Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A01D63C4CE1611EDBFA15785F1222468.roa
File: A01D63C4CE1611EDBFA15785F1222468.roa (raw, json)
Hash identifier: 3WXtB8XUkGXRyJUH5m+1AQ+fNYUTakkQpNQVmvQmFFc=
Subject key identifier: F6:12:AE:DC:26:E4:31:D2:CD:DC:9A:05:1A:E2:B3:10:6C:54:30:61
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A4D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A01D63C4CE1611EDBFA15785F1222468.roa
Signing time: Wed 29 Mar 2023 09:46:49 +0000
ROA not before: Wed 29 Mar 2023 09:46:45 +0000
ROA not after: Fri 29 Mar 2024 09:46:45 +0000
asID: 207990
IP address blocks: 161.123.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2637 (0xa4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 29 09:46:45 2023 GMT
Not After : Mar 29 09:46:45 2024 GMT
Subject: CN=64240909-3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:6f:28:6f:d8:7a:8c:f9:49:b3:e6:63:de:
58:2c:f9:e5:95:95:d9:d2:b1:cd:fc:b0:09:2c:7c:
76:c6:80:6d:be:e4:7a:f9:02:ac:43:fe:45:4f:37:
f1:26:6f:91:09:6c:d2:e8:41:9d:01:17:84:0a:18:
20:90:c4:6e:5f:74:6d:3f:93:7e:03:65:6d:63:c7:
cd:9e:6f:fe:69:e5:fb:5e:10:b9:3b:90:c2:39:91:
37:f2:23:6a:bc:47:f8:fa:69:cd:d8:a9:4d:cb:45:
a7:9d:e0:0d:4f:a9:91:51:e6:d6:3f:5c:9b:77:7d:
a6:0e:32:a8:34:e9:37:83:86:eb:8b:da:6d:05:66:
17:fa:a7:43:fd:bf:86:a5:3d:be:01:ea:39:e6:d9:
96:2a:d0:88:ef:4b:94:f6:dd:e6:d8:b2:d1:70:3e:
83:de:ac:fb:31:1a:d9:74:2f:ee:05:c6:30:fe:f4:
d2:00:eb:96:c4:16:c7:7a:33:f1:b3:8a:3c:04:3e:
6c:6d:66:44:e9:42:1a:d0:18:60:da:3c:39:86:d0:
42:56:1f:70:d7:55:fe:cf:91:e7:fe:c5:62:39:72:
b6:c1:35:50:ce:a0:1c:c2:af:b2:23:d5:ec:e1:73:
32:d6:0d:a0:11:b2:a2:ca:85:72:d2:06:71:e8:76:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:12:AE:DC:26:E4:31:D2:CD:DC:9A:05:1A:E2:B3:10:6C:54:30:61
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A01D63C4CE1611EDBFA15785F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:eb:92:86:d7:3d:02:08:10:83:cc:72:85:85:bd:96:67:a3:
ab:60:91:3d:9e:44:e5:3f:1d:ce:56:93:bc:09:a5:b7:00:0f:
dd:6a:bf:02:3d:56:bc:d2:40:de:6e:74:a7:a4:df:53:be:b9:
62:cc:e1:46:f1:33:41:d3:03:b3:24:5b:62:79:2b:34:14:d1:
ad:dd:9f:48:ab:86:bd:97:02:40:bf:e4:21:57:e1:cd:6d:71:
bd:b7:74:d2:83:27:e8:53:58:85:a3:8c:ae:13:d7:d9:e0:8b:
43:ac:5f:bf:50:6b:21:39:0d:2a:03:f4:61:5b:66:aa:aa:71:
3a:5f:86:42:8f:75:8c:19:6c:4d:e9:34:4f:b4:61:41:ba:19:
9a:7d:90:af:1c:31:15:d1:58:b5:04:bb:8c:5b:be:2f:c4:1a:
5a:15:b7:67:52:e4:51:63:cd:61:07:99:ca:a8:53:8c:c5:1b:
93:d7:e7:a2:24:6e:63:da:c6:b1:a7:a1:46:1f:2a:1a:a6:e6:
38:e2:ac:6d:2a:cf:ca:87:d1:3f:39:38:e5:fa:0d:98:b8:0a:
aa:bf:fa:47:df:34:0d:04:29:af:c9:ca:da:59:36:29:e0:44:
b7:b3:52:16:6e:22:3c:98:2b:ab:ca:b4:11:24:52:43:ef:fa:
e9:81:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 04:21:41 2024 by rpki-client on console-fra.rpki-client.org