Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F7C1C9EA8B911EDBDC93EE3F1222468.roa
File: 9F7C1C9EA8B911EDBDC93EE3F1222468.roa (raw, json)
Hash identifier: kkXvbLNtWlF125j+2kiqnBmny5EnXoY8tn135n8FYbI=
Subject key identifier: 5D:63:D2:E6:6B:56:B5:E9:EF:9A:5D:49:53:A1:F6:45:06:74:15:ED
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09B0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F7C1C9EA8B911EDBDC93EE3F1222468.roa
Signing time: Thu 09 Feb 2023 20:37:52 +0000
ROA not before: Thu 09 Feb 2023 20:37:48 +0000
ROA not after: Fri 09 Feb 2024 20:37:48 +0000
asID: 207990
IP address blocks: 161.123.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480 (0x9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:37:48 2023 GMT
Not After : Feb 9 20:37:48 2024 GMT
Subject: CN=63e559a0-8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:18:5a:3f:3e:99:47:f5:c6:9f:6e:79:fd:
b7:44:2d:c6:3a:42:ea:3d:c5:fe:fb:54:3f:3f:06:
43:fb:ae:0a:1e:86:5c:62:33:77:4a:9d:59:d4:ba:
6b:03:3d:16:a6:0f:98:b5:f0:0c:4d:8a:6c:0b:ac:
a1:f0:b3:15:55:82:ba:c9:94:b7:b2:d8:a2:ee:4d:
ff:67:d2:b4:b9:8e:c2:7b:47:2f:ba:c8:25:ad:ad:
74:83:6a:e9:fb:e7:67:ce:61:02:93:0c:67:72:96:
70:e8:8c:5b:f7:37:4f:df:dd:12:c0:9a:16:be:06:
a5:02:db:88:75:0e:73:35:c4:b4:83:6e:78:6d:ae:
33:be:ce:09:3e:d9:7b:dc:94:64:fd:26:da:04:a1:
77:10:c0:71:20:07:fb:7a:3a:d6:b2:23:e4:ce:26:
4a:be:ea:27:58:1a:bc:0a:a1:bd:5d:5c:d9:79:30:
ab:21:87:51:bd:d0:98:f7:5d:dc:fd:ee:81:95:c0:
fd:50:df:a8:c7:15:13:cd:07:08:93:a5:06:c8:9f:
1b:2c:96:a5:6e:6b:fc:af:0c:e7:08:5d:76:32:b6:
60:fb:3d:ea:56:10:60:92:8c:41:e0:61:1b:3e:30:
50:88:0a:1f:dd:2b:30:ac:58:76:f7:31:c3:4b:11:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:D2:E6:6B:56:B5:E9:EF:9A:5D:49:53:A1:F6:45:06:74:15:ED
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9F7C1C9EA8B911EDBDC93EE3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6f:ce:c5:d3:46:58:3b:d6:4e:e3:65:61:b6:a9:c5:d5:c2:
b2:20:2a:e9:94:b5:a1:a4:ad:31:39:8f:94:9e:df:7a:cd:4b:
f2:af:25:95:7e:8d:fa:24:d8:9e:e2:36:95:3a:36:af:3f:ed:
c6:5d:b5:e4:9d:cc:df:76:75:12:9e:17:5c:5e:69:ef:d6:59:
57:c9:bd:5c:7d:e6:27:43:0f:0a:86:7f:54:25:d3:d4:4b:fa:
cb:f3:d0:fe:4e:68:3e:71:52:da:82:26:0d:be:e3:da:0a:60:
01:6b:a2:5c:73:11:c8:a8:b8:3a:7b:02:9e:fa:9a:23:9e:0a:
9a:b4:90:ea:de:69:23:a9:08:43:c8:e7:81:97:a7:b2:38:45:
fe:71:ed:53:38:5f:db:88:92:b6:80:fb:cb:15:9e:d2:23:35:
ab:72:d4:bf:a6:75:d5:75:91:d8:ba:33:97:f9:9e:2c:8b:52:
58:0e:41:5e:96:63:58:82:13:c2:4f:cc:3f:00:fa:fb:94:f1:
50:da:1f:a2:5e:86:aa:1b:ed:94:04:e5:38:f2:e1:88:41:17:
19:96:5e:39:0a:9f:95:92:ce:a1:f1:00:ad:4d:96:99:1b:63:
7d:38:ad:a9:a5:04:cd:90:49:b2:15:fe:7a:68:c8:c4:8d:f7:
c1:bb:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 03:16:46 2024 by rpki-client on console-fra.rpki-client.org