Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25B773C0E5DE11ECA85DF198F1222468.roa
File: 25B773C0E5DE11ECA85DF198F1222468.roa (raw, json)
Hash identifier: LpTVgEhmFyz3i41YmZS/JPlsikfLu1Q3rNOaK5iAbMc=
Subject key identifier: 54:DD:94:57:AA:0B:3A:0E:4B:11:F8:1D:81:22:88:76:59:84:D8:B5
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0705
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25B773C0E5DE11ECA85DF198F1222468.roa
Signing time: Mon 06 Jun 2022 21:18:02 +0000
ROA not before: Mon 06 Jun 2022 21:17:58 +0000
ROA not after: Tue 06 Jun 2023 21:17:58 +0000
asID: 203999
IP address blocks: 161.123.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 21:17:58 2022 GMT
Not After : Jun 6 21:17:58 2023 GMT
Subject: CN=629e6f0a-3d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:d7:fc:93:98:25:a7:57:31:2b:91:01:c5:
9a:46:61:52:2a:25:90:a8:f3:e2:81:32:59:fd:c4:
4b:e4:be:c9:74:5b:1a:89:e8:35:bd:40:79:da:63:
36:e2:9a:2b:3a:f0:7d:ed:1c:41:d1:75:6e:a4:2a:
6e:f1:c9:1b:fa:7f:e6:70:8a:3b:e8:f1:b8:ac:d2:
66:dc:a3:1b:18:58:db:66:5d:38:40:8b:a4:36:78:
48:c8:f3:75:f2:34:9d:15:47:34:2b:ed:38:5e:1e:
86:88:00:35:e4:53:3f:cb:2e:85:b2:8e:ba:4a:a6:
62:98:b3:3d:02:ed:04:b7:64:a6:52:6b:f7:35:2c:
2c:57:19:73:17:f1:ce:07:89:c3:f5:ee:ca:90:a3:
4d:74:28:86:f5:9f:d9:8c:df:75:c0:1c:3d:b6:aa:
fb:98:51:05:86:7a:ec:64:20:ec:58:4f:06:bb:25:
1e:23:d5:fc:88:05:f2:7d:cc:df:81:2a:0d:5a:3a:
71:d0:06:8c:ea:2a:16:18:13:da:5c:87:e5:e2:6f:
f2:31:ff:8d:c0:64:19:2e:ef:12:f7:1c:8b:92:49:
c0:ff:ea:78:24:fd:fb:43:39:12:2d:e5:f6:e5:c6:
5f:8a:22:8b:20:3d:e6:60:57:34:af:77:38:15:46:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:94:57:AA:0B:3A:0E:4B:11:F8:1D:81:22:88:76:59:84:D8:B5
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/25B773C0E5DE11ECA85DF198F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3f:19:32:a2:94:51:4d:93:f2:dd:69:b6:05:5e:de:fe:56:
82:02:42:ea:23:d3:f4:d5:4d:20:e2:85:18:a1:e1:84:62:d5:
c6:71:cf:56:be:62:5f:53:e7:41:af:e8:21:9f:04:aa:3a:34:
7e:ab:5f:f5:b7:14:2c:3e:ec:3b:dd:e6:81:38:24:36:5e:4e:
91:ab:64:97:08:f9:5d:98:b5:e7:f9:be:3f:c6:8c:73:db:92:
5e:df:07:43:d1:b6:6d:d9:ab:df:ef:0c:df:b5:0a:ef:89:62:
cf:6e:a2:91:79:c0:6b:63:15:ce:0e:02:a6:c1:a2:19:41:d3:
5a:ed:f4:be:07:ab:41:5f:9e:d0:71:2f:10:0d:bb:66:43:3b:
ad:72:ac:46:88:20:f7:1a:47:98:d2:4d:53:a6:55:1b:9f:83:
a9:12:62:86:a8:18:b6:15:14:71:41:de:94:70:80:2c:d2:1a:
ba:f9:2a:ae:d3:3b:ff:3a:72:eb:02:6e:a4:97:43:50:16:d4:
15:40:23:f5:1b:85:92:2b:33:27:0e:6d:c6:00:02:94:97:7d:
02:08:e2:af:5d:4c:f1:92:5b:27:e1:b1:78:aa:f5:cc:8c:b0:
e9:91:ab:a7:ec:af:81:58:0a:12:00:11:d0:e5:d8:55:35:22:
8a:31:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org