Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4C26F7DC7A0911EDB84DC785F1222468.roa
File: 4C26F7DC7A0911EDB84DC785F1222468.roa (raw, json)
Hash identifier: U3tBG/Nh7xLUfnpL8BpqMx9ZjtdwtSB0h8TSGDFEPuw=
Subject key identifier: F3:B4:3F:20:23:DF:FF:E1:DB:CF:D4:A2:16:1C:AD:D9:16:58:5E:16
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0915
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4C26F7DC7A0911EDB84DC785F1222468.roa
Signing time: Mon 12 Dec 2022 10:39:47 +0000
ROA not before: Mon 12 Dec 2022 10:39:43 +0000
ROA not after: Tue 12 Dec 2023 10:39:43 +0000
asID: 205431
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325 (0x915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Dec 12 10:39:43 2022 GMT
Not After : Dec 12 10:39:43 2023 GMT
Subject: CN=639704f3-294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:26:cd:3c:ee:fc:7f:41:4e:f3:10:c4:21:
d3:7c:1d:24:c4:19:07:9e:3f:ae:01:90:8a:52:36:
99:74:d2:6a:ac:cc:30:db:7a:5b:bc:a8:f8:e5:e0:
09:ba:29:c1:87:1c:1e:f8:c7:00:a6:d0:68:6b:e9:
f8:25:89:2d:8e:a2:93:c1:27:46:cc:c7:9c:a3:71:
03:44:00:64:cb:49:f3:12:54:40:8f:4a:af:3f:a9:
73:79:36:dc:85:34:3a:61:06:f9:05:01:38:f7:94:
9d:7c:0f:db:b9:6d:da:ac:74:4a:66:a2:5e:cc:bd:
a0:e0:41:31:7e:d0:00:1a:78:82:5e:ff:21:65:37:
d6:ba:66:4e:3a:d6:d8:51:f8:ba:03:da:28:95:f1:
ee:71:6b:a6:6b:20:c2:a0:8a:12:87:0b:0a:ea:8a:
8d:c7:16:d5:6f:f3:9c:8d:c2:02:4d:ca:67:51:59:
d6:fe:28:85:a3:bd:b0:e8:39:a6:49:03:af:ae:a6:
ea:15:58:12:f3:55:34:aa:a7:43:3b:e6:8c:00:50:
3c:7d:32:95:fc:03:88:aa:70:73:13:3a:69:27:ec:
c3:f1:f8:da:af:90:7e:58:14:34:e8:81:f1:69:4a:
52:9c:cd:1e:23:ae:2d:3b:85:1f:88:4e:06:c5:af:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:3F:20:23:DF:FF:E1:DB:CF:D4:A2:16:1C:AD:D9:16:58:5E:16
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4C26F7DC7A0911EDB84DC785F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a0:17:ca:9f:f7:73:5e:8e:39:0b:ca:6f:10:f5:83:e6:8e:
66:50:a1:93:ee:24:f3:44:d0:db:1c:58:5e:72:00:57:8a:15:
f4:13:c8:25:57:cf:83:12:75:26:73:a3:09:09:9a:e1:56:df:
07:d8:a5:9e:25:90:e5:c5:73:fb:9b:e7:dc:0b:94:ff:1f:07:
95:81:21:75:37:f1:33:c4:c2:56:af:7b:51:db:3a:30:9e:2c:
ab:06:55:fa:6e:29:0a:f2:16:5f:6a:15:44:26:8b:67:b4:13:
8c:2a:40:ae:a3:bf:57:97:da:51:85:a0:05:bd:c6:7a:c4:dc:
4b:7c:b4:e2:7f:91:0c:b5:29:ee:eb:73:43:fb:79:39:fe:42:
46:8f:10:ff:83:4b:49:34:53:ae:50:57:30:e8:47:95:97:d5:
89:49:a8:bb:27:65:42:e3:fa:bd:07:3a:0f:cc:02:c2:47:2a:
f4:d5:bd:44:87:a9:90:04:50:54:d6:d0:02:70:fd:89:bc:89:
fb:f6:76:37:30:43:7b:01:d5:23:46:f9:03:09:76:cc:01:d4:
82:46:77:36:62:a2:30:a3:9f:76:c8:58:f5:b0:a6:7e:cf:80:
7e:2b:4d:3b:03:16:f8:59:5d:c8:bd:a8:f6:df:ad:56:1e:3d:
49:a5:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org