Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/42C8B2B895F611ECAF2A28CC5A40D577.roa
File: 42C8B2B895F611ECAF2A28CC5A40D577.roa (raw, json)
Hash identifier: EUp/S9QjnTngV5ZxHSIxC4cfm+nypQz3JDl54b/xKsg=
Subject key identifier: DA:A3:F9:67:24:B8:14:43:6D:8A:D4:DF:35:2B:92:CA:E2:28:D6:D4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 05DF
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/42C8B2B895F611ECAF2A28CC5A40D577.roa
Signing time: Fri 25 Feb 2022 04:49:06 +0000
ROA not before: Fri 25 Feb 2022 04:49:02 +0000
ROA not after: Sat 25 Feb 2023 04:49:02 +0000
asID: 327790
IP address blocks: 161.123.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 25 04:49:02 2022 GMT
Not After : Feb 25 04:49:02 2023 GMT
Subject: CN=62185fc2-5aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:9b:38:ca:e9:2f:1f:a5:14:38:ec:bc:c1:
a0:79:40:69:b9:23:9b:10:af:d4:41:c3:2a:6f:ef:
e3:37:1d:9a:10:c6:8b:96:84:fe:6e:34:44:76:15:
33:a2:91:2b:d0:59:c0:49:0a:cd:2f:0d:05:3f:42:
22:85:e5:a7:a0:fd:4f:82:5d:a1:dd:19:b7:d2:22:
05:f0:52:ef:ba:be:97:ae:f1:5c:4f:5c:49:e1:e5:
56:b9:9e:41:ef:9b:e2:3f:26:46:82:d5:b1:85:49:
5f:1f:1f:92:7a:27:aa:70:dd:75:cb:a1:7a:1a:b7:
67:e8:e9:cc:f0:5d:c4:63:0c:38:d1:4e:12:4e:92:
13:90:92:47:4c:bb:94:db:b4:8e:f3:05:63:69:ea:
42:b5:de:d0:8b:1d:b5:ef:a7:8f:ea:cb:57:e7:c9:
14:7f:5e:81:4c:0a:ce:58:40:5b:d5:3b:a6:c8:41:
28:30:1a:2f:52:9f:e0:43:39:25:a7:39:5a:84:dd:
f3:d7:35:00:e5:cd:58:09:02:bc:90:fe:1f:b1:43:
9f:72:4c:67:ce:e4:ac:ec:18:8d:fa:21:c4:46:1b:
e5:d2:5f:e6:76:a4:cf:3b:60:db:e1:d8:5a:4c:14:
a1:c8:1e:e9:2a:ae:ca:cc:44:a0:a1:11:1d:61:92:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:F9:67:24:B8:14:43:6D:8A:D4:DF:35:2B:92:CA:E2:28:D6:D4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/42C8B2B895F611ECAF2A28CC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.232.0/24
Signature Algorithm: sha256WithRSAEncryption
15:27:47:50:49:50:ec:eb:e8:e7:45:78:7d:75:0b:da:17:cc:
2a:20:9e:cc:a9:da:41:8d:7f:2b:99:79:12:ac:38:85:ee:f4:
ae:ad:ce:9e:7b:fb:19:19:1a:50:18:ce:58:4e:da:e3:36:3d:
57:a8:8e:18:2c:32:56:43:13:7c:b5:27:24:51:d8:4c:66:b8:
e3:7f:30:7b:2a:37:26:c9:22:b1:9b:c8:6e:15:8e:55:67:e8:
5c:cd:c5:25:f6:da:91:fc:2a:90:01:72:17:a2:5b:d1:6e:39:
87:37:75:03:2e:f9:ea:b7:85:22:20:aa:cb:31:96:ed:10:f4:
98:2e:1e:fc:01:fe:8e:3b:68:f7:08:b0:ed:6a:07:63:39:98:
58:bc:86:3c:b6:ed:89:b5:d8:5c:14:8c:ff:7d:e1:10:8e:7d:
cc:59:f2:8d:ca:d5:3d:49:57:7e:23:54:24:a4:66:ec:7a:43:
5a:1c:a2:59:bf:00:85:c8:c6:8f:da:63:79:28:d4:01:f1:77:
8d:c1:b3:da:97:c0:7b:6c:a9:3d:d1:17:f5:fc:b6:d5:a7:00:
32:66:0c:30:e8:5f:d6:07:b4:9c:91:67:1a:4b:22:5e:8e:ae:
a9:44:f5:7e:b3:6b:53:b5:11:fd:69:cc:95:06:93:40:48:75:
a5:38:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org