Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5393790C1CC811EE87D9965C4AD9E6FC.roa
File: 5393790C1CC811EE87D9965C4AD9E6FC.roa (raw, json)
Hash identifier: LCAtJdYmxQfr6lCSujpLzIwuOIBZpGPhqNJ278VKUek=
Subject key identifier: 3A:09:A3:E0:2E:73:28:63:E1:97:26:18:20:4C:66:47:CA:B4:E6:5F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B3F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5393790C1CC811EE87D9965C4AD9E6FC.roa
Signing time: Fri 07 Jul 2023 13:15:22 +0000
ROA not before: Fri 07 Jul 2023 13:15:18 +0000
ROA not after: Sun 07 Jul 2024 13:15:18 +0000
asID: 8100
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 7 13:15:18 2023 GMT
Not After : Jul 7 13:15:18 2024 GMT
Subject: CN=64a80fea-d303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:2f:81:f8:d1:7d:56:83:77:44:a6:c2:64:
f6:24:42:0f:7b:e8:cd:7b:bc:0c:d5:f9:c2:3a:05:
02:f0:35:70:4b:39:3c:ea:28:f8:6f:9e:a4:45:e1:
09:02:c4:d5:92:61:ff:aa:0f:b8:ee:ef:e8:50:bb:
90:e7:15:c8:4b:e4:8a:ff:8b:05:db:ed:a4:49:f9:
e1:69:85:0f:96:1d:f2:57:e5:ad:70:a5:c2:dc:d6:
7b:61:52:cd:20:eb:ff:db:ca:03:88:b8:06:a3:a2:
db:37:40:9c:a9:1f:3e:1d:21:14:9c:17:82:f5:65:
0f:47:1a:a7:ac:1b:66:8f:6f:5c:c2:ab:bd:1a:84:
41:f4:6c:4a:44:d4:de:37:af:4a:0f:6e:a4:a5:94:
af:54:72:a0:e2:80:0a:c9:a0:21:17:03:85:77:40:
2b:01:ed:f3:c0:ba:2f:93:29:07:24:68:cd:4b:a8:
42:08:fa:b9:4c:fe:73:bc:6d:a9:41:22:91:bc:48:
56:61:9f:e6:36:f6:76:1b:6e:28:cd:53:ef:28:d3:
60:be:6c:12:03:6e:0f:51:f9:13:25:9d:db:35:33:
2a:26:06:c6:dc:49:30:66:8b:1b:4a:57:57:5d:50:
b3:d1:df:a3:fc:e7:08:b2:e7:85:bb:4f:15:95:07:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:A3:E0:2E:73:28:63:E1:97:26:18:20:4C:66:47:CA:B4:E6:5F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5393790C1CC811EE87D9965C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4d:10:25:91:19:0a:0f:34:35:59:f2:95:1c:e0:f1:ff:03:
c2:9c:0f:8e:06:26:06:c3:bd:2b:15:51:6c:73:de:14:48:e0:
07:f4:40:3b:90:e2:ef:5e:f8:db:4a:bb:4e:35:08:11:3e:98:
63:ff:8b:12:c0:94:9f:9e:49:88:4f:06:e8:ee:e6:3a:a8:8a:
c2:4d:8c:0c:8a:3d:87:ac:5b:ce:02:bc:4b:c9:96:eb:3d:ce:
27:34:b9:af:7c:4b:26:f6:8f:d7:19:49:38:cd:72:a7:1b:9c:
13:7b:29:85:a6:7d:ee:28:3e:a9:31:68:df:85:30:90:9d:3b:
55:68:da:7e:85:73:bc:fd:df:d3:7d:59:06:ce:65:4c:db:09:
5a:35:9f:f0:41:28:8a:db:aa:b0:61:d9:ea:d2:5f:8d:0e:43:
63:94:95:1b:fd:88:9e:fa:c9:bd:17:cc:75:5f:b5:09:5d:a6:
8a:ec:44:c5:f0:dc:2c:dd:7d:57:e3:4a:b5:62:d3:b8:1b:6d:
7e:d6:a6:85:c3:54:d8:58:9e:a5:b8:17:85:73:2c:d4:b0:ff:
bd:ba:96:84:88:f0:65:e3:4d:fb:de:ac:8a:4f:8d:94:a6:95:
4b:8d:29:26:a9:5b:28:39:1a:b8:34:7e:9e:14:90:4a:ea:66:
82:d2:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 02:44:22 2024 by rpki-client on console-fra.rpki-client.org