Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BBE5B8C7DFB11ECBDE3FBD55A40D577.roa
File: 0BBE5B8C7DFB11ECBDE3FBD55A40D577.roa (raw, json)
Hash identifier: 3SBqDtFd2OZwyc1hEwvQDXeAXGE3hSUc+DiN6mdiCWI=
Subject key identifier: 68:B6:D2:5A:EE:03:E6:B4:72:C1:5C:21:F1:81:1A:C0:74:BE:FD:1D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 052A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BBE5B8C7DFB11ECBDE3FBD55A40D577.roa
Signing time: Tue 25 Jan 2022 16:22:53 +0000
ROA not before: Tue 25 Jan 2022 16:22:49 +0000
ROA not after: Wed 25 Jan 2023 16:22:49 +0000
asID: 327790
IP address blocks: 161.123.150.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:22:49 2022 GMT
Not After : Jan 25 16:22:49 2023 GMT
Subject: CN=61f023dd-5c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:6e:77:54:8e:a8:d5:cb:a4:e4:e7:ef:95:
2e:1b:9f:75:03:04:eb:df:11:b3:a2:7e:53:1e:70:
7e:cc:22:97:ac:28:10:02:0e:37:e9:d5:f8:d6:ba:
80:44:75:ae:c6:f6:bb:2e:18:88:5a:e1:55:4b:43:
c1:9c:d0:3a:33:72:ec:d3:0a:b1:73:58:af:9d:37:
3a:c9:de:8f:6e:fc:56:6d:f7:0e:93:89:d1:4f:f7:
41:8d:c1:3e:44:f7:cd:b3:b7:21:4c:01:d8:c4:b7:
dd:a1:1d:e3:4a:a1:c0:5f:ab:35:e0:47:ca:3d:ce:
32:db:14:3f:ef:d7:94:e6:ee:32:be:ec:b2:cb:c1:
a6:8c:06:ac:37:50:1b:a9:a1:38:18:60:d0:a3:c4:
38:32:81:ed:4a:d5:48:61:ea:b3:3f:77:7f:e3:5f:
0d:d3:2e:3d:f5:25:c2:cf:10:1d:f2:f2:ba:80:d1:
25:dc:e0:07:a2:7f:49:f7:5b:5b:d0:4b:56:84:42:
2a:b2:e2:13:4f:79:e3:b0:16:e0:77:1c:45:77:2a:
25:09:57:ac:4f:1f:fe:4a:0f:03:0a:92:76:a2:39:
c6:d2:24:a5:6f:59:54:48:49:39:8d:7d:5d:ad:3a:
46:43:3c:a7:42:56:78:ef:48:ea:cd:42:bc:85:70:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B6:D2:5A:EE:03:E6:B4:72:C1:5C:21:F1:81:1A:C0:74:BE:FD:1D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0BBE5B8C7DFB11ECBDE3FBD55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.150.0/23
Signature Algorithm: sha256WithRSAEncryption
82:57:7a:74:69:b5:29:86:4a:19:e5:e7:18:f1:9c:fd:41:e4:
09:a0:0b:48:9b:57:b9:31:86:93:29:ce:26:90:bf:76:da:59:
0c:3f:f5:b3:50:d5:2a:e1:e7:4a:1f:c6:8b:11:71:f0:be:63:
95:d7:7f:42:2d:7c:17:41:38:ef:a6:c5:55:c4:e0:75:4a:d4:
59:1e:9e:06:14:d0:fc:b3:82:77:9b:64:f2:b5:2a:0e:c0:46:
52:b7:4a:2a:50:8c:59:86:62:2d:fb:cb:83:d0:19:ce:90:87:
8f:3c:50:71:ab:17:9d:fd:ba:8d:7f:fd:b6:0f:97:39:99:8b:
e3:00:bb:07:70:5a:ef:6e:5e:cd:54:af:d1:45:46:a0:5f:75:
42:98:c3:a3:65:23:70:9b:08:f9:aa:29:73:cb:2f:d3:6f:22:
22:08:7d:5a:31:b3:d9:b3:03:31:63:cc:f2:b6:24:9e:c9:57:
e8:25:48:e7:45:53:e0:81:7d:61:0c:3b:41:f0:6a:c1:b1:5b:
fd:8a:2d:25:83:ae:fe:7c:a4:ec:46:05:ea:05:4e:b6:ad:99:
ee:bf:24:5d:6c:28:db:42:93:f7:a2:dc:0a:8a:10:1c:a7:49:
20:ff:34:dd:d1:92:68:1d:3d:88:0b:ff:38:9b:03:24:e8:83:
3e:69:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org