Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C70DA53EA89111ED9064B7F4F1222468.roa
File: C70DA53EA89111ED9064B7F4F1222468.roa (raw, json)
Hash identifier: IAfR+Sq+f/AjKj+EejZubBokdJDGMthYAGgAq3Xp5vs=
Subject key identifier: A1:96:CF:98:AB:DA:42:0A:66:FC:B5:55:FE:94:9B:1F:58:0D:9D:8A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0999
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C70DA53EA89111ED9064B7F4F1222468.roa
Signing time: Thu 09 Feb 2023 15:52:38 +0000
ROA not before: Thu 09 Feb 2023 15:52:34 +0000
ROA not after: Sat 10 Feb 2024 15:52:34 +0000
asID: 207990
IP address blocks: 161.123.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 15:52:34 2023 GMT
Not After : Feb 10 15:52:34 2024 GMT
Subject: CN=63e516c6-c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:ea:bd:e2:0e:d3:d6:2c:a5:ca:95:35:7f:
e3:b3:9f:f0:8f:cc:f8:f6:1d:24:5e:9e:d3:8f:51:
17:c5:41:87:eb:34:03:ae:6b:b8:94:81:51:86:52:
77:d3:a4:3a:04:5a:8e:87:72:79:e0:bc:f6:bb:83:
e7:2d:80:26:f2:ba:d9:42:3a:69:8e:5d:d1:57:c1:
78:7c:00:06:c1:a3:63:12:54:3a:f8:91:52:95:f9:
65:17:8b:bb:22:72:44:0d:b5:d1:e0:8e:e8:05:cf:
98:a2:c8:fb:72:c1:16:ac:01:b1:47:94:76:4a:56:
af:dc:82:3c:56:51:b4:84:dc:a3:6c:42:da:0f:fb:
e0:88:2e:f4:79:8c:34:dd:df:b1:9c:7e:d3:27:ba:
d6:3d:89:1e:9d:d5:c1:70:99:32:92:4a:c4:f6:69:
15:04:65:1a:8d:1b:77:14:dc:48:3e:2a:1f:60:40:
ad:cb:4a:c2:f1:7e:06:c8:1f:69:85:06:99:e7:bf:
30:e4:1d:36:0c:dd:45:f0:65:5d:c8:01:d1:43:20:
b1:1a:fa:74:dc:b5:6c:22:9a:96:3f:8d:8b:65:9a:
7e:82:f8:58:50:a4:69:32:9c:3a:7a:a4:80:a7:5d:
b7:52:54:8e:70:28:8b:b3:2b:f0:78:9c:a2:3d:0e:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:CF:98:AB:DA:42:0A:66:FC:B5:55:FE:94:9B:1F:58:0D:9D:8A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C70DA53EA89111ED9064B7F4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.131.0/24
Signature Algorithm: sha256WithRSAEncryption
96:13:1e:f5:77:97:40:7b:5f:33:bc:19:8a:83:20:eb:79:9b:
c8:0e:eb:bf:da:54:43:0e:97:06:19:f4:9c:91:a8:2a:40:1c:
48:40:6b:59:95:7f:f6:d3:80:1d:99:1b:7c:2d:b7:74:6d:ab:
a0:db:95:36:d4:30:15:c4:8b:7d:e1:c5:d4:22:5b:49:45:98:
dd:7a:ae:ce:0e:63:9a:76:57:92:e7:32:87:92:51:14:62:0a:
04:ce:89:66:53:2d:6a:a6:88:1f:c9:fa:47:43:38:c6:5b:d8:
76:66:bb:a8:78:20:b9:6e:ae:6d:c6:94:91:1e:9b:f1:93:b1:
1f:4f:e3:a6:cf:8c:24:51:2f:8b:6c:13:59:52:a3:8d:27:16:
30:84:b1:03:6b:c4:51:72:99:76:12:c4:ca:9d:cc:4f:13:15:
f2:e1:3c:26:fe:90:15:3b:55:f2:17:bf:42:af:0c:7c:98:df:
17:71:3a:cc:c8:a7:9b:f4:c7:19:45:ca:96:03:d8:f7:87:86:
12:6e:d2:c4:16:24:13:b9:2d:ca:d7:96:b9:42:e7:cb:be:3f:
a0:35:ec:b2:de:ca:00:db:b2:ca:21:3f:9c:98:51:7a:74:1a:
fd:16:d7:0e:cb:ae:ea:9f:e4:6a:21:97:cc:17:b3:5d:2b:1f:
f4:05:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 03:22:01 2024 by rpki-client on console-fra.rpki-client.org