Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9E27ED785AEE11ED82A2A3D7F1222468.roa
File: 9E27ED785AEE11ED82A2A3D7F1222468.roa (raw, json)
Hash identifier: 2ep0jcATfiys4+GazsbN0Mo5DYLwmQu7ODr0Y04EOEU=
Subject key identifier: 90:29:52:92:34:52:AF:D8:F7:00:CA:2C:8F:84:2D:4F:D9:01:66:69
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08D5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9E27ED785AEE11ED82A2A3D7F1222468.roa
Signing time: Wed 02 Nov 2022 20:40:42 +0000
ROA not before: Wed 02 Nov 2022 20:40:38 +0000
ROA not after: Thu 02 Nov 2023 20:40:38 +0000
asID: 203999
IP address blocks: 161.123.8.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 20:40:38 2022 GMT
Not After : Nov 2 20:40:38 2023 GMT
Subject: CN=6362d5ca-73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:2d:db:c8:41:a0:81:ef:1b:48:f5:85:64:
73:74:a4:39:f8:b1:58:97:7a:24:09:07:29:8f:d0:
fc:2f:28:86:74:02:f4:14:09:4f:70:fc:c4:ef:3f:
a8:26:d9:db:0e:48:1b:79:2d:1c:21:85:83:6f:5b:
c2:3a:2d:32:66:29:bd:63:7b:77:9f:f7:3e:68:c8:
cc:ed:ec:53:f5:c7:c6:0b:9a:da:59:b3:96:c2:c7:
7f:12:24:12:95:e5:d2:c2:b7:3d:64:ff:54:c3:7d:
33:ba:3a:fa:48:3b:0a:e1:f2:96:5f:dc:6f:39:8a:
e0:7c:d0:e1:4b:ca:e3:08:58:6d:44:4a:aa:d4:3f:
ac:36:1c:3c:92:36:cd:3a:a6:49:79:bd:70:42:94:
2b:48:05:b6:69:95:01:01:df:c5:46:b3:ba:c8:86:
f6:aa:37:9d:f7:d8:0e:fd:e4:e0:fc:5c:4e:67:cb:
5b:a4:e2:60:5c:fd:e2:af:fe:f5:ac:a3:38:cd:5b:
be:3f:74:66:b6:8a:f0:53:12:a1:91:2e:a1:ea:97:
4a:1d:91:c5:a7:6c:15:5c:cc:20:f5:9b:db:6d:67:
e9:89:26:87:54:a1:f6:33:45:fd:c4:96:51:7e:f5:
09:a8:5d:d3:93:5d:a5:a7:67:35:58:91:57:ed:1e:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:29:52:92:34:52:AF:D8:F7:00:CA:2C:8F:84:2D:4F:D9:01:66:69
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9E27ED785AEE11ED82A2A3D7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.8.0/21
Signature Algorithm: sha256WithRSAEncryption
77:74:d9:5c:82:71:98:96:47:e3:2b:67:57:4b:aa:d6:bb:2d:
1f:63:9e:40:95:f4:4b:c8:65:8d:ac:1a:3e:b8:54:e7:cb:fa:
68:17:ff:96:d2:2e:55:13:f4:db:7e:3b:54:c4:28:b1:a3:09:
38:bb:d4:e2:bf:af:3d:20:f0:30:c1:fc:78:74:85:be:5b:90:
04:bb:af:ef:fd:ed:cd:d1:77:eb:be:45:35:03:78:78:bf:89:
1d:8d:71:13:1a:2a:c5:1d:5e:62:7d:99:65:63:b7:f4:ad:65:
88:e5:12:7d:2b:99:2c:83:b1:f8:18:b4:66:97:4e:d8:10:6c:
f9:f1:10:9e:86:7b:a5:34:3a:ec:66:87:59:ea:f9:fb:14:97:
3c:9c:7d:23:ed:db:c4:bd:ab:95:da:56:39:e0:e2:2b:88:6a:
ed:09:66:0a:dd:fb:8e:42:91:43:5f:13:ea:a6:ed:8d:ca:d1:
da:3f:61:4c:49:e8:84:d9:b8:90:cb:ca:d4:c2:08:d9:a1:49:
9b:2b:28:b9:64:0d:64:d9:55:27:43:ef:5e:3b:6c:c4:13:10:
54:ef:6f:8a:e7:09:72:af:9a:dc:db:e6:17:73:30:d1:60:f8:
3c:69:a1:62:56:d5:3e:0b:8e:f0:2b:69:67:be:21:4b:49:27:
7b:46:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 01:55:23 2023 by rpki-client on console-fra.rpki-client.org