Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4A72EA43D8011ED944B6DB0F1222468.roa
File: C4A72EA43D8011ED944B6DB0F1222468.roa (raw, json)
Hash identifier: 2lFovgImh7TRw/5VlFT33Ibn7z6zQBFokPdKET7yw/U=
Subject key identifier: 99:AC:15:AA:2D:A1:96:9E:5A:EB:74:FE:96:F1:3A:32:B0:5C:AB:07
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0869
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4A72EA43D8011ED944B6DB0F1222468.roa
Signing time: Mon 26 Sep 2022 09:51:18 +0000
ROA not before: Mon 26 Sep 2022 09:51:15 +0000
ROA not after: Tue 26 Sep 2023 09:51:15 +0000
asID: 203999
IP address blocks: 161.123.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:51:15 2022 GMT
Not After : Sep 26 09:51:15 2023 GMT
Subject: CN=63317616-5973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:9d:18:97:90:22:29:4c:54:5c:ef:a9:e1:
aa:43:83:d2:75:9b:46:a4:d2:fc:36:7b:65:5f:05:
1f:4c:d4:03:84:92:84:bd:ff:82:50:e8:15:c2:d8:
d3:b9:04:2d:35:39:5e:c5:b8:ad:f8:2a:db:90:6b:
58:44:e0:8b:96:49:25:7d:01:13:7f:bd:a0:44:04:
59:7c:9d:f6:d5:11:07:be:18:34:30:dd:70:5a:9b:
91:26:db:2f:3f:d3:c0:19:eb:1e:9a:bd:9d:8f:6e:
a6:aa:45:96:eb:da:d7:d7:90:6f:46:c0:59:60:87:
6e:d3:f1:e4:e7:20:1d:86:f8:67:e3:b5:50:b7:a9:
ae:cf:86:41:bf:32:d9:7b:b8:23:69:c1:37:54:67:
a0:78:72:7b:b0:bd:00:0b:58:40:7e:72:2a:f3:fd:
6c:21:4c:87:19:46:8f:19:35:17:c2:1e:68:b6:73:
92:22:85:92:4a:47:aa:99:7d:fb:12:56:84:27:ff:
d9:b9:46:fc:d8:e5:72:46:5d:b2:90:b2:e3:29:7f:
b1:38:ab:eb:66:dc:67:98:cf:89:88:2e:1c:92:7f:
be:e3:ed:5b:be:48:89:49:4c:bf:de:70:59:41:c0:
6f:a6:00:38:3d:3d:28:50:72:30:64:4e:b2:10:50:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:15:AA:2D:A1:96:9E:5A:EB:74:FE:96:F1:3A:32:B0:5C:AB:07
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4A72EA43D8011ED944B6DB0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.118.0/23
Signature Algorithm: sha256WithRSAEncryption
31:8d:76:41:90:9a:59:51:cd:97:16:48:13:36:eb:a2:27:5f:
cc:b8:be:2d:d7:c9:50:1e:78:69:e5:a4:e4:e0:24:b7:6b:de:
4a:49:75:8d:c1:0c:01:f1:51:a8:8a:63:a3:2f:f1:78:78:31:
90:c0:38:90:6e:b1:96:51:90:50:a9:e0:4a:b5:38:4d:89:d8:
ce:c7:89:9e:2e:b3:68:52:cd:1d:cf:bb:9b:ca:4b:42:e9:76:
ae:de:4f:49:d5:03:ad:d9:61:27:79:6a:68:6b:41:a6:69:87:
a4:50:cc:d2:d4:ec:d7:24:29:34:0c:b8:e8:fc:77:db:60:b3:
e0:e6:79:c1:94:28:8d:77:52:6a:61:4c:92:fc:aa:2e:5f:9d:
09:14:bf:47:57:ce:67:d8:01:e1:36:06:d3:1f:e0:91:2e:e0:
12:4b:85:46:47:9f:fc:0f:0e:ab:d3:d7:33:90:a8:7d:2a:73:
d2:72:ab:7d:ba:a5:74:de:a7:dd:40:f0:56:72:57:54:1c:2b:
d3:94:6f:29:c7:d0:96:bc:07:8d:cc:97:5f:84:61:ea:c3:97:
45:e7:32:fa:52:67:f1:ad:82:81:6f:9f:d0:0c:53:02:53:b4:
47:b2:50:f9:f4:d5:5a:9f:4b:f5:9e:85:0a:c6:a3:e4:4e:02:
25:36:0f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 11:22:10 2023 by rpki-client on console-ams.rpki-client.org