Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
File: 51F5B2B01FE611EEB3ACF1554AD9E6FC.roa (raw, json)
Hash identifier: uciSex8YgFYs63q9jKATNI8zZ79s9CJ1l4hipuvVnOk=
Subject key identifier: 53:91:62:A1:2E:FD:36:3E:2D:97:7C:FD:F3:6A:3A:E3:72:B7:2C:C2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B4F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:27:37 +0000
ROA not before: Tue 11 Jul 2023 12:27:34 +0000
ROA not after: Thu 11 Jul 2024 12:27:34 +0000
asID: 133499
IP address blocks: 161.123.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2895 (0xb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:27:34 2023 GMT
Not After : Jul 11 12:27:34 2024 GMT
Subject: CN=64ad4ab9-79ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:67:5f:8a:d6:ca:6b:8d:f7:88:30:f0:6c:
8e:00:34:a3:16:ef:cc:14:47:c4:70:23:8c:9b:2e:
c6:8e:3c:7b:90:87:70:cc:35:a0:eb:db:4c:08:f2:
48:59:28:88:b6:b7:c7:c0:33:13:72:18:ac:3b:78:
8c:f3:43:1a:ad:6d:97:bf:bd:ac:ff:ff:d2:21:ba:
89:c2:c5:e7:19:18:9a:dd:e4:0d:94:24:29:94:0b:
62:04:72:63:d1:4d:0c:62:98:81:5e:28:10:30:d2:
5a:6b:2a:50:f3:e7:5c:e4:e4:4d:ef:42:44:76:09:
3e:f2:4b:90:1a:9a:96:21:06:95:ff:00:42:4a:84:
75:33:c2:19:f4:4b:5f:89:3a:66:ba:17:b2:5c:ce:
9b:41:56:37:18:c5:25:fe:f4:6c:fd:b7:c5:11:0d:
ff:74:10:69:d2:ad:d1:d1:9e:90:63:3c:f4:64:73:
c2:c3:5b:55:36:bd:8e:b1:4d:0d:51:7f:8f:05:46:
ec:96:ac:a5:db:c7:04:e1:dd:e2:07:bc:9e:ce:7c:
d9:b1:ba:2d:ba:65:d4:f3:c2:ff:72:85:fa:30:89:
65:6c:8b:57:58:76:69:81:b5:c5:b5:fe:77:96:30:
87:25:df:ea:44:1b:4f:82:17:8c:46:58:46:a5:ae:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:91:62:A1:2E:FD:36:3E:2D:97:7C:FD:F3:6A:3A:E3:72:B7:2C:C2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.217.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4a:ae:65:01:f3:c5:48:86:9b:7f:16:99:59:b3:33:8e:2d:
13:bb:12:6d:37:14:c7:7e:66:76:41:3f:6b:c3:38:d9:c2:cd:
e8:a9:a2:65:66:f0:1d:10:5e:65:80:3f:e2:37:1e:28:b4:78:
a8:e4:69:5b:a6:ba:ee:8b:62:4e:b1:e4:a3:c2:20:0c:20:73:
80:09:a8:d3:d1:1d:53:45:6c:c2:13:d8:4d:84:fd:91:0a:30:
55:e5:7d:d9:e0:e5:b1:47:a5:5a:0b:ff:28:06:ca:e8:03:48:
0e:b5:4d:d9:09:ec:3f:bc:a7:86:a5:8a:d2:e8:c3:61:a9:d6:
e2:58:98:65:37:a4:18:60:36:c7:3a:fd:38:5b:3e:67:e6:6e:
9c:e1:3f:81:0c:0d:6a:7c:4d:6e:76:7d:45:1c:32:31:69:14:
db:85:33:48:f6:af:9a:49:8d:ef:81:6c:16:d8:e8:77:1d:cf:
6f:ed:55:b5:83:6b:89:b0:bd:0a:d2:06:8e:80:d3:02:ab:2e:
88:c1:08:00:1f:d7:6c:4a:94:db:f5:bc:7a:9e:5f:60:05:1f:
6f:2e:2e:cc:86:6c:45:67:8e:7b:a9:51:34:f2:ff:b7:2a:92:
40:84:d4:d9:63:4a:76:c1:7f:b9:e5:1e:ec:e8:83:a4:e2:45:
a3:51:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 03:08:14 2024 by rpki-client on console-fra.rpki-client.org