Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99C7B9AEC89C11ED9AB7AFE5F1222468.roa
File: 99C7B9AEC89C11ED9AB7AFE5F1222468.roa (raw, json)
Hash identifier: IlkWk4n8NGr3JsvoxOFLkfJDA39K9rNY1XLRoiXtqbM=
Subject key identifier: 93:C6:BD:99:16:42:D9:DF:CF:A1:21:91:F7:DF:27:08:A1:38:C4:9E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A3B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99C7B9AEC89C11ED9AB7AFE5F1222468.roa
Signing time: Wed 22 Mar 2023 10:30:44 +0000
ROA not before: Wed 22 Mar 2023 10:30:40 +0000
ROA not after: Fri 22 Mar 2024 10:30:40 +0000
asID: 207990
IP address blocks: 161.123.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2619 (0xa3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 22 10:30:40 2023 GMT
Not After : Mar 22 10:30:40 2024 GMT
Subject: CN=641ad8d4-3e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:e6:04:94:f2:e3:0e:dc:bd:a7:7d:65:ec:
63:6a:f8:4e:1a:ce:5e:c4:a9:55:04:04:a1:62:94:
50:62:5b:30:2f:44:8d:2a:75:88:70:5d:3f:80:57:
36:5a:21:8c:41:6e:30:da:15:9e:07:e8:82:11:b1:
5a:08:63:e1:da:bd:86:18:0d:ed:6c:c3:6f:cc:63:
96:7c:71:33:d1:70:d7:06:07:ff:4f:20:17:d7:1c:
87:2a:55:cb:e4:db:e7:b1:5a:fd:2e:a4:a0:b5:38:
45:d1:fd:0b:35:c0:f4:56:0f:12:9b:2c:aa:f7:a5:
ad:85:af:4d:07:06:51:b7:41:8c:62:14:c4:02:be:
35:6f:c8:35:34:f0:53:ad:ae:92:8b:f2:89:13:ec:
6e:f3:fe:28:ad:a8:26:0b:33:5d:4f:11:2b:aa:9c:
da:78:5c:eb:17:04:28:e2:2c:ce:be:db:d0:5a:47:
02:e6:42:9b:1c:71:e6:11:25:9a:d1:19:76:04:02:
2c:44:df:3f:ee:9b:57:8b:fc:fa:87:41:0e:19:65:
b2:f4:63:02:27:89:b7:c3:68:b9:59:b3:48:21:c2:
f5:2d:f8:c5:6b:40:cd:dd:0c:07:8d:c8:9e:da:f4:
8c:9a:ba:f6:5b:7c:93:2a:b7:90:57:e6:c2:46:78:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:BD:99:16:42:D9:DF:CF:A1:21:91:F7:DF:27:08:A1:38:C4:9E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99C7B9AEC89C11ED9AB7AFE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.72.0/22
Signature Algorithm: sha256WithRSAEncryption
30:2e:f8:3a:9e:51:39:28:fb:30:6a:00:88:05:ad:30:63:f3:
7e:6b:62:d2:83:b3:bf:c8:6e:64:14:1c:e9:09:d4:ba:d7:57:
8a:d3:a0:03:c9:6d:f2:83:dc:3c:5d:65:b6:9b:1d:c5:18:c4:
69:51:a2:bc:34:5e:00:d5:c7:e4:41:51:bb:d2:a7:86:d4:ea:
d5:c5:2c:46:40:ca:39:38:dc:b9:96:97:63:b9:17:bb:88:24:
58:21:c6:10:a0:ee:11:60:5c:be:c2:8b:fb:82:22:40:5c:72:
e0:8a:57:a7:34:8a:4e:1e:68:d8:c2:05:e5:e9:ca:2b:90:23:
08:dd:a9:f1:49:c2:f5:c5:2a:45:5e:35:31:99:a6:01:82:3f:
a2:c5:9a:f2:fb:b9:6f:bb:c2:46:23:58:eb:5c:29:d4:89:4f:
6f:76:0d:7c:61:d8:49:42:6c:71:bd:d6:c8:39:ad:e6:69:ed:
42:a9:fb:55:93:54:a4:fa:5a:98:fa:4a:67:37:73:19:37:96:
f6:96:a1:37:d4:3e:a5:bd:3c:f2:b3:05:5e:e2:27:6e:0e:ef:
50:b6:c2:a5:00:0d:28:3d:2b:77:5d:77:6d:38:94:ba:e2:88:
ac:61:3f:58:ae:e2:f8:91:27:22:a4:a2:30:75:5e:f9:b7:af:
d0:dd:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 02:45:25 2024 by rpki-client on console-fra.rpki-client.org