Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D49B13DA5AEE11ED94BD18D8F1222468.roa
File: D49B13DA5AEE11ED94BD18D8F1222468.roa (raw, json)
Hash identifier: BB3bom8rAr1plL2bpPB8lmU/HPDSDqAfCfVFC1SDL5c=
Subject key identifier: 91:DD:63:30:63:74:60:84:0F:07:8B:69:FE:93:70:2E:90:09:0F:C3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08D7
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D49B13DA5AEE11ED94BD18D8F1222468.roa
Signing time: Wed 02 Nov 2022 20:42:13 +0000
ROA not before: Wed 02 Nov 2022 20:42:10 +0000
ROA not after: Thu 02 Nov 2023 20:42:10 +0000
asID: 203999
IP address blocks: 161.123.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 20:42:10 2022 GMT
Not After : Nov 2 20:42:10 2023 GMT
Subject: CN=6362d625-beae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:f5:f4:36:c3:1e:80:d6:20:40:27:49:c5:
24:23:28:75:c1:83:41:20:8e:bf:b8:9d:64:cb:13:
79:1a:4d:91:51:28:68:56:f0:35:61:05:f7:81:48:
d4:de:45:04:de:bc:d6:4a:13:65:8e:fb:c3:48:5d:
9a:61:e7:8f:71:75:92:4a:f4:a4:70:a7:90:0a:ae:
a1:ac:2e:92:d9:7e:54:91:e9:e8:29:cb:3d:51:5e:
aa:8a:2c:ef:60:3e:ff:62:83:37:dd:8f:43:a8:6f:
6e:ad:80:db:d8:22:7f:36:2f:48:71:70:b4:38:b6:
bb:21:e2:78:e6:68:3e:ef:b3:32:ce:27:5a:18:4c:
85:2b:b9:bb:94:02:96:c2:39:51:67:8f:23:84:c2:
7c:4f:28:4a:81:b1:3b:63:05:c1:d8:f9:b1:b7:39:
8b:52:d6:34:83:f5:0a:dc:9c:b9:cc:68:ad:14:80:
6e:40:85:74:83:c7:60:12:83:99:22:5e:b9:d1:21:
b8:c6:02:c4:b7:ca:16:05:55:64:30:db:f7:7a:ae:
fa:04:30:c0:02:e8:00:c1:3f:63:14:b4:65:f6:6d:
f6:c0:8d:ff:4f:19:1c:72:05:73:3d:32:99:b1:eb:
07:16:98:4e:96:d5:e8:de:c3:39:00:67:9e:25:dd:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:63:30:63:74:60:84:0F:07:8B:69:FE:93:70:2E:90:09:0F:C3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D49B13DA5AEE11ED94BD18D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:b3:3f:b5:de:e2:03:c6:f2:ef:53:ef:7e:28:74:3b:4d:ff:
ba:ae:6d:dc:45:e8:b2:a5:29:d2:c2:c8:4c:66:34:b7:7c:f4:
ce:e0:78:06:40:92:2d:b2:8c:9e:5b:a1:70:62:b7:4d:06:19:
cb:fb:a6:06:bb:f3:e9:c4:21:a1:8f:bd:0b:08:9a:71:52:cc:
a7:ef:19:7b:42:61:46:b6:9d:53:7a:e6:d5:dd:bd:e5:53:d4:
7a:c0:b5:67:2e:e7:a4:ad:2b:38:a5:88:8d:d0:74:fe:ae:be:
0e:cd:df:0c:42:a8:24:31:d9:c7:8c:aa:85:f9:e1:13:8a:82:
b0:23:e4:d1:1d:fb:3f:ef:9a:db:55:02:ed:25:35:81:49:0e:
c3:8f:e8:12:ac:b5:8d:47:fe:78:85:4f:f0:e3:c4:88:75:a5:
33:25:bb:ba:24:7b:2b:bd:42:98:12:46:0a:c9:a8:bc:e2:07:
72:8c:c4:d3:03:ba:23:c4:ba:c8:0d:20:6b:3a:bc:e1:76:81:
d3:be:e4:e8:ca:b3:a5:f8:b6:2f:63:0d:2e:cc:8c:c0:98:18:
d5:dc:ba:85:c2:9a:50:89:6e:da:2e:b8:25:b1:dd:62:10:b3:
c9:e1:58:ef:1f:6d:29:39:11:13:0d:74:c8:39:af:80:46:25:
ab:e1:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 02:04:54 2023 by rpki-client on console-ams.rpki-client.org