Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E5EBAFEC41111EDA44216AAF1222468.roa
File: 1E5EBAFEC41111EDA44216AAF1222468.roa (raw, json)
Hash identifier: kEjq9Q5VJuiS+y+KsK7UNtOCB85FbIVV+koQ7Q+lpkw=
Subject key identifier: 23:D0:06:2A:AB:1D:F1:BA:D0:62:2A:A0:51:01:54:95:76:0B:A2:2F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A25
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E5EBAFEC41111EDA44216AAF1222468.roa
Signing time: Thu 16 Mar 2023 15:42:12 +0000
ROA not before: Thu 16 Mar 2023 15:42:08 +0000
ROA not after: Sat 16 Mar 2024 15:42:08 +0000
asID: 207990
IP address blocks: 161.123.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2597 (0xa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 16 15:42:08 2023 GMT
Not After : Mar 16 15:42:08 2024 GMT
Subject: CN=641338d4-29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:c2:2c:4e:df:0c:f5:b1:de:c8:40:95:76:
c6:ea:53:a4:51:4f:41:44:1f:dc:e7:89:1f:d4:e7:
ac:7f:b8:47:90:db:76:63:72:50:6d:c1:c0:80:0b:
33:49:35:fd:b3:50:28:89:a0:8b:12:9c:c2:d5:0a:
03:c2:56:c0:be:2c:90:c2:f0:4f:a5:b5:67:5d:db:
60:ec:fa:58:59:67:74:2c:72:01:55:8a:ca:75:48:
57:98:fc:bd:39:e8:f8:75:74:5b:de:0c:9b:46:de:
c1:66:61:ea:7b:f3:7f:d9:9a:1e:8d:6d:c3:c8:2c:
2b:b3:75:fb:6d:f8:90:2e:75:b9:c1:cc:23:81:d8:
0b:a0:7b:96:07:4d:62:40:23:6c:a6:3f:44:3d:96:
98:cd:af:06:a8:cf:4e:0f:cc:2e:a1:ff:8b:a6:39:
cb:e6:1c:3a:53:16:bc:c4:ac:0f:ec:22:1b:ed:62:
62:9f:a1:be:9e:e1:3a:7c:c5:c4:f9:c1:5f:61:8e:
7e:2b:8f:dd:7f:ea:78:2d:72:3a:6a:fc:87:82:18:
d6:c2:84:1c:dc:8f:3f:eb:59:fa:14:d9:52:4e:08:
40:2d:ef:a5:41:23:80:38:a0:68:9a:9c:50:dd:70:
34:2c:b3:4c:4c:78:70:b3:35:00:25:18:60:df:b9:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:06:2A:AB:1D:F1:BA:D0:62:2A:A0:51:01:54:95:76:0B:A2:2F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E5EBAFEC41111EDA44216AAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.6.0/23
Signature Algorithm: sha256WithRSAEncryption
62:43:4c:eb:70:ab:1e:75:82:1b:b9:38:18:50:23:9c:08:1c:
b9:ac:6c:7d:6f:9b:2b:0b:79:18:07:f2:e8:b6:6e:04:b0:7c:
2b:62:92:21:cf:fd:51:3f:a3:ba:c9:8a:71:dd:09:07:38:8c:
64:d0:0b:29:98:24:fa:c9:1a:7f:c2:fe:86:e4:f6:74:42:0d:
11:d9:a1:3b:8b:fd:f4:b6:b4:ca:37:c8:54:97:d3:60:b7:79:
3b:59:46:4c:cf:cf:01:0b:8f:30:40:56:7a:7d:c0:b9:1e:7c:
d1:d9:a0:3c:d5:90:45:cb:48:dd:3a:9c:40:39:54:9d:8e:53:
36:9f:56:6b:de:97:56:04:72:f8:d2:ca:5f:c8:3d:24:27:dc:
6e:8a:13:ba:18:4b:bc:ab:99:7f:77:25:f7:5a:0b:d7:f1:08:
90:da:2f:5d:c0:a4:47:d9:53:b5:ae:40:55:4c:e9:fb:f6:28:
e6:50:8d:e8:93:b3:7b:56:7a:b3:2b:21:3f:38:f9:f1:23:d5:
9e:72:84:6b:92:98:0d:23:d0:3a:52:f8:b0:8e:9d:2d:2f:cf:
d7:47:b4:96:34:d3:ae:50:30:2a:7b:2f:3e:12:96:1d:c7:cc:
98:95:77:e4:8c:70:a1:5c:20:2d:b7:1f:e0:de:85:fb:31:fe:
b2:7a:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org