Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AA01DA07DF511EC9E6375C65A40D577.roa
File: 9AA01DA07DF511EC9E6375C65A40D577.roa (raw, json)
Hash identifier: lyPa7Ri6DR4kuZh5pkzujtj2BDoZxRcOWRrSsJ3AGzk=
Subject key identifier: 55:CE:28:46:19:AE:79:BB:71:1C:A5:87:33:76:CD:1A:91:55:FE:7B
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0508
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AA01DA07DF511EC9E6375C65A40D577.roa
Signing time: Tue 25 Jan 2022 15:43:56 +0000
ROA not before: Tue 25 Jan 2022 15:43:52 +0000
ROA not after: Wed 25 Jan 2023 15:43:52 +0000
asID: 327790
IP address blocks: 161.123.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1288 (0x508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 15:43:52 2022 GMT
Not After : Jan 25 15:43:52 2023 GMT
Subject: CN=61f01abc-f46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:26:b0:29:34:73:50:11:8c:38:6c:c1:cc:
10:b3:78:2a:4d:c6:21:bf:f6:d1:f5:25:48:ea:96:
88:13:6b:32:f3:d7:53:1d:74:53:e6:f7:c4:34:62:
b5:87:3a:b1:47:3f:60:a6:0f:de:27:bd:c3:8c:f2:
e7:e4:dd:56:1e:22:30:2b:8f:30:ef:f0:e0:f3:13:
c0:65:fe:f3:27:03:06:48:35:07:c2:c1:ba:ff:e5:
88:2f:db:7c:7d:66:03:cb:0f:6c:9a:5b:57:5e:97:
05:6f:82:d3:9a:9a:85:3c:bd:af:5f:2c:c5:4f:c0:
09:d5:bb:0e:bf:d2:b6:4e:24:00:36:f1:9b:05:73:
ab:a2:bb:2c:f0:cb:f1:df:a3:bf:eb:b8:bf:a6:8a:
61:2c:8c:49:40:b5:8d:d7:92:de:c4:8b:49:e9:7a:
83:4f:8d:55:0b:52:1b:b4:77:1f:c5:54:05:ed:1c:
b0:6a:4f:a9:d7:6d:58:9a:66:8f:40:95:3c:f2:5e:
22:2a:3e:b9:a7:2d:27:e5:03:ab:ec:dc:d6:0c:52:
e7:bd:30:a2:51:e4:3e:39:ae:69:66:bb:42:02:c3:
23:85:d4:20:af:74:65:96:40:33:95:12:6a:96:a9:
1b:31:73:56:da:79:c5:bd:62:6d:60:13:53:39:ad:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:28:46:19:AE:79:BB:71:1C:A5:87:33:76:CD:1A:91:55:FE:7B
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AA01DA07DF511EC9E6375C65A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:42:c2:fd:ef:47:9d:65:52:a0:6d:db:d3:ac:e0:dd:8d:99:
d3:ae:c8:de:04:ae:c7:55:9c:5b:ef:1d:a0:84:b7:c6:6e:3a:
32:25:90:e8:64:54:34:c9:88:2e:bc:91:a4:85:db:95:f7:40:
04:42:df:ef:e3:02:e0:78:17:02:7f:5c:39:b8:31:4c:24:fb:
4f:e8:e7:f4:14:bd:bf:9f:6c:e7:7d:e6:40:fd:a6:79:e8:f0:
92:ec:ee:c6:c8:75:19:76:e5:41:90:e8:5f:fe:a4:a2:1f:df:
fd:65:65:a5:3f:d8:6d:ff:e4:87:1a:23:9a:52:8a:29:6a:16:
58:1c:d0:66:5d:e1:51:55:c1:ca:cd:41:99:28:9a:ae:00:4c:
9b:12:f7:6c:9f:d7:69:6a:bd:c0:e6:8d:35:12:1f:5f:85:28:
b9:85:84:57:70:1e:60:73:ca:55:69:b8:f1:fa:98:fb:3c:ca:
2c:5d:bc:6f:9f:dd:d9:1d:1d:9c:9a:aa:78:0e:49:72:2f:9c:
54:b6:36:b9:c4:8b:da:49:74:ce:55:7c:72:81:3d:9c:17:db:
a0:69:75:27:48:73:d6:aa:b2:17:a4:1c:f5:37:61:d7:55:15:
77:66:7a:10:69:21:61:0f:73:54:13:30:13:97:ce:4a:f5:2c:
8c:bd:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org