c:2d:0d:45:02:94:
fd:a9:33:55:e5:e3:b7:0e:2a:84:ca:f0:7f:54:eb:23:de:b9:
df:57:8b:2f:ee:25:03:bf:ff:92:8e:48:09:c4:ae:bf:84:e0:
5e:c0:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 03:12:36 2024 by rpki-client on console-fra.rpki-client.org