Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/662D55E0D1F211ED9E7B3BBCF1222468.roa
File: 662D55E0D1F211ED9E7B3BBCF1222468.roa (raw, json)
Hash identifier: IsgVNYqQOqCKJeOU1VT5MgO3sc335qEBDDE2YnC4BDc=
Subject key identifier: F9:01:64:D6:E8:CD:D0:A6:3B:FB:A3:B9:A6:66:D6:C1:D6:DE:25:B2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A65
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/662D55E0D1F211ED9E7B3BBCF1222468.roa
Signing time: Mon 03 Apr 2023 07:37:36 +0000
ROA not before: Mon 03 Apr 2023 07:37:30 +0000
ROA not after: Wed 03 Apr 2024 07:37:30 +0000
asID: 207990
IP address blocks: 161.123.98.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2661 (0xa65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 3 07:37:30 2023 GMT
Not After : Apr 3 07:37:30 2024 GMT
Subject: CN=642a8240-6ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:e6:5e:6d:35:53:9e:72:82:d7:3a:60:bc:
7d:a0:31:71:53:d5:57:59:60:8f:2f:d2:7f:e7:68:
85:28:da:04:e7:4e:88:4a:1a:e7:39:55:7a:f9:d1:
e0:f1:50:99:8d:09:e4:d2:26:9a:93:b7:4d:c4:9e:
04:87:4d:1c:35:4d:26:c8:70:40:e6:8b:f2:60:0e:
c6:1b:9b:32:0b:37:e2:da:f5:ee:eb:23:6f:79:fb:
01:bc:b6:c2:55:f0:89:fc:c8:33:e0:02:42:cd:7a:
0b:e2:fd:60:79:2c:f6:0b:26:d5:ed:b3:80:39:b2:
48:fa:42:04:df:c4:af:15:c8:08:41:f9:2f:c2:37:
7f:0b:26:44:83:fd:0d:6f:c1:cd:64:33:04:2c:dc:
f1:91:c1:dc:f4:08:f5:db:01:f2:c3:ca:c1:8f:c8:
9b:aa:0c:99:f7:4a:3a:73:6e:d2:d3:23:ca:9e:33:
d5:27:de:45:b2:ba:4c:b6:9b:58:2e:56:2b:f7:8e:
48:b8:ff:fd:5f:3a:d2:47:d7:cc:77:5d:63:27:c0:
3c:bd:38:98:85:41:18:58:93:63:8b:e2:8e:15:87:
c6:88:d1:5a:45:d6:61:9c:e3:4b:2f:bb:54:d1:e9:
86:fc:e3:25:e6:5d:cd:2a:98:7b:72:e9:7d:2f:a1:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:64:D6:E8:CD:D0:A6:3B:FB:A3:B9:A6:66:D6:C1:D6:DE:25:B2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/662D55E0D1F211ED9E7B3BBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.98.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:29:be:b9:d0:af:c8:75:6e:1f:ef:6c:d5:95:71:a4:72:e2:
d8:24:fa:9c:f3:6e:ba:d1:2e:d5:68:46:26:fd:92:ff:03:59:
1f:03:97:b6:ba:fc:d6:79:ba:12:1f:89:80:78:08:66:40:c5:
fd:e9:19:37:7f:bf:eb:16:9d:0c:ee:3c:21:13:b6:54:79:2a:
0d:f3:21:d9:67:fe:44:58:69:74:3a:9c:d2:66:2a:32:90:c0:
da:b9:e1:92:1c:ab:44:23:3e:4d:08:63:9e:23:0b:6c:fa:d3:
1c:30:e4:ee:e8:65:09:25:3f:24:20:41:f0:fa:18:74:95:b7:
47:47:b5:df:a0:01:46:93:74:c9:70:6e:1e:96:6e:1c:b8:db:
1a:ef:e6:7d:4e:4d:c0:03:04:e2:bf:41:66:a7:68:63:61:a7:
3a:77:9b:f0:a2:d0:4d:71:55:03:f2:a5:3c:19:47:c7:1d:dc:
ab:bd:09:bc:09:f8:5c:68:04:5a:ac:b2:fd:80:ac:a1:b1:11:
ac:50:64:b1:16:c4:56:f4:7f:d1:8a:94:ae:65:cd:1b:de:5a:
5b:4d:94:22:fd:16:1b:78:42:70:9c:e9:d3:24:45:3e:49:fa:
2b:1d:13:72:87:4d:bc:a3:d8:f8:37:af:6a:be:e3:eb:2e:b8:
0b:c6:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org