Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0AE378A6044511EEB7FC68144AD9E6FC.roa
File: 0AE378A6044511EEB7FC68144AD9E6FC.roa (raw, json)
Hash identifier: McPXptXW1i6LrJY0mjM03DCRusVF7Mjn3Vm18ZuwlIs=
Subject key identifier: 55:1B:92:F9:B6:4D:72:2F:6A:A8:9E:17:A7:29:E7:28:33:7B:07:B1
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AEC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0AE378A6044511EEB7FC68144AD9E6FC.roa
Signing time: Tue 06 Jun 2023 08:35:08 +0000
ROA not before: Wed 07 Jun 2023 08:35:03 +0000
ROA not after: Fri 30 Jun 2023 08:35:03 +0000
asID: 205431
IP address blocks: 161.123.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 7 08:35:03 2023 GMT
Not After : Jun 30 08:35:03 2023 GMT
Subject: CN=647eefbc-551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:70:ed:53:db:a8:79:49:e6:75:0e:90:bc:
65:b5:77:d9:d9:03:c1:24:49:3e:b2:22:85:9d:2b:
b8:46:5c:08:88:58:a3:35:e1:43:5d:67:eb:c6:52:
e5:47:67:ef:5a:51:ec:27:22:c7:2b:29:da:2d:06:
73:55:18:78:e5:4d:b9:b1:31:19:96:c7:5a:d9:00:
9e:f6:16:17:35:7d:10:93:58:0d:d1:0c:f5:59:bc:
b2:83:07:07:06:af:43:9f:05:ef:af:ee:09:e2:91:
69:04:84:64:26:4b:b6:a7:35:5d:b0:fb:ee:e4:b5:
8f:ce:79:d0:9c:d9:bc:0a:de:40:ae:dd:a4:2b:62:
1b:d7:89:9f:e8:89:93:ba:95:2e:14:44:71:25:69:
a6:84:c3:5a:21:4e:19:64:da:cf:38:a7:59:bb:e1:
21:d7:21:64:12:e8:e1:39:9d:71:12:c2:ce:10:0c:
6f:ff:1b:3a:7b:c4:23:fd:8e:1f:1a:7e:23:d3:51:
34:2c:df:4a:0e:23:7a:57:8c:0e:83:c1:68:39:cc:
d7:79:52:56:73:06:fe:89:e3:5b:20:83:d0:99:df:
0c:1b:06:9f:ef:c0:45:80:38:55:54:5a:e4:62:ac:
1a:a2:87:6e:3b:2c:98:6a:29:fc:12:8b:39:49:4e:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:92:F9:B6:4D:72:2F:6A:A8:9E:17:A7:29:E7:28:33:7B:07:B1
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0AE378A6044511EEB7FC68144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.35.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:8c:5a:45:2b:b2:0f:42:c1:0e:a3:3f:26:52:f0:37:86:7e:
08:11:dd:9b:d3:d7:2b:f6:f9:25:4c:c7:57:e9:c5:73:e1:8a:
7d:3b:89:f8:2a:7f:26:93:1a:42:44:dc:f4:40:bc:56:7f:0e:
e5:bc:8c:f8:5e:0d:26:a7:56:c4:7c:61:5a:81:82:fa:93:65:
1f:a0:5c:ee:cb:27:ab:85:ae:ac:bb:ab:87:8a:e6:da:c8:2c:
9d:d6:7b:62:be:56:f9:c9:27:59:5f:c2:19:84:4e:bd:bc:ff:
f3:16:7d:87:a6:4f:9b:a8:5c:a6:0b:16:05:97:c5:9f:a8:79:
ff:d5:0b:ec:81:de:c1:66:9b:5b:d0:c6:ad:9e:e4:a3:f5:6e:
8b:f1:c2:3e:e2:5f:4d:59:2f:c1:5d:ea:8c:3a:2e:6a:81:37:
8d:ee:0f:b7:6e:8d:9e:4d:9f:2f:bb:76:7b:f8:9c:99:7c:ce:
f3:6b:8e:a9:a3:71:33:eb:2b:2f:c8:15:54:51:76:fc:d9:7b:
2b:0e:71:c4:2d:67:09:74:a9:27:1b:84:d4:1f:bf:05:2d:69:
fc:f0:0c:dc:f1:7f:a1:73:6c:3f:e3:a7:ba:4e:7d:61:a3:d6:
68:09:d0:e8:10:a5:24:eb:8a:ea:03:2a:5f:97:2b:13:d4:25:
63:76:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org