Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E85C6296C30F11ED861BBE7DF1222468.roa
File: E85C6296C30F11ED861BBE7DF1222468.roa (raw, json)
Hash identifier: fG0Fz8V1zmbfV3F+CH+V5Db6zV+8A5DfJ+wwMpqI4Dw=
Subject key identifier: 5D:A9:55:5A:1D:8B:E0:8A:BC:7B:72:05:60:5E:32:D0:55:A7:6C:1D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A09
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E85C6296C30F11ED861BBE7DF1222468.roa
Signing time: Wed 15 Mar 2023 09:01:01 +0000
ROA not before: Wed 15 Mar 2023 09:00:57 +0000
ROA not after: Fri 15 Mar 2024 09:00:57 +0000
asID: 207990
IP address blocks: 161.123.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569 (0xa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 09:00:57 2023 GMT
Not After : Mar 15 09:00:57 2024 GMT
Subject: CN=6411894d-7705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:cf:40:56:33:f6:c4:a8:9e:44:0e:e3:89:
bd:fb:1a:4e:9d:32:6e:34:93:85:35:0e:91:d7:56:
97:48:95:02:7e:c3:d0:d5:0a:3e:b7:e3:5d:ff:f9:
c0:b8:ee:5e:90:7d:b4:cc:4a:dc:f2:e8:3e:80:92:
74:1e:07:e1:90:ea:0b:ea:6e:22:5e:2b:46:81:21:
11:12:4c:f8:74:31:7a:18:22:a9:ff:38:3d:bb:2e:
4b:fd:3f:08:9b:76:a0:a2:05:ee:e6:e4:b9:46:e2:
ed:ee:5d:7f:30:1a:42:ae:77:03:90:f1:3e:d3:85:
8f:54:3f:08:70:5e:39:0b:f8:73:76:35:6c:34:bb:
f7:e3:21:07:5c:6b:e2:13:63:77:ca:27:36:a7:c5:
43:4c:3b:b5:bb:ea:46:ef:63:5b:18:99:d5:16:0d:
73:cb:7e:65:da:2a:3c:bf:f4:01:f6:b8:51:68:13:
ce:8a:3c:ba:ab:92:d9:ac:88:a5:a1:16:33:f8:db:
15:1a:d4:2d:cc:a1:e9:6a:f3:ad:3c:d3:1b:0b:8f:
8f:81:08:9c:92:69:0a:7a:09:0b:6a:bc:9e:43:f1:
f7:0e:c3:ab:9c:5f:f1:58:07:18:95:e7:54:3e:f3:
22:95:65:72:02:5d:21:2d:fd:79:97:6b:fb:95:72:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:55:5A:1D:8B:E0:8A:BC:7B:72:05:60:5E:32:D0:55:A7:6C:1D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E85C6296C30F11ED861BBE7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.144.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b9:b0:2c:45:e9:c4:5e:05:1d:57:c5:f8:9b:54:57:6a:64:
26:98:4c:5c:b0:1c:11:0d:d9:a0:1c:ca:d8:a6:a1:30:d3:cb:
ed:0c:3c:2a:44:17:e7:1d:ab:8a:71:55:b0:1c:19:8e:de:50:
9e:fa:20:8d:60:40:81:38:89:46:40:39:d0:83:35:50:08:77:
8f:c7:66:14:2a:2c:d3:e8:4c:b0:f1:28:7b:54:d0:46:58:de:
05:41:18:38:bf:aa:86:a5:79:a6:5a:f0:1e:97:1f:de:d2:73:
5d:44:b0:b6:02:72:d7:34:b0:8b:36:98:ea:16:56:25:96:db:
20:a6:69:2e:91:d8:90:06:22:5a:74:5d:32:a0:36:96:6e:a2:
f9:3d:bc:a2:c2:ea:12:e3:4e:90:a3:6b:81:ea:6f:e3:de:82:
6f:90:b3:13:e1:4a:66:27:ec:7d:a1:fb:c0:a8:db:b7:96:b5:
95:5a:7f:7b:78:90:a8:c5:eb:5a:e9:58:0e:85:d5:9c:3f:e1:
7e:af:d3:14:80:19:fe:d1:16:84:90:95:d4:f2:63:69:00:aa:
88:45:6f:9c:a6:ad:ab:ec:ce:ef:ed:73:24:15:0a:7e:ca:45:
75:18:50:35:46:36:ec:c8:f6:b1:c2:10:a6:0d:29:bc:ca:a3:
c6:0e:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 02:53:56 2024 by rpki-client on console-ams.rpki-client.org