Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59CAFE6CE5D811ECB8B5FD86F1222468.roa
File: 59CAFE6CE5D811ECB8B5FD86F1222468.roa (raw, json)
Hash identifier: jk3v7YWmw/qu/we72+WezGOZSaTigZIcQedoavhu61Q=
Subject key identifier: D0:C5:A1:A5:FF:2F:73:A9:C2:71:8B:8C:81:EF:EB:3B:B9:EC:2C:6A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 06F3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59CAFE6CE5D811ECB8B5FD86F1222468.roa
Signing time: Mon 06 Jun 2022 20:36:32 +0000
ROA not before: Mon 06 Jun 2022 20:36:29 +0000
ROA not after: Tue 06 Dec 2022 20:36:29 +0000
asID: 23470
IP address blocks: 161.123.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 20:36:29 2022 GMT
Not After : Dec 6 20:36:29 2022 GMT
Subject: CN=629e6550-c2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:3a:06:64:9d:30:7c:c8:3e:5b:ea:ef:14:
bf:3f:90:19:94:4d:9e:7c:36:47:dd:0f:b1:30:3e:
80:1c:6e:7c:fc:26:0b:5b:f7:87:ee:ff:e9:eb:d1:
59:66:5a:f9:db:4f:b5:21:ef:ef:cd:12:a1:1e:75:
71:08:01:2d:8f:13:25:6f:d9:f3:12:0c:88:e7:79:
9a:99:bd:de:27:6a:c6:92:c8:4b:ed:2e:db:7f:c5:
52:fa:ce:07:c8:bf:6e:93:d1:8b:42:65:ee:8c:47:
6b:c3:c6:65:b7:39:5d:4f:6d:0d:df:7e:8b:36:a8:
16:67:1b:b6:ec:41:d2:15:f9:28:2a:36:f9:03:da:
39:b8:46:90:32:c9:88:ac:7f:11:83:79:49:e4:2d:
3f:6d:3f:38:00:d7:13:0f:a9:f4:6f:cf:97:79:35:
3b:76:bc:cf:3c:3e:b4:46:62:9b:f1:8c:e1:27:69:
53:d3:63:c9:04:ba:de:88:15:6a:ec:68:c0:d7:84:
35:c5:86:04:53:7f:f3:79:00:be:f9:9f:17:3a:dc:
48:bc:cb:1d:c2:be:f8:19:da:79:51:b7:31:40:1a:
0c:8a:5f:2d:c6:70:df:cf:e1:30:c4:64:57:e1:9a:
dc:81:88:d7:55:0e:a1:bd:27:f6:53:32:66:75:58:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:A1:A5:FF:2F:73:A9:C2:71:8B:8C:81:EF:EB:3B:B9:EC:2C:6A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/59CAFE6CE5D811ECB8B5FD86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:23:96:4e:cd:03:e6:a7:c8:13:28:ae:5e:6c:c0:ea:64:62:
6d:0e:24:16:7e:b8:73:17:5c:f8:26:7f:6a:d5:f7:1d:cf:92:
27:f5:a0:00:44:eb:8a:4b:84:9b:44:b7:39:97:ef:87:f5:2d:
41:3f:17:35:31:7e:a2:19:40:53:d5:d0:70:60:f7:55:c0:34:
ab:31:20:19:4f:02:e6:45:c4:8f:90:c3:74:41:7f:67:80:ed:
72:cf:4f:44:31:85:f4:db:8b:fc:dc:2b:1a:b0:b1:62:44:a2:
d5:11:76:c1:83:cf:75:6f:aa:e9:0a:74:7e:14:5a:24:ab:24:
dc:4f:71:e8:0a:3c:2b:88:fb:aa:7d:38:27:cd:43:67:40:40:
25:e3:72:93:00:8d:e2:cb:27:fb:ad:ce:83:36:ea:68:79:d3:
d5:07:56:16:12:1a:47:39:f9:6d:1e:71:00:0f:37:53:00:4c:
a7:1f:83:2e:49:01:8b:f3:f9:b9:e0:95:ea:c7:ee:fa:b6:7f:
f3:8f:98:95:f3:19:fe:d7:04:9f:1e:ae:51:c9:bf:b2:cd:9e:
23:1e:7a:58:5b:e1:38:dd:7b:01:af:8f:60:54:80:a9:00:fb:
e4:15:bf:3c:52:4d:ec:53:b4:2c:a2:e3:e8:00:06:5a:a1:63:
fa:8a:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org