Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4FBE4A34919811ED80F105D6F1222468.roa
File: 4FBE4A34919811ED80F105D6F1222468.roa (raw, json)
Hash identifier: rIZdFrq5RZ1IiU6HAGGnx3/O4aIZOQT5jhJpugZBuiE=
Subject key identifier: FF:CD:DC:CA:C1:4D:40:9E:0B:7D:A4:D5:D8:0B:23:78:36:DE:F5:46
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 094C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4FBE4A34919811ED80F105D6F1222468.roa
Signing time: Wed 11 Jan 2023 10:11:28 +0000
ROA not before: Wed 11 Jan 2023 10:11:24 +0000
ROA not after: Thu 11 Jan 2024 10:11:24 +0000
asID: 133499
IP address blocks: 161.123.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:11:24 2023 GMT
Not After : Jan 11 10:11:24 2024 GMT
Subject: CN=63be8b50-63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:55:04:70:be:05:e7:b6:a3:b5:c1:88:e0:
83:7d:41:cf:8a:99:4b:f0:b4:20:89:a5:51:b8:3d:
8f:9c:e9:41:30:82:3a:b6:be:ee:5d:ef:ec:1f:d3:
b9:14:77:18:47:e5:db:1e:bd:0f:5b:4e:a7:2b:41:
22:e2:21:4c:8a:9a:3a:b2:79:26:c7:09:84:54:68:
a2:0e:b1:80:c9:67:67:f7:2e:56:72:dd:29:bc:71:
2b:4d:71:8d:52:b1:d8:f3:d2:83:dc:51:e6:19:ed:
c9:6f:15:dc:81:81:8b:bc:65:34:41:f5:70:e3:0f:
a5:26:6f:c3:aa:83:47:52:68:2d:bc:4b:76:ac:da:
1f:13:37:eb:4c:4f:6f:b9:18:ba:c4:82:a4:12:fd:
05:0b:c1:d1:76:de:c3:2c:b3:51:82:26:9b:96:84:
0b:ff:5e:cf:75:49:16:74:5d:8e:fe:cd:18:58:43:
95:ad:a5:67:18:7e:7b:3e:31:50:ee:b4:21:20:de:
3d:40:cc:3b:a4:9c:2e:00:bc:db:6e:63:cd:7f:63:
d6:94:3d:51:29:9d:fe:6f:58:43:fd:23:c7:a3:7e:
7e:46:c1:2a:7c:1e:5c:56:37:1e:25:98:dd:27:67:
1c:b6:7d:26:fa:fd:56:f9:c7:00:95:e2:05:6a:af:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:DC:CA:C1:4D:40:9E:0B:7D:A4:D5:D8:0B:23:78:36:DE:F5:46
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/4FBE4A34919811ED80F105D6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.196.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c3:36:82:f2:89:42:0c:42:63:d8:e5:a7:49:cd:cc:30:6f:
3c:b8:53:26:8c:ed:2a:ec:59:e5:e4:40:b2:88:6b:ff:db:29:
dd:63:07:a1:0d:31:d6:0b:ff:82:93:cc:fc:20:a6:ef:a2:76:
8b:18:22:17:08:6d:97:69:20:12:9d:f6:0c:2d:23:ef:6d:b4:
ef:82:89:75:b1:88:71:3c:ee:e2:2f:56:13:a9:8e:48:ac:eb:
00:0d:57:4d:21:f1:67:56:82:5e:57:b7:77:6d:00:b6:f0:ad:
3b:8d:86:f0:17:81:da:0f:b5:01:6e:14:95:f2:bc:69:28:c3:
55:4c:26:3c:06:1b:c0:73:30:22:a2:3f:0f:fc:03:64:ce:fd:
cf:cb:84:83:d6:72:d6:1b:ed:64:c5:80:d8:35:98:da:b4:d1:
4e:23:01:00:18:c1:a0:3d:3a:46:d5:11:f4:f0:77:c4:35:64:
e8:0d:36:77:0b:a6:d2:49:31:c0:b9:c7:c1:36:7d:2b:f6:c1:
99:2f:91:7e:7d:09:50:62:a0:cc:d3:33:a5:c8:0f:a4:b9:f8:
c2:44:41:eb:62:9d:de:e4:e4:c9:9d:05:95:e0:83:ee:8f:b9:
2e:58:86:1f:5d:a0:a2:72:b1:f3:33:80:fc:15:d1:a6:f6:96:
25:f8:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org