Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2ACEC9CE5E011EC9142EBA1F1222468.roa
File: E2ACEC9CE5E011EC9142EBA1F1222468.roa (raw, json)
Hash identifier: GYhsceTnTjlQagmNp23NPJeKmd4RjLgb8KVEl6VQGPU=
Subject key identifier: B2:5E:C1:64:DE:1D:18:7A:2D:8A:70:8D:CC:05:2E:71:5A:EF:89:06
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0742
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2ACEC9CE5E011EC9142EBA1F1222468.roa
Signing time: Mon 06 Jun 2022 21:37:38 +0000
ROA not before: Mon 06 Jun 2022 21:37:35 +0000
ROA not after: Tue 06 Jun 2023 21:37:35 +0000
asID: 203999
IP address blocks: 161.123.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:37:35 2022 GMT
Not After : Jun 6 21:37:35 2023 GMT
Subject: CN=629e73a2-ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:ee:d9:ee:f0:3f:49:3c:aa:df:10:89:2e:
95:f5:9e:53:fd:f8:09:42:bd:69:d6:9f:6b:96:f4:
06:a8:cd:dd:a1:33:34:42:5e:7e:b8:83:4a:f1:9f:
ef:da:0c:09:78:7e:36:99:86:9e:d6:9d:a4:03:ed:
c6:dd:3c:57:6b:67:4e:cd:68:2f:48:ac:c0:ca:6d:
1f:04:5c:21:18:fd:6d:e5:7c:e1:22:11:3a:d5:32:
80:bb:ad:e0:4b:54:60:aa:a2:f2:a1:2e:a5:5c:30:
9a:fe:fb:88:2e:06:7e:8c:3c:4a:01:cb:63:30:50:
07:22:84:04:24:7b:9e:7f:99:fa:c1:5d:73:f9:30:
9a:61:09:2c:64:e8:6e:f9:88:2b:b3:9f:b6:cc:e6:
2e:9c:94:6a:98:09:7d:45:19:69:8c:8a:2d:8b:a8:
d4:f1:a2:93:8d:c9:1e:bb:63:67:22:a1:b2:bd:74:
82:4f:0a:51:fb:62:ff:2f:13:7a:51:55:0a:1a:a7:
24:fc:07:55:d7:c6:ef:0a:a4:bd:9d:e1:f2:f7:97:
53:df:ef:e8:bd:ff:7b:27:52:20:6b:c1:4a:d0:90:
de:7f:28:ec:49:92:a2:7e:6c:39:e7:41:ea:3f:1b:
f0:87:f1:fe:f0:ab:07:4b:6a:65:ea:0e:7a:d0:e9:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:C1:64:DE:1D:18:7A:2D:8A:70:8D:CC:05:2E:71:5A:EF:89:06
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2ACEC9CE5E011EC9142EBA1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
61:87:66:82:87:e7:44:40:85:ea:ef:87:e0:08:e0:be:46:34:
20:c5:c7:cf:c2:e7:91:1e:50:1d:74:fa:e5:56:17:0b:ed:49:
3e:6f:cf:ec:d4:e9:f9:ac:84:0f:27:cb:f9:99:0e:f7:50:d5:
fa:f7:3f:a9:73:64:8b:de:57:88:ae:b7:68:af:67:72:2c:b1:
eb:95:0e:fe:dd:c6:23:cf:d3:d9:bb:3b:0b:b8:5e:86:ee:89:
a6:7c:75:e3:42:f8:c7:2e:7e:ee:bb:12:59:3e:bf:95:fe:20:
5b:56:21:e1:f6:f1:45:a9:f5:1b:8d:f6:05:56:b1:8e:84:a4:
90:5c:60:e7:5f:df:1b:73:75:39:09:84:5d:64:b9:a3:d3:a7:
8b:5e:d5:bc:0a:d6:67:a4:f4:80:de:b6:52:ac:bc:38:46:26:
78:02:80:c3:2b:24:bc:ff:72:b9:b2:9e:d7:13:87:df:0c:9d:
83:5d:81:56:f7:d0:e7:89:58:30:54:b2:44:86:33:06:ff:6e:
98:c8:cd:39:50:86:b1:d3:ce:75:bd:df:f5:4e:1a:2c:1c:54:
7d:10:fb:a0:d5:a9:0d:d2:f4:03:9a:1e:65:38:dc:b7:83:9f:
ff:94:ff:97:ab:94:7e:fe:8e:b0:dd:4c:27:00:23:30:b5:74:
7d:e2:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org