Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5B86DDEE5DE11ECA8930A9BF1222468.roa
File: C5B86DDEE5DE11ECA8930A9BF1222468.roa (raw, json)
Hash identifier: wjXAhbU6j/TZlWenvxtYl8lVkvFQmoM765egrYSFcnA=
Subject key identifier: E0:27:1D:03:E7:DD:CF:30:BC:D8:E8:F9:DF:6A:4B:A9:F0:16:58:AA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0712
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5B86DDEE5DE11ECA8930A9BF1222468.roa
Signing time: Mon 06 Jun 2022 21:22:31 +0000
ROA not before: Mon 06 Jun 2022 21:22:27 +0000
ROA not after: Tue 06 Jun 2023 21:22:27 +0000
asID: 203999
IP address blocks: 161.123.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:22:27 2022 GMT
Not After : Jun 6 21:22:27 2023 GMT
Subject: CN=629e7016-42ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:6e:c3:d1:7f:39:7e:ea:bb:fa:b7:d7:44:
c9:9a:e1:a9:67:c5:30:6c:46:0f:88:99:01:91:97:
1f:44:de:b2:13:e5:04:aa:bb:b5:49:3d:fe:1e:b4:
64:0d:27:7b:2f:3e:32:3d:dc:02:0a:be:17:2c:f4:
a7:09:61:a2:e5:5f:b7:62:bb:c9:b0:57:32:1f:99:
d0:d1:be:31:3c:93:84:c1:2b:16:c7:4a:a2:be:aa:
3c:1b:a9:cc:00:e9:4b:e1:41:ad:e6:67:ac:71:75:
be:5d:4e:85:ec:96:b4:98:ae:ac:22:08:65:30:0b:
26:8b:01:0a:40:8c:fc:5a:8a:b2:b8:c5:8a:db:c8:
7e:8c:e7:40:0b:7d:68:df:79:3b:5b:90:17:1f:3d:
03:cb:2e:f9:40:b7:b2:53:a2:af:57:b3:3e:f8:14:
08:4a:3f:aa:47:1a:cf:be:dc:04:7f:01:6a:49:ce:
cb:d3:30:e1:60:e2:a7:49:29:f2:6f:43:c5:6f:f5:
c2:d4:55:d9:d3:44:5e:c1:81:2a:f9:0d:ea:74:3d:
a2:e7:31:cb:6b:e1:6b:53:83:63:1f:67:58:fa:86:
4c:61:ac:46:74:bd:a9:f3:5f:c5:ac:24:07:39:5e:
2f:ed:fb:52:03:26:4a:d5:17:5b:f1:d5:c5:07:64:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:1D:03:E7:DD:CF:30:BC:D8:E8:F9:DF:6A:4B:A9:F0:16:58:AA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C5B86DDEE5DE11ECA8930A9BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.19.0/24
Signature Algorithm: sha256WithRSAEncryption
be:7a:cf:78:fd:58:b4:22:e7:c4:ff:4b:92:42:27:b1:24:af:
1c:4c:6a:86:3f:cc:8c:cd:af:32:7a:17:19:33:36:4e:77:54:
e0:5e:ac:b0:74:eb:f2:d7:dd:06:22:56:0a:a8:ba:7d:d7:66:
37:1e:fd:97:95:e3:c3:e0:1a:58:d3:3a:a3:be:cc:dc:3b:4c:
0d:29:bc:90:95:c7:4d:28:4c:ae:d3:ab:1a:42:e5:be:fe:8f:
cb:12:6b:fc:a8:d9:c0:6c:eb:cc:8c:ef:58:00:c9:db:aa:76:
53:65:f3:41:4b:b4:c3:ea:f5:03:52:5e:4f:5f:f3:1f:e9:f4:
63:16:bb:c5:e5:c9:38:01:b9:fb:3b:b9:d8:97:11:18:79:df:
5a:64:fe:45:43:ff:bf:dd:31:e2:e4:72:31:d3:49:a4:c8:61:
1b:c5:ac:25:7e:ce:f1:42:ab:45:17:ab:25:bf:25:10:5f:c5:
94:c2:9a:74:29:f2:1f:f9:21:c0:29:83:6e:93:21:bf:1f:94:
fa:78:14:28:c2:86:22:17:19:ec:53:38:c0:7b:84:85:9e:27:
9e:9f:2b:1f:29:64:67:4f:32:f6:c4:38:40:c6:41:1c:2f:77:
18:e6:07:44:6f:6d:4a:4b:cf:93:0f:e3:d8:04:f8:52:df:68:
52:ee:eb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org