Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
File: 185EBEEE1EAC11ECA795A658D8A014CE.roa (raw, json)
Hash identifier: NzcJs2lLIOeoeLVej8REz5V63ggUqDRlmM3+UbQYE3w=
Subject key identifier: A8:11:29:DD:06:CB:C9:FC:57:D2:54:07:D1:1B:DD:29:24:D5:8F:95
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 019C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
Signing time: Sun 26 Sep 2021 09:28:23 +0000
ROA not before: Sun 26 Sep 2021 09:28:20 +0000
ROA not after: Mon 26 Sep 2022 09:28:20 +0000
asID: 327790
IP address blocks: 161.123.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:28:20 2021 GMT
Not After : Sep 26 09:28:20 2022 GMT
Subject: CN=61503d37-7c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:4b:b3:81:d2:02:8e:36:78:fd:09:0a:6d:
86:01:48:21:cf:0f:93:99:4d:14:8b:c6:fc:54:f4:
e1:d7:c8:f3:73:75:93:1b:2d:09:7a:cf:d2:d6:98:
b9:07:4c:2f:96:7e:c9:ca:00:65:61:fb:14:4b:dd:
03:4b:3e:a2:17:ce:d2:3f:86:a8:51:78:62:81:65:
6c:3a:8c:91:19:9f:e8:02:75:a9:79:d5:70:2d:16:
a2:d7:d5:4c:ab:28:0f:a9:40:13:04:b5:b9:c8:64:
b3:c9:0e:15:b1:51:29:c0:2d:9c:0f:8c:00:e9:81:
41:4e:9e:40:2f:be:ed:69:6e:64:b9:e3:c2:f5:92:
60:b8:21:eb:5d:fb:24:f4:51:32:61:ed:df:7a:5a:
90:e0:0d:b2:3b:c2:15:5a:e1:95:ec:72:44:2e:85:
57:b8:c3:11:a2:6d:6a:c9:97:f4:99:73:b2:74:a5:
2d:07:3f:da:64:9b:38:14:36:42:f2:1d:8e:5a:71:
85:51:49:b0:0f:a7:9a:7a:0c:f5:2b:4d:b2:11:b1:
39:c6:6e:a8:bc:30:9e:75:39:0a:a9:af:c3:38:c2:
04:84:98:87:c7:e1:71:c6:ac:7f:5f:4f:d6:83:7d:
91:10:b0:0d:4f:e0:2c:0f:1a:ab:6a:41:02:14:e5:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:29:DD:06:CB:C9:FC:57:D2:54:07:D1:1B:DD:29:24:D5:8F:95
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/185EBEEE1EAC11ECA795A658D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.168.0/22
Signature Algorithm: sha256WithRSAEncryption
05:0c:d1:00:76:9e:dd:a1:ae:d8:91:74:e8:bc:62:af:a7:bf:
69:75:3c:1b:3f:e3:7e:5f:3b:2a:63:f2:ba:69:f8:35:52:94:
c7:4b:7f:89:43:b0:29:13:c6:aa:6d:04:3e:61:17:b4:26:d1:
6b:9e:15:b1:0a:36:1e:92:7b:2c:ef:46:c5:ed:fa:16:eb:89:
b1:42:f2:fa:4b:27:e8:8b:f6:bb:9e:64:b5:11:fb:5e:d8:94:
2d:9b:1d:8b:a1:29:41:40:aa:60:6e:d8:17:f3:33:d9:1e:8b:
33:54:12:6c:a2:b5:d1:15:3b:77:1e:c9:0a:63:ba:75:4e:57:
d8:e9:bf:63:df:e8:d4:3a:98:5c:c8:8e:ea:c6:c8:f1:d0:15:
be:25:1f:0d:d9:92:53:5d:e1:13:b1:d3:59:8f:11:30:a2:b8:
a9:0b:17:c4:c6:06:cf:3a:aa:6f:68:72:1e:51:c7:71:bb:e5:
dd:98:53:24:5b:db:41:f8:f2:5d:3b:c3:ef:d0:d8:ea:24:31:
8c:58:57:aa:68:41:60:b1:33:d7:37:a8:62:1b:6c:8b:50:58:
84:59:18:af:37:e1:88:8b:0d:66:21:82:e4:d2:73:08:8a:fc:
f3:0e:e0:a8:d8:c6:5b:df:c0:7f:6f:99:c0:d7:f5:75:22:e8:
42:7d:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org