Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/62CBEC0C1FE711EE86183A594AD9E6FC.roa
File: 62CBEC0C1FE711EE86183A594AD9E6FC.roa (raw, json)
Hash identifier: gI6otOxBKpAO4RVpV17q4eQb5lcnruBDWw8Qpy9NlSc=
Subject key identifier: A0:7C:24:8F:E1:1F:9A:13:C8:C4:62:38:E1:04:50:9C:68:BB:9C:EE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B5B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/62CBEC0C1FE711EE86183A594AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:35:15 +0000
ROA not before: Tue 11 Jul 2023 12:35:11 +0000
ROA not after: Thu 11 Jul 2024 12:35:11 +0000
asID: 133499
IP address blocks: 161.123.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 11 12:35:11 2023 GMT
Not After : Jul 11 12:35:11 2024 GMT
Subject: CN=64ad4c83-9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:51:e8:0d:29:c5:e1:41:df:a7:d7:50:7e:
60:e6:48:a3:81:0b:a2:38:58:17:0d:6c:45:09:8f:
1d:b9:4c:67:5e:dd:55:c0:5a:24:ee:ef:d2:0f:f4:
47:35:19:58:dc:b4:8c:0b:4b:9b:0f:46:b7:65:47:
4c:94:fc:1c:de:73:10:ae:70:b8:d8:c1:e3:b4:c8:
e7:e1:65:e4:6c:23:be:c2:be:0e:4e:dc:e7:0d:9d:
8d:d7:4e:3e:14:24:cd:c0:73:72:10:2c:be:5c:bf:
24:31:e6:30:a5:c0:ca:eb:58:85:df:5f:6a:a6:4f:
69:e2:bf:fb:b0:ad:46:72:8d:4a:4a:b7:07:85:39:
24:21:e6:30:8a:6a:98:3f:51:bc:24:c1:2e:e1:f7:
e0:96:79:72:13:ba:6c:67:4e:44:bf:12:d1:51:72:
58:08:26:54:d6:87:75:df:ed:13:50:f8:20:5f:5d:
6b:a1:58:da:be:ba:2f:7e:d1:56:64:cb:07:07:8e:
ef:5a:2a:83:20:0d:c9:d9:3a:3c:a6:6d:1b:f5:8b:
f8:b1:8a:18:5c:e9:fc:03:35:1f:8f:20:61:35:41:
49:74:72:92:22:ef:a8:00:4c:25:37:f4:fc:c6:d9:
99:80:52:aa:9f:46:00:42:d5:75:76:ad:72:98:ca:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:24:8F:E1:1F:9A:13:C8:C4:62:38:E1:04:50:9C:68:BB:9C:EE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/62CBEC0C1FE711EE86183A594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fb:26:6a:f4:62:24:f4:39:44:f2:26:cf:43:6e:94:a8:e7:
c1:c3:df:28:0b:44:3f:67:47:7e:d7:8a:fe:40:b0:f3:4b:5e:
45:72:30:7a:fe:11:f8:8e:3d:44:c4:5f:17:36:7d:4a:0a:2d:
ab:c2:2e:4d:7a:83:57:d9:0e:7d:0d:2f:d6:5f:03:99:12:2e:
48:16:ce:dd:bd:0f:fb:31:bb:a7:db:23:f2:7c:33:ab:0c:81:
2e:ed:71:85:20:ea:18:05:f6:e7:83:93:29:1b:52:13:e4:26:
25:91:56:3b:8b:70:55:61:54:f2:de:3b:e8:0d:e6:f5:80:c0:
5c:41:1a:0f:18:6c:01:57:d2:55:0e:2d:af:36:06:77:6e:09:
b8:fb:4c:a7:ac:0a:c9:8e:c1:d5:b0:18:36:2c:f7:39:2c:4e:
b3:6e:55:c0:79:cb:0d:fa:42:5c:45:f1:82:84:d0:66:6e:6e:
45:2d:f8:b6:0e:ee:b1:f7:2c:db:10:30:2d:9c:d1:38:af:fb:
53:71:36:d7:5b:24:24:dc:3d:7a:a2:86:bd:31:7d:d3:68:16:
26:b1:34:f8:d6:a0:eb:55:b7:52:c3:d5:e3:68:34:62:cf:2a:
e7:e1:d8:82:67:6b:c0:85:a3:78:47:19:1e:3d:a8:35:ec:3c:
53:ec:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 03:32:56 2024 by rpki-client on console-ams.rpki-client.org