Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3FD87D5EF16311EC91A4A3B6F1222468.roa
File: 3FD87D5EF16311EC91A4A3B6F1222468.roa (raw, json)
Hash identifier: EBr6slJ6zslU23aem8OFILBI8qxY+D6m6xxel01WcCo=
Subject key identifier: 0F:A3:23:45:40:CA:AE:6D:02:E2:3B:0F:8B:BF:33:AF:F6:FE:AE:AD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0774
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3FD87D5EF16311EC91A4A3B6F1222468.roa
Signing time: Tue 21 Jun 2022 13:08:32 +0000
ROA not before: Tue 21 Jun 2022 13:08:28 +0000
ROA not after: Wed 21 Jun 2023 13:08:28 +0000
asID: 203999
IP address blocks: 161.123.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 21 13:08:28 2022 GMT
Not After : Jun 21 13:08:28 2023 GMT
Subject: CN=62b1c2d0-ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:3a:95:0e:e5:9f:d5:23:3a:54:2d:2e:d8:
9c:7e:ed:de:f5:76:db:e7:2a:3d:ca:8f:bb:06:48:
97:39:a6:5e:ae:02:69:6b:15:4b:31:49:47:5e:5a:
70:75:ff:40:fd:cb:c7:8c:9b:f4:e6:d4:57:c7:98:
9c:7a:66:20:3f:96:e7:44:55:85:2d:8b:55:b0:12:
5f:03:d5:95:38:27:30:22:fa:ef:b7:14:ab:77:87:
d3:a7:fa:a1:4c:8f:0c:5b:54:b3:27:eb:5d:57:f6:
67:9f:7e:1c:16:11:59:6c:7f:75:b9:01:93:80:94:
7c:e5:8a:41:df:6a:01:e6:d2:e7:1f:90:f6:cd:45:
fa:91:2b:b2:76:b5:6d:55:ec:7c:84:40:44:bd:e0:
e9:a6:a3:e9:5c:e3:07:22:96:9e:8d:7c:a5:10:20:
9e:8d:0d:5a:08:d7:97:4c:ab:c7:dc:a6:c3:53:b4:
57:02:21:de:f8:16:3f:0b:e7:c0:15:e8:47:c9:e9:
46:6a:85:be:6f:98:39:49:86:38:70:7c:1b:eb:3d:
ae:1d:3b:b1:f8:6e:91:24:a9:c6:81:87:84:60:9c:
a1:d5:44:92:61:05:eb:19:a8:59:d9:85:9c:fc:18:
59:6b:95:b2:91:f8:c8:9e:6c:da:3e:0b:72:d6:e6:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:23:45:40:CA:AE:6D:02:E2:3B:0F:8B:BF:33:AF:F6:FE:AE:AD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3FD87D5EF16311EC91A4A3B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:0c:47:e3:41:08:fc:3e:03:1a:f1:b1:8c:65:d7:b8:12:1a:
b8:7f:a5:d2:76:9f:03:9b:b9:1f:a0:ef:79:dc:55:c8:b7:84:
c1:58:14:be:d7:b2:e7:9f:8f:8c:51:5f:49:5c:75:ab:7c:c1:
71:7e:b3:bb:12:c8:e1:c8:82:67:ac:e9:35:8a:9a:f9:66:2f:
c0:8e:69:a5:ec:96:8e:44:55:c9:58:6f:c9:e7:51:ab:23:61:
79:b8:cb:fb:85:62:36:49:01:ec:46:46:ed:ac:d1:45:00:87:
6b:f1:b3:b4:ba:c4:95:f3:20:c5:04:8e:4c:3b:3f:da:a9:e3:
a5:54:1a:3b:f1:fc:b4:51:65:70:7a:3a:7a:59:ca:5d:a0:fc:
0f:34:07:da:d1:05:3d:db:09:28:c5:97:30:2c:34:9f:cc:a6:
fa:10:1f:50:03:33:a3:1c:58:bb:7c:14:23:59:87:bd:57:0e:
de:7b:3f:9d:66:0b:e1:e7:94:b8:74:a4:19:e2:13:05:33:38:
3c:73:fe:16:d6:32:c2:4c:77:b5:89:fb:2e:d5:89:fa:ca:21:
02:5f:38:5b:c3:1e:6b:08:13:41:72:c9:97:45:ce:db:19:9e:
ee:c1:12:60:a1:9c:dc:70:7c:fb:b4:fc:f4:aa:aa:79:c7:46:
15:60:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org