Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/47E34B3A1EAC11ECAF1DF358D8A014CE.roa
File: 47E34B3A1EAC11ECAF1DF358D8A014CE.roa (raw, json)
Hash identifier: ABk4ItEgslExTt61hQXbuUBoRkB48bXMikZt/z44jxQ=
Subject key identifier: 30:FD:CF:6C:D2:F5:04:92:54:D0:94:69:81:F6:9E:0B:97:12:C5:59
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01A0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/47E34B3A1EAC11ECAF1DF358D8A014CE.roa
Signing time: Sun 26 Sep 2021 09:29:43 +0000
ROA not before: Sun 26 Sep 2021 09:29:40 +0000
ROA not after: Mon 26 Sep 2022 09:29:40 +0000
asID: 327790
IP address blocks: 161.123.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:29:40 2021 GMT
Not After : Sep 26 09:29:40 2022 GMT
Subject: CN=61503d87-41a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:e8:6c:5d:3e:44:6a:99:65:ff:3d:a0:22:
77:fd:1e:02:fb:1f:ce:a4:8a:9c:98:20:eb:0b:0a:
e6:f7:f4:96:e1:76:4a:52:4d:b5:46:22:01:dc:28:
6a:39:51:6a:44:e0:43:98:21:49:60:80:2d:0b:18:
49:a6:22:24:4b:21:f5:96:f7:8d:c9:c6:f3:53:8f:
00:04:02:39:6d:0d:a7:c2:ef:2c:16:80:b2:73:2a:
db:8c:b4:dc:42:2d:f8:e8:39:7a:19:51:a1:48:2d:
d3:53:e8:a5:b0:85:a5:b1:5f:0d:6e:93:51:69:61:
3c:6d:4a:e1:de:f2:1b:0c:87:f0:36:85:7d:7a:71:
df:b1:57:16:b0:66:e5:71:a9:6f:a6:25:bb:e8:58:
a4:8c:99:bd:1a:11:c0:96:a2:0e:18:41:c8:00:33:
be:51:7d:54:17:aa:1d:de:1b:10:40:47:93:b6:a1:
62:96:14:27:90:96:f5:cd:9a:f1:4a:d7:6e:26:9e:
9c:33:f3:fa:13:c1:83:eb:77:63:20:e6:1d:14:08:
cb:2d:c9:ae:08:76:b0:98:7f:49:f4:04:c4:5d:31:
1b:dd:13:e9:64:91:c7:26:83:d1:dc:47:cc:b5:a5:
c6:f7:97:d1:d4:bc:88:4a:16:c5:d1:6d:13:d2:31:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:CF:6C:D2:F5:04:92:54:D0:94:69:81:F6:9E:0B:97:12:C5:59
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/47E34B3A1EAC11ECAF1DF358D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.176.0/22
Signature Algorithm: sha256WithRSAEncryption
82:eb:95:78:59:10:a2:50:83:f2:df:c0:d3:f3:63:50:e4:15:
30:1b:15:e1:06:b4:75:a9:bf:83:87:59:9c:76:78:93:8a:b8:
fc:cb:64:bc:09:60:fb:d9:e9:42:88:0b:61:df:8d:5e:82:0b:
f6:47:3f:ec:bf:1e:64:ac:b7:e0:9a:20:34:09:76:62:8d:b2:
7a:6c:c3:87:14:d2:f7:d9:b5:a4:b1:16:6f:ac:de:ed:e9:ba:
28:1f:4b:9d:4c:00:76:e8:73:b2:55:28:41:7f:94:ba:c9:6e:
98:65:7c:d6:c1:a8:dc:5e:bc:ff:3b:0c:cf:8c:49:02:65:7b:
2a:53:88:90:1f:7d:c8:2e:91:20:12:e4:a1:53:7a:bd:ca:07:
66:56:3d:0c:f5:33:8c:f9:e6:ca:eb:11:f4:f4:de:ad:2c:e5:
c0:bb:30:ff:05:45:68:d1:28:bd:b2:55:6b:3b:32:4f:7e:41:
c5:69:3a:65:5b:73:ad:55:0a:e1:6a:2c:ae:c8:9b:9f:31:7f:
10:a8:d1:6b:ba:d7:cc:bd:af:f2:f9:16:68:50:cc:9c:55:49:
97:e5:c7:fd:ec:48:29:eb:e7:80:e0:4d:f7:2d:1e:73:19:a2:
62:25:27:f2:6c:cb:ff:b0:9f:7c:45:1d:a6:ef:ff:31:7d:e4:
2c:ae:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org