Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F3EB68EC3BD811ECBB2DB23DD8A014CE.roa
File: F3EB68EC3BD811ECBB2DB23DD8A014CE.roa (raw, json)
Hash identifier: XNpnOFn894bWHQhQxnWMvgzhR40CWAPUftR+rqpVlis=
Subject key identifier: 25:D6:13:61:7C:8A:B7:50:D5:50:F5:39:85:54:02:2D:60:CF:DA:81
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0228
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F3EB68EC3BD811ECBB2DB23DD8A014CE.roa
Signing time: Tue 02 Nov 2021 12:32:33 +0000
ROA not before: Tue 02 Nov 2021 12:32:30 +0000
ROA not after: Wed 02 Nov 2022 12:32:30 +0000
asID: 327790
IP address blocks: 161.123.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 12:32:30 2021 GMT
Not After : Nov 2 12:32:30 2022 GMT
Subject: CN=61812fe1-e7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:49:be:33:f7:3f:b6:56:9a:78:4c:a8:d4:
c4:0c:ed:85:9a:ed:3f:28:1c:2e:d2:4e:58:46:03:
9b:d5:dc:fc:75:07:89:93:53:8a:4c:c4:3b:ef:94:
9c:3d:f2:86:01:2d:44:84:46:8e:64:0e:d7:07:e1:
62:8b:63:1a:a7:9c:de:c0:7d:a5:d5:b8:f6:61:80:
38:8a:04:15:6d:46:7d:0c:d0:bb:73:10:1e:60:c9:
07:6e:f6:22:3d:12:89:e1:92:ac:50:13:ff:65:44:
ed:c5:f9:ba:96:49:da:09:48:61:5c:9f:ca:c6:c1:
f2:b8:80:1c:d4:60:12:70:f9:03:81:8b:27:96:f3:
b6:5b:3f:82:17:9e:53:ed:11:67:f9:44:79:d4:52:
57:84:09:ce:46:c9:f7:b5:74:20:34:39:b1:9e:39:
66:ae:64:d6:1a:b0:d8:cd:4a:9c:bc:09:46:db:7f:
27:29:6c:09:9a:74:72:21:ac:d3:95:f0:bc:e7:2e:
28:82:15:5e:95:ef:1e:df:51:db:d8:1c:d3:2c:0b:
11:41:cc:f6:2b:74:10:11:43:90:6b:77:18:32:fc:
fd:56:78:c9:51:fb:c2:25:dd:c3:89:3e:22:9c:f9:
dd:54:2b:a3:05:13:4f:9a:a2:60:00:8e:ad:59:19:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:13:61:7C:8A:B7:50:D5:50:F5:39:85:54:02:2D:60:CF:DA:81
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F3EB68EC3BD811ECBB2DB23DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ed:12:a7:f4:bc:0a:87:dd:0a:e3:ee:37:47:a6:e0:63:b7:
17:d0:55:5e:9c:52:28:c3:74:39:6e:4f:e7:ba:1a:fd:19:68:
92:fb:b7:3f:78:0e:7b:b1:d0:d1:01:a6:b2:64:17:a0:71:a4:
b3:41:36:e5:0d:bf:65:ca:48:0d:be:b2:10:71:52:d4:06:c5:
cc:ac:14:90:7c:1c:1b:97:9c:bd:0a:c6:ca:48:b9:a3:84:89:
fa:87:6e:75:31:00:d0:6d:3e:45:70:8b:21:fc:89:c7:68:80:
e4:8e:f9:90:04:f9:48:ec:4b:02:26:9e:07:25:8c:d7:db:17:
91:fe:68:bc:d3:6d:00:cb:ce:47:d0:77:35:9d:20:a6:2b:33:
c5:bc:c7:dc:25:f9:fc:d0:03:ee:1e:39:5f:45:c3:ce:16:6b:
16:02:57:03:cb:85:aa:71:2f:41:05:ef:55:52:f4:4e:2e:be:
86:d7:5e:e7:e4:f9:67:db:a6:d0:60:0e:55:05:b2:00:24:a5:
6a:f9:12:56:0c:01:41:12:be:43:a3:bb:34:3b:cd:b0:6b:53:
6a:1f:97:4a:cf:a8:29:89:8c:66:64:58:e6:d3:be:30:11:ec:
d0:1d:d5:61:c7:57:06:64:67:76:14:c6:0b:2d:42:2f:92:8b:
c3:57:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org