Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/46777BBAF60911EC810D7E80F1222468.roa
File: 46777BBAF60911EC810D7E80F1222468.roa (raw, json)
Hash identifier: cgqNCV1efCmtG+sGUx4LwHbRU2+KwVHAJ5kJrjUlsSs=
Subject key identifier: 78:D0:92:09:E0:78:AC:5B:D4:E7:B6:AF:D9:A8:A0:85:3E:C2:E2:E0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0786
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/46777BBAF60911EC810D7E80F1222468.roa
Signing time: Mon 27 Jun 2022 11:07:04 +0000
ROA not before: Mon 27 Jun 2022 11:07:00 +0000
ROA not after: Tue 27 Jun 2023 11:07:00 +0000
asID: 203999
IP address blocks: 161.123.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 27 11:07:00 2022 GMT
Not After : Jun 27 11:07:00 2023 GMT
Subject: CN=62b98f58-3c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:12:5c:fe:39:f3:1d:7e:2e:cc:1e:34:79:
b8:e9:aa:db:85:b1:c0:34:e5:62:61:8c:e0:f4:12:
07:76:21:26:10:eb:c5:80:c3:0d:19:7c:a9:28:4e:
2f:67:be:f7:40:e4:71:2e:cf:00:9e:20:bf:4d:38:
59:d2:f1:06:a0:00:46:2c:30:f1:c2:f6:49:58:2f:
c0:d0:51:3a:90:31:4b:4d:79:f4:e0:bd:17:4f:88:
51:17:ca:29:8f:5e:de:85:40:5a:54:03:ff:ee:78:
bb:ef:cd:78:d6:f1:81:16:1c:d0:86:27:d7:b9:6e:
e0:af:9d:75:89:df:05:92:7d:bc:75:58:a2:96:8e:
ee:15:87:62:3a:1e:99:40:ca:5f:e7:1b:3c:8c:a3:
2b:1b:c1:29:30:d5:52:96:23:37:9a:b9:84:f2:6c:
fa:aa:d5:18:5a:29:63:a1:50:ad:9a:8f:12:af:1e:
e3:3a:2f:5c:2b:b2:24:28:06:73:58:80:22:86:6d:
32:bc:25:93:09:60:7f:b4:19:c7:13:28:41:7e:81:
01:c9:85:60:c2:5e:8d:29:9d:ee:49:48:e2:bc:1b:
81:8b:10:07:68:1d:a4:e2:80:9a:6f:10:11:e0:88:
29:b5:10:e8:86:a9:d4:77:d4:b4:65:eb:1f:df:e9:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:92:09:E0:78:AC:5B:D4:E7:B6:AF:D9:A8:A0:85:3E:C2:E2:E0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/46777BBAF60911EC810D7E80F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.96.0/22
Signature Algorithm: sha256WithRSAEncryption
89:dc:09:f3:04:43:2c:cb:19:c7:d3:3e:12:9f:67:65:d6:77:
e1:6f:32:21:9f:91:05:08:82:4d:3c:b9:53:00:6e:79:fe:25:
8d:9d:0b:3f:9e:b5:88:7b:2a:be:08:3b:7e:8a:3c:19:7b:03:
1f:1b:5e:45:a9:04:83:b7:f9:6f:49:06:7c:77:9f:a5:fe:ba:
ae:fa:be:76:8f:63:d7:c9:bc:9f:c3:e1:0a:08:23:5e:e8:c5:
af:15:89:fd:25:f7:f9:fe:df:40:35:60:c0:c9:3a:7c:7c:af:
ab:38:e4:da:3d:b4:1a:f4:1e:74:c8:04:56:c6:1e:58:dd:60:
de:9a:ea:56:dd:ae:6d:99:3d:6a:3c:c1:f4:0f:7a:b6:f0:81:
55:36:89:21:d4:5a:1c:c9:11:7b:c6:ee:9b:c9:b9:a9:77:e3:
bf:bb:7f:27:0e:fa:3b:23:43:7c:db:23:f7:30:72:94:9c:90:
b5:b9:db:b2:6e:ad:1b:41:88:b0:6d:0e:22:61:b4:c7:49:98:
d9:8b:75:ac:15:f2:1b:ad:e6:b1:29:ba:88:fb:39:0d:ed:92:
27:69:64:0c:7f:bf:8a:61:01:36:73:0d:b6:01:f4:b4:23:26:
04:61:be:ab:bb:e2:29:04:00:7a:fd:76:57:6d:22:3c:77:b8:
0a:83:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org