Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6FA50FA327311EC8E58AB6CD8A014CE.roa
File: C6FA50FA327311EC8E58AB6CD8A014CE.roa (raw, json)
Hash identifier: 3teAJc9/sOxmjLfqEZcmfvP4TRW95YWPGNlc6RCgDLQ=
Subject key identifier: 0F:D3:FE:7D:8C:83:48:3A:78:ED:E9:E9:E3:37:60:37:CE:B8:61:21
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01FA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6FA50FA327311EC8E58AB6CD8A014CE.roa
Signing time: Thu 21 Oct 2021 13:35:38 +0000
ROA not before: Thu 21 Oct 2021 13:35:34 +0000
ROA not after: Fri 21 Oct 2022 13:35:34 +0000
asID: 60458
IP address blocks: 161.123.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 21 13:35:34 2021 GMT
Not After : Oct 21 13:35:34 2022 GMT
Subject: CN=61716caa-ea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:e8:80:8f:f3:15:c1:08:54:17:40:aa:09:
4e:cf:93:6a:6d:1e:b5:40:fc:bf:13:13:03:4a:de:
09:8e:cb:0a:c9:f3:49:8d:d8:51:f2:dd:05:c6:ce:
7c:34:ac:08:a2:87:b2:24:c8:2d:16:c6:6f:58:c8:
eb:78:88:75:f6:94:06:9f:6f:83:21:38:bc:06:ed:
ac:8f:49:be:ed:9e:fa:20:23:b8:c8:4a:0a:42:d6:
32:82:dc:27:9f:71:34:95:9b:93:9c:63:c1:5f:5e:
64:2a:d0:cd:99:7a:38:aa:15:fb:45:66:a3:62:72:
c4:e5:05:d1:29:b4:5f:59:b8:e2:78:35:87:55:0e:
57:d2:1f:cf:ac:dd:ed:9c:cd:62:97:de:b0:53:ee:
95:6d:80:4c:44:e1:26:81:af:e3:f5:da:2c:82:75:
42:10:ae:9d:cf:49:bf:c7:21:82:1b:77:62:33:a4:
0b:e3:f2:c8:95:03:21:eb:8d:52:95:e9:be:31:c7:
4a:cf:0e:b2:22:3a:59:a0:74:7d:fa:f7:ed:86:68:
58:32:cb:1f:70:62:55:e8:2a:53:8d:e3:32:cd:18:
e2:71:7b:31:2d:75:c0:33:b5:f0:7e:de:13:7f:49:
9a:10:15:8f:47:ee:f3:a9:bd:03:79:5e:33:92:43:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:FE:7D:8C:83:48:3A:78:ED:E9:E9:E3:37:60:37:CE:B8:61:21
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C6FA50FA327311EC8E58AB6CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1e:50:0d:e0:f1:44:1b:c4:34:77:5c:a3:44:5e:2a:16:06:
f5:7a:a3:20:a8:0c:21:24:11:5c:b6:ca:dc:77:19:5c:f4:89:
ee:94:0c:18:0e:f9:3f:8d:0a:c0:7b:34:4e:a7:52:48:ae:5c:
33:cb:5d:68:1b:cd:fb:97:d3:88:ae:17:c0:09:f6:47:88:40:
0d:0c:88:9c:5a:6e:37:e9:a4:c2:12:2d:d1:20:0f:65:0a:3e:
97:7e:b6:8d:e3:10:28:c0:59:ae:08:52:4c:39:fd:af:65:31:
cc:1a:aa:c9:27:eb:bc:3d:30:a2:09:85:cc:59:e0:f3:92:f0:
1f:5f:a5:e5:c1:1b:93:34:b4:ab:8a:66:7b:ed:8b:79:70:ae:
20:76:9b:d7:ed:dd:64:0d:f9:95:b3:57:2a:98:e8:e6:fb:76:
71:20:61:b7:21:fc:b7:92:b2:9c:13:3c:c9:6c:7c:1f:0f:20:
08:c8:a6:56:8e:6a:19:1b:f1:5f:fe:05:27:9f:c9:8a:47:81:
38:7c:35:1a:41:cf:d2:fa:72:b9:85:fa:d1:6b:7e:39:5d:19:
9d:95:83:75:10:9f:89:f3:07:aa:5d:fb:dd:25:fd:93:ec:ee:
b0:4e:29:b5:84:28:e0:27:e2:34:d5:be:55:6b:b4:20:0d:d2:
a7:ca:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org