Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CB7A5A06827A11EC8DC9A1905A40D577.roa
File: CB7A5A06827A11EC8DC9A1905A40D577.roa (raw, json)
Hash identifier: +/bDeCrVyx2HboU4UK6ySxrFl0d5zCWZIwmfW7OA1HU=
Subject key identifier: F8:35:03:78:FD:32:39:AD:DF:F1:21:98:DB:E8:B5:DD:FC:47:8A:E6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0557
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CB7A5A06827A11EC8DC9A1905A40D577.roa
Signing time: Mon 31 Jan 2022 09:47:25 +0000
ROA not before: Mon 31 Jan 2022 09:47:22 +0000
ROA not after: Tue 31 Jan 2023 09:47:22 +0000
asID: 213035
IP address blocks: 161.123.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 31 09:47:22 2022 GMT
Not After : Jan 31 09:47:22 2023 GMT
Subject: CN=61f7b02d-6cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:b3:2e:f6:57:5e:96:0f:74:5e:5a:18:2f:
15:14:a1:44:7b:91:f7:73:2b:8d:91:4f:d2:48:36:
73:36:f8:cf:62:7f:ae:83:01:8c:33:bf:6c:bb:06:
78:b9:01:e1:25:49:2f:24:67:7d:93:d8:06:81:a9:
a7:0a:84:7a:38:41:44:62:00:ad:1f:dc:1b:fc:48:
8d:f3:47:f4:b6:f2:9a:12:24:86:a6:51:8c:ee:85:
63:91:8d:ab:88:b2:3a:82:85:5e:14:21:72:13:58:
d7:0c:28:b7:ab:07:46:af:ac:85:a7:4c:1c:eb:84:
ca:0f:40:d8:42:49:98:24:52:e4:13:4d:9a:d9:27:
15:65:cd:7f:18:77:0c:f6:2d:5d:09:52:f6:9e:c0:
99:de:b6:0f:e1:f6:ae:d9:8d:11:20:8b:45:8a:f0:
75:48:0d:a9:90:ea:e5:1d:7e:b5:54:55:fa:ed:08:
5b:46:b1:35:1d:cd:6e:ee:58:61:f3:26:6a:de:67:
3b:11:bf:f6:90:82:c3:5f:3b:21:88:f7:f1:16:f0:
c8:73:16:a9:90:8c:16:b2:7d:c3:17:92:19:01:7e:
06:3c:92:1e:23:1e:74:d6:48:36:d9:1c:8a:f2:96:
5f:76:2f:90:8c:14:15:f3:11:f9:f1:fe:96:f2:1d:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:35:03:78:FD:32:39:AD:DF:F1:21:98:DB:E8:B5:DD:FC:47:8A:E6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CB7A5A06827A11EC8DC9A1905A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.120.0/24
Signature Algorithm: sha256WithRSAEncryption
06:70:59:6e:f9:d5:98:44:11:1d:fd:5f:73:1f:89:74:1a:0e:
49:a0:c5:54:4c:5c:e4:cd:9b:65:cf:b9:fc:ce:94:74:78:83:
48:3f:05:79:2c:97:2a:c6:73:1e:7b:5b:29:72:65:b5:88:44:
82:86:c6:fc:b5:38:59:78:c5:04:df:23:e9:fb:10:01:e8:c9:
51:47:02:a0:a6:29:a1:d2:2a:01:c0:ce:87:47:37:0f:28:f6:
9f:73:b6:ed:f6:ee:56:9f:1e:99:a0:94:51:00:2f:54:93:fb:
ef:a2:50:ee:a2:e6:2b:b2:64:ae:17:20:35:96:16:86:42:b8:
39:3a:3b:dd:19:d1:c8:ca:ef:61:c4:a3:7d:16:99:87:65:c5:
71:e3:0b:df:8e:87:81:81:82:5a:1f:6f:4d:c9:94:6e:29:76:
f5:42:cd:43:68:67:d3:71:32:95:f4:54:e2:da:06:5d:35:cc:
d6:75:aa:9f:ab:96:76:d0:65:f0:90:f9:51:6d:6b:02:60:88:
df:90:44:31:da:17:15:a3:a6:88:d3:8c:f3:e1:70:f6:30:45:
52:96:91:b9:07:0e:40:13:7d:6f:64:8a:fb:4a:30:e3:78:fa:
d9:a7:63:0b:67:07:55:72:f7:e9:4d:86:d2:9f:65:19:23:f3:
8a:90:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org