Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/02C5BB003D8211EDB5B8D7B3F1222468.roa
File: 02C5BB003D8211EDB5B8D7B3F1222468.roa (raw, json)
Hash identifier: yfFm+VS9cngZIGtSU25CHNHF7/f8tKp1MLFEdJ8EHxc=
Subject key identifier: 56:80:01:0E:38:D3:94:94:40:A2:9F:7B:30:94:48:7B:A6:9C:4F:D8
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0881
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/02C5BB003D8211EDB5B8D7B3F1222468.roa
Signing time: Mon 26 Sep 2022 10:00:12 +0000
ROA not before: Mon 26 Sep 2022 10:00:09 +0000
ROA not after: Tue 26 Sep 2023 10:00:09 +0000
asID: 203999
IP address blocks: 161.123.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 10:00:09 2022 GMT
Not After : Sep 26 10:00:09 2023 GMT
Subject: CN=6331782c-7c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:f4:0c:47:83:dd:b5:5e:91:fe:30:b3:74:
96:c6:2e:8e:b6:69:fb:65:8b:8e:51:c5:74:c9:c1:
47:a1:ad:79:8b:2b:ce:28:0c:c0:2e:24:76:02:e0:
3e:83:45:e8:54:d1:a6:bf:48:b8:8b:67:f4:86:d9:
7d:9b:30:08:c8:bf:ae:f3:0e:89:e8:2a:b1:c2:8c:
59:f1:b1:9a:04:be:b7:9d:5a:a4:db:05:0c:cc:2f:
2d:61:59:71:a5:a0:35:de:ba:5e:fb:d3:5e:2a:03:
b7:e5:e8:49:0a:1d:38:38:a7:ab:b7:0c:3b:8a:f7:
80:60:46:9a:e9:c0:80:46:4c:0d:f5:6b:29:17:d9:
a0:f2:38:2d:46:de:37:af:d1:d9:83:09:42:cc:4f:
f8:b0:6e:28:8c:0a:89:87:3b:1a:e9:4f:00:be:9b:
8f:08:66:88:09:b9:20:a1:95:6a:51:f7:37:64:7f:
23:4e:5a:39:9f:88:fd:c4:23:12:3c:97:e9:7a:de:
63:bd:53:15:5b:fa:c7:8b:ab:31:b4:f2:a4:81:17:
75:33:78:a4:d9:cb:9d:43:e7:55:85:05:c2:7e:49:
b1:00:c9:fd:9b:f0:f8:4b:78:0b:13:1b:37:10:0f:
87:b7:d0:0c:27:c7:ff:d2:77:3a:d6:73:98:3a:b0:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:80:01:0E:38:D3:94:94:40:A2:9F:7B:30:94:48:7B:A6:9C:4F:D8
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/02C5BB003D8211EDB5B8D7B3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
22:00:49:c2:cf:a3:0d:b3:bd:f7:63:8d:3d:6a:e4:69:bf:39:
3c:4d:cc:f6:f6:89:40:24:87:ff:b4:28:57:2f:df:26:ae:01:
b6:15:64:a1:17:db:68:3f:6b:93:7c:53:e3:15:18:3a:ce:17:
85:15:5a:7c:dc:82:00:d3:1c:69:7d:1f:c6:4d:c6:07:8e:3a:
8a:da:97:20:aa:62:cc:e2:8d:39:87:9d:f0:43:8b:9a:26:a4:
d2:c2:92:0e:bc:9c:11:18:bd:68:6a:7d:4b:4d:6d:52:46:86:
51:f2:79:d0:46:29:61:be:e6:66:70:67:75:72:3d:1a:04:e0:
c3:e1:04:0b:54:29:d7:76:14:42:d5:56:a4:62:61:5e:30:58:
79:42:5a:34:a6:4e:ad:f5:1b:7f:e8:f4:65:f8:d5:a7:0d:68:
7e:57:e9:df:6c:ae:7f:70:8c:81:87:bc:ca:51:36:3a:9d:ab:
c8:b6:37:88:a7:cb:83:a9:6d:7c:0c:23:92:68:96:9b:39:16:
b8:6f:6f:2f:fd:f4:85:41:65:cd:fd:51:c5:03:fb:9d:63:ec:
65:63:9f:48:b7:5b:c5:89:ff:ab:76:56:d1:4b:ca:57:8d:54:
07:13:7e:92:03:22:e5:35:72:c8:d3:dc:51:e7:bf:a3:cc:23:
10:0b:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org