Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA9C7CC23D7F11EDA3E779ADF1222468.roa
File: AA9C7CC23D7F11EDA3E779ADF1222468.roa (raw, json)
Hash identifier: SQdpIpyXY6ea7rVZIdyu8u7HAW2ZM/dS3v2TSZ+0g1Y=
Subject key identifier: 3F:86:92:47:42:D4:09:D0:04:81:2B:57:46:61:11:66:5F:50:FE:0E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0855
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA9C7CC23D7F11EDA3E779ADF1222468.roa
Signing time: Mon 26 Sep 2022 09:43:25 +0000
ROA not before: Mon 26 Sep 2022 09:43:22 +0000
ROA not after: Tue 26 Sep 2023 09:43:22 +0000
asID: 203999
IP address blocks: 161.123.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:43:22 2022 GMT
Not After : Sep 26 09:43:22 2023 GMT
Subject: CN=6331743d-da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:7e:28:dc:67:b6:d4:07:0c:e6:1e:12:6e:
a0:9d:3c:35:3b:29:7a:6f:c9:92:9e:84:63:2b:7b:
74:40:f6:72:7e:73:3f:a9:6e:c6:32:b9:3b:39:e1:
e8:54:82:1e:d9:4c:38:bc:12:05:92:be:7c:54:f8:
45:95:5b:ed:83:aa:25:f7:a4:dd:97:4d:41:40:97:
b8:8b:8d:2b:06:39:fc:0b:67:2c:d8:4a:f3:c2:32:
15:ac:fa:e7:93:69:f4:2c:91:9c:fe:52:65:b0:59:
14:73:23:f3:31:3f:e7:44:7c:ac:94:de:f9:1c:5c:
28:cc:c1:20:da:09:4e:78:bb:ce:4d:dd:b7:82:d0:
f8:1c:1d:d5:73:58:fc:93:b0:c0:d4:fa:c2:1e:2d:
99:86:58:f1:ca:dc:a3:c1:64:cd:5a:ec:bb:23:b2:
a4:ac:bf:9e:bc:a1:58:72:c6:01:c7:86:73:e3:79:
94:c1:29:4b:ed:7e:ca:ae:84:40:b6:41:3b:5c:ca:
f9:62:be:b5:c3:e2:9a:ef:cb:34:af:09:32:e5:9f:
f3:5f:e0:51:01:f6:d9:f9:db:82:74:e3:c1:e9:73:
40:c7:1b:f9:35:b6:fa:ad:e6:35:ad:51:e2:76:11:
fc:1a:3e:bb:4d:77:55:01:39:41:0b:f9:1a:25:15:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:92:47:42:D4:09:D0:04:81:2B:57:46:61:11:66:5F:50:FE:0E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA9C7CC23D7F11EDA3E779ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f1:f3:bf:79:47:ba:c0:a3:4c:28:8e:62:13:57:d0:fc:3c:
f4:78:32:76:f2:08:84:16:61:79:24:3a:ce:0d:53:58:d4:86:
56:55:2e:03:20:cf:48:85:fb:84:92:5c:9b:8d:9a:53:b2:08:
e4:30:40:d3:2a:5e:f2:10:c5:5d:44:af:15:a6:e9:67:7b:6f:
36:05:86:a8:96:3e:b2:17:99:59:af:07:ff:4b:1a:48:6a:46:
72:a0:cd:f5:e8:8e:10:2d:b2:72:a9:a0:1e:cc:61:c1:f9:be:
1f:b3:2a:1a:96:7f:ba:01:ad:89:bd:ef:28:45:5b:18:1c:a9:
db:29:44:96:d1:80:e5:7a:39:1d:99:f7:6d:b4:d0:be:22:9f:
40:72:36:2a:6c:8c:96:28:d7:d1:df:81:06:78:3d:b9:5c:6e:
91:b7:f7:72:f8:f6:38:34:93:a7:89:b0:e9:6e:5b:03:e1:4e:
ed:7c:56:7a:1c:d0:9e:d6:46:d0:a3:68:02:31:a0:64:b2:da:
2f:17:98:72:e8:b5:7f:59:4b:88:23:71:73:62:b1:dd:14:e1:
b3:41:a5:31:c0:b5:62:63:8d:c1:39:72:e6:01:2e:4e:c9:91:
76:e0:64:a8:0f:e4:57:d0:79:00:4a:46:9a:a2:4b:70:0c:f5:
81:5e:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 10:57:15 2023 by rpki-client on console-fra.rpki-client.org