Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99FC2534BB1B11ECA5039BE65A40D577.roa
File: 99FC2534BB1B11ECA5039BE65A40D577.roa (raw, json)
Hash identifier: yCP1YY8t+i/davxjWn4pezgKBs6g1IGqEDfaR1w528c=
Subject key identifier: 31:82:07:B4:89:BE:D8:9A:DF:85:32:F4:29:C8:C9:3D:AF:A9:1D:FC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0664
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99FC2534BB1B11ECA5039BE65A40D577.roa
Signing time: Wed 13 Apr 2022 11:19:36 +0000
ROA not before: Wed 13 Apr 2022 11:19:32 +0000
ROA not after: Thu 13 Apr 2023 11:19:32 +0000
asID: 211252
IP address blocks: 161.123.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 13 11:19:32 2022 GMT
Not After : Apr 13 11:19:32 2023 GMT
Subject: CN=6256b1c8-969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:ee:dc:e4:45:fa:f7:f3:78:2d:56:51:9b:
54:02:fe:b2:d1:56:f0:dd:2d:30:8b:1b:fc:a5:15:
3a:9f:74:0d:3c:52:5a:23:62:c2:b7:8c:fc:2b:a2:
8b:8a:33:5a:bf:9c:ca:2c:f5:99:64:80:5b:24:01:
a3:b8:a5:87:16:44:1b:25:d1:cb:52:b0:01:1b:14:
1a:80:26:36:38:f4:ae:3a:ff:c0:fd:c9:6f:8e:61:
67:e0:19:40:ea:59:01:0d:e6:40:43:af:f4:55:b9:
9b:53:14:f4:ce:12:94:8b:d2:ba:71:78:a7:df:ae:
b4:3e:2c:5c:cc:20:17:1c:0a:0d:a7:d5:c9:d3:4b:
79:34:aa:7b:3b:6d:01:38:7b:f7:7a:d0:ed:24:d0:
07:d0:ff:07:8a:53:eb:52:50:dd:a0:fa:27:a9:b8:
f5:43:20:88:1c:46:d3:18:37:43:86:ea:ef:22:33:
2e:f5:74:26:9a:08:2d:f3:03:02:18:2c:72:85:4d:
98:e4:80:41:be:e1:e2:8c:06:a3:10:0d:97:dd:a6:
28:61:90:54:3d:5b:26:32:39:72:64:56:b2:a7:08:
54:2c:b3:be:55:0d:86:1b:57:a3:90:95:a2:07:37:
d3:42:13:d4:7f:29:f4:94:98:19:08:fc:cd:09:81:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:07:B4:89:BE:D8:9A:DF:85:32:F4:29:C8:C9:3D:AF:A9:1D:FC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/99FC2534BB1B11ECA5039BE65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:81:f4:19:9d:fc:59:79:5e:ba:4c:4a:9a:42:22:19:2e:8b:
81:65:44:9d:f6:81:36:71:14:28:02:d2:25:7d:99:e7:5f:62:
aa:3b:b7:2a:b9:2a:93:2e:40:19:cd:1f:3d:a9:eb:8f:3d:ce:
fd:23:31:ff:dd:2e:77:5f:2e:ed:b1:47:f5:24:ac:28:a8:bc:
8d:7b:71:c0:7a:c6:f4:cd:ef:ea:73:f6:bb:0d:d8:ec:69:50:
70:02:2d:50:27:70:e3:d5:83:45:ce:3a:9a:be:d5:68:02:72:
e7:2b:fe:e2:98:38:99:9e:52:0c:7b:f5:e1:bb:dc:e3:a4:10:
7b:21:e7:74:2c:86:05:84:b0:e5:6b:5d:9b:ea:67:30:11:d9:
b9:34:4d:c2:ba:89:a9:0d:67:3f:fb:29:cb:95:82:42:51:d4:
84:2c:65:5f:25:d0:af:eb:3b:a0:92:98:28:1a:67:c5:f4:a3:
ac:0a:b9:39:c0:ce:b1:b8:e1:a4:95:0e:dc:d3:72:11:ba:ee:
c6:f7:91:86:21:83:53:03:8f:d2:c1:03:89:2e:3a:c0:2f:4f:
19:e6:f2:f1:ba:95:e9:01:ca:34:bd:a1:7f:fd:0d:72:7d:05:
93:1b:b0:59:32:de:b4:7b:d5:cd:20:37:b7:32:be:06:e9:a3:
58:9f:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org