Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DEDB7A2EB0E11EDA5933B494AD9E6FC.roa
File: 3DEDB7A2EB0E11EDA5933B494AD9E6FC.roa (raw, json)
Hash identifier: /M0UHEweJCyhNWk74psQD7dGzT6njU8Jabl64JueSoU=
Subject key identifier: EF:14:B5:1F:DF:7D:70:D9:E0:B2:DA:96:09:BD:3D:F8:D5:36:62:29
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A97
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DEDB7A2EB0E11EDA5933B494AD9E6FC.roa
Signing time: Fri 05 May 2023 06:29:52 +0000
ROA not before: Fri 05 May 2023 06:29:49 +0000
ROA not after: Sun 05 May 2024 06:29:49 +0000
asID: 399471
IP address blocks: 161.123.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 06:29:49 2023 GMT
Not After : May 5 06:29:49 2024 GMT
Subject: CN=6454a260-5de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:44:61:d9:a3:3b:64:13:7b:4f:93:75:cb:
59:02:f6:2d:0b:c3:dd:3d:cd:d2:2f:1c:f7:72:31:
f4:e1:96:9d:2d:7e:4d:fe:2e:ef:ae:1d:18:90:14:
1e:c0:e0:a3:10:fb:0c:5f:e9:58:80:9d:1a:ea:f5:
40:20:d0:24:61:5b:46:b1:f5:6d:b7:10:d1:4e:c2:
49:27:aa:51:e2:f1:11:c1:d9:4a:d6:03:f3:b7:dd:
1c:a9:6d:a5:f2:c6:8d:e8:8f:67:4a:80:9d:71:a9:
9f:0e:87:c7:d2:92:90:1c:0c:2c:21:d5:67:f2:90:
28:b1:22:a5:4e:14:d2:6e:44:3d:e1:1d:87:51:ae:
fa:b5:49:cc:98:6c:58:7a:7b:dc:88:6d:57:95:dc:
0c:1a:15:cb:12:53:d0:15:cb:59:b4:24:e7:b7:94:
17:6d:a6:0e:96:f7:8b:97:4b:42:69:29:85:34:1a:
87:75:7c:be:38:0b:79:39:3b:36:f2:07:f5:69:dd:
fc:e7:3e:27:4a:62:92:f5:59:d9:f3:34:da:f2:e4:
c5:16:1b:f6:f3:fb:21:44:e9:73:4c:d6:5d:81:88:
39:ef:da:19:1b:42:13:82:36:2f:5c:cb:aa:ef:40:
fa:2f:8d:04:81:ea:14:6e:c1:7c:e8:4d:8a:6f:51:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:B5:1F:DF:7D:70:D9:E0:B2:DA:96:09:BD:3D:F8:D5:36:62:29
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3DEDB7A2EB0E11EDA5933B494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.55.0/24
Signature Algorithm: sha256WithRSAEncryption
71:70:b7:85:af:08:54:8a:bb:9e:4f:29:ed:51:ed:06:ec:f7:
29:ba:0b:64:a7:9b:35:27:b5:c5:ba:0d:a2:39:88:dd:ca:60:
21:ee:1f:2a:01:c1:94:a6:e6:41:bf:65:3e:32:e1:88:70:d2:
f7:6c:f7:da:3c:ec:ca:bb:9d:b2:cf:ef:a8:26:35:75:32:94:
fc:87:7f:28:70:41:de:a4:3d:72:7b:40:41:f5:ef:fe:76:fc:
aa:c8:e5:4c:f0:c2:84:88:6f:ec:dc:58:db:70:01:d4:c9:c7:
90:72:c5:c6:b8:c6:8d:05:b2:12:21:1a:21:12:34:e5:8f:92:
38:32:b6:97:6d:14:66:9a:89:0f:7b:40:c8:7e:75:c4:15:a4:
3b:cd:d9:fe:e6:2e:bc:18:74:fa:ff:a7:97:44:fb:df:ca:83:
37:05:20:f3:c2:bc:41:3e:65:d3:56:6a:6a:38:2a:aa:d0:4d:
18:55:1f:d3:4a:c8:d6:1a:f1:ca:7b:f7:28:91:01:51:0e:13:
05:51:34:00:3f:3a:98:ad:b4:b2:fb:1d:65:bb:3a:93:c6:1e:
77:72:f5:08:f8:ec:98:c3:84:d8:cf:7c:5b:c8:ca:46:5e:e1:
c2:00:92:5f:0b:7d:f4:e0:d6:18:89:7e:bc:6f:23:7e:8a:79:
71:a6:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org