Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F46B1F943BD111EC90F63F33D8A014CE.roa
File: F46B1F943BD111EC90F63F33D8A014CE.roa (raw, json)
Hash identifier: fVfpjiT8qaQZ/xSteYdrVa35SRp6EgnHQvm0vCAkwuE=
Subject key identifier: 5D:39:19:EB:21:F7:D4:44:19:6C:D7:45:3F:3D:2D:1B:8E:06:93:F8
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 021E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F46B1F943BD111EC90F63F33D8A014CE.roa
Signing time: Tue 02 Nov 2021 11:42:28 +0000
ROA not before: Tue 02 Nov 2021 11:42:24 +0000
ROA not after: Wed 02 Nov 2022 11:42:24 +0000
asID: 327790
IP address blocks: 161.123.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 11:42:24 2021 GMT
Not After : Nov 2 11:42:24 2022 GMT
Subject: CN=61812424-6589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:3a:09:a2:a4:11:db:e7:59:b8:5d:3a:dd:
2d:06:a2:63:f3:8b:a8:41:1f:f3:d2:08:5e:5e:69:
37:6d:2d:a4:17:53:4a:82:ef:e6:05:59:fd:de:9e:
d4:1d:e1:8d:98:fd:d0:9c:c5:ec:fa:71:b8:f1:54:
1d:7d:99:3a:21:94:ef:09:df:39:f7:80:d0:70:15:
c7:5c:57:e5:ab:f4:fa:a3:2e:39:83:ed:be:97:3b:
b2:e8:93:c3:8c:71:35:d4:c6:62:de:fa:b9:f5:71:
60:31:8a:cb:76:d9:7f:f7:00:72:5b:f3:c9:57:66:
dc:a3:ed:39:9a:52:33:5b:52:1a:f0:29:cb:f9:aa:
69:eb:a1:be:2b:89:f3:7a:c1:48:ce:ef:f2:2d:42:
a7:c8:0b:31:d1:e7:7f:f8:aa:3f:57:df:06:39:a1:
a8:77:e8:52:40:86:1d:82:27:2f:5d:0b:16:66:aa:
c4:9d:85:a2:d5:c4:5c:d2:3a:b8:01:b0:71:ef:95:
4e:6d:6b:a2:20:94:cf:7c:20:aa:bf:2d:da:c2:bb:
69:d2:3d:46:d1:5c:42:d4:17:0f:55:67:01:c3:11:
e7:02:58:25:03:14:b4:1e:15:89:a0:d1:cf:ff:25:
6e:f0:75:52:6f:b6:3b:d1:c0:5f:89:ba:88:6a:32:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:39:19:EB:21:F7:D4:44:19:6C:D7:45:3F:3D:2D:1B:8E:06:93:F8
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F46B1F943BD111EC90F63F33D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.249.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9c:fd:10:7e:50:8a:a3:e5:2d:87:7a:f1:f7:6c:c0:b0:32:
8b:0d:d2:a1:20:d9:19:e2:d5:d7:28:50:5b:31:c6:15:e3:74:
69:b6:ae:c9:82:aa:92:cc:74:21:ae:8e:10:dc:45:31:b7:19:
8f:d3:b0:ee:9d:eb:64:5b:bd:fd:18:e6:df:e8:3a:39:02:fd:
fb:13:dd:66:f1:69:d0:bd:53:a2:ab:34:ad:3a:f7:32:9d:6f:
1c:5a:0e:88:7e:8d:2f:1e:12:e2:ed:36:23:d7:89:2d:6e:ba:
93:40:ba:fb:c0:15:22:76:b8:d1:78:82:6d:0f:be:13:a0:24:
03:5f:d0:fc:db:59:cb:92:67:c2:47:f2:4b:70:04:16:23:a4:
b3:28:61:be:8c:ab:ff:3c:80:a3:46:59:d0:43:7c:38:6f:e8:
19:70:63:2d:f3:cf:66:67:00:ef:02:70:6f:5b:88:62:8e:52:
d9:54:fe:65:34:17:37:5f:9a:22:9d:49:93:b2:fb:ba:93:10:
58:e3:03:92:fa:98:6d:c7:37:33:db:2f:55:ea:0a:71:1e:93:
f6:da:37:2e:43:af:b2:e8:34:91:6c:c8:26:18:59:34:5a:47:
f7:68:e9:49:0e:a5:5b:91:cd:19:ff:6d:c3:bf:2e:a5:cf:fa:
44:a5:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org