Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DE1073B2E5DF11EC8F21959EF1222468.roa
File: DE1073B2E5DF11EC8F21959EF1222468.roa (raw, json)
Hash identifier: Kfy1L0ZkCT3aYQQpPN6YhqBoShyH3O0u86INUjhJNJ8=
Subject key identifier: D6:5F:7A:23:67:9B:E1:03:C2:9B:56:50:F9:6C:C6:70:FF:08:FC:60
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0728
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DE1073B2E5DF11EC8F21959EF1222468.roa
Signing time: Mon 06 Jun 2022 21:30:21 +0000
ROA not before: Mon 06 Jun 2022 21:30:17 +0000
ROA not after: Tue 06 Jun 2023 21:30:17 +0000
asID: 203999
IP address blocks: 161.123.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832 (0x728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:30:17 2022 GMT
Not After : Jun 6 21:30:17 2023 GMT
Subject: CN=629e71ed-1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:c5:0b:4d:3e:8c:48:29:5a:ff:0c:ab:94:
96:ae:d6:ef:26:d2:d0:50:4a:a6:96:12:f6:28:68:
f1:40:c4:ce:e1:9d:45:ab:e9:0f:b4:b8:fd:7c:b5:
38:de:3e:90:9e:75:de:bc:16:18:aa:dd:2c:1d:8d:
56:01:7b:b7:1c:b3:5a:0a:27:56:65:b8:61:5b:b0:
4f:e2:71:b0:53:f0:e2:1b:f8:96:c9:16:e5:89:14:
8d:6d:da:50:4b:16:82:1f:e8:d8:f6:d5:2a:8f:d8:
3c:43:32:1b:43:27:04:52:89:3d:43:98:72:38:c7:
c6:8e:81:27:56:64:c5:2b:19:3f:f4:05:49:5a:59:
67:23:28:a7:f8:b7:59:5f:f5:8b:1d:bb:03:8d:f0:
4b:05:88:c2:72:3a:44:f0:69:06:6d:3a:86:c5:fa:
00:ac:f2:76:dd:ee:70:c3:34:7b:a7:72:17:dc:65:
2f:47:83:af:cc:7d:54:83:89:90:2d:d9:59:3d:b1:
e2:90:25:d2:86:55:c8:d8:c6:d7:09:b8:c4:d0:37:
8c:97:d8:c6:88:43:56:4a:27:d1:fe:ec:2f:d1:a4:
af:80:f1:ad:98:a5:df:18:88:e7:5c:5b:80:43:75:
75:49:a5:b2:ad:d2:13:73:cb:5f:79:69:be:4e:eb:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:7A:23:67:9B:E1:03:C2:9B:56:50:F9:6C:C6:70:FF:08:FC:60
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/DE1073B2E5DF11EC8F21959EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.38.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e4:13:1e:b5:79:10:28:9a:ce:45:92:cf:1e:7e:b5:f1:11:
20:57:09:97:21:96:1d:f1:9b:fe:82:62:bf:14:9c:4d:1d:33:
4b:8a:b3:67:a0:71:2f:6d:c3:29:9d:b4:09:cc:da:50:70:fe:
c4:27:b6:a3:3e:c3:8d:35:7d:ea:49:98:a3:af:a5:70:34:b7:
30:90:13:29:2b:34:f3:b2:c8:4c:cd:ff:6f:c7:d1:11:7a:e2:
19:a2:15:45:04:a7:65:9d:95:57:fc:4a:d9:4f:f1:52:95:de:
d2:cc:52:07:21:b2:73:11:38:62:06:e7:ee:79:6d:31:4a:b0:
70:bd:71:fc:c4:50:88:18:9b:dd:04:59:68:64:41:57:32:25:
f6:57:5c:4b:26:4f:68:03:17:1e:cf:7c:5f:14:98:ea:e1:f5:
ae:0d:78:44:b4:be:c9:4d:98:39:64:00:65:cd:a5:3f:94:50:
5b:8f:7c:85:e1:a5:12:a6:0d:89:14:b2:28:80:89:dc:e7:de:
a1:bc:b2:a2:d5:8c:5c:87:a1:44:ec:40:d1:5d:b7:8c:60:80:
50:9d:ce:d1:76:45:ca:35:91:dc:81:c0:fe:50:67:d3:eb:ad:
99:4d:28:f6:d0:91:05:30:dd:d7:83:cd:bd:16:7a:4c:d1:ef:
b5:a3:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org