Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6AB4D5F8C30F11EDBEEAACFAF1222468.roa
File: 6AB4D5F8C30F11EDBEEAACFAF1222468.roa (raw, json)
Hash identifier: z79hXVqYVs0t+J/se3unxRhT93FKm4oCnnQL+zZLt4U=
Subject key identifier: 99:B8:31:74:63:3C:99:2B:7B:22:E3:BE:0F:5E:56:1E:75:11:28:87
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09FD
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6AB4D5F8C30F11EDBEEAACFAF1222468.roa
Signing time: Wed 15 Mar 2023 08:57:30 +0000
ROA not before: Wed 15 Mar 2023 08:57:26 +0000
ROA not after: Fri 15 Mar 2024 08:57:26 +0000
asID: 61290
IP address blocks: 161.123.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2557 (0x9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 08:57:26 2023 GMT
Not After : Mar 15 08:57:26 2024 GMT
Subject: CN=6411887a-7daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:71:9e:48:b4:1f:44:46:21:64:24:2c:7c:
c9:2d:b9:cf:34:b6:02:ff:9a:cf:1a:33:1e:ce:52:
18:bf:ac:1e:6d:b9:6f:d6:58:23:7c:56:2a:33:39:
d2:06:1b:c0:2b:e9:be:78:a8:3f:6d:9b:ef:f2:05:
56:0c:f6:7b:47:15:27:0e:b3:e6:94:b0:de:3f:df:
93:89:c0:7b:7d:e2:39:7d:57:6c:a6:0e:df:12:24:
16:be:82:95:de:ae:da:5a:a2:3c:fa:2e:05:ae:ab:
9f:6c:9d:4c:53:8d:f3:7b:9e:1c:35:76:18:9b:8b:
a4:e9:d3:db:3d:84:c4:21:5e:e8:ec:4d:2e:09:1f:
32:a8:10:30:38:08:53:8c:07:0d:52:b8:d8:79:c2:
fa:de:f8:8f:35:02:25:a2:78:2e:fe:d1:1d:93:61:
de:4e:1e:7c:c4:11:4f:36:8e:16:be:4b:ae:1b:22:
ba:cf:c3:06:fe:0e:9f:c4:0c:41:8d:e5:2c:eb:73:
59:f0:73:a9:47:70:27:38:38:97:12:f8:e7:d1:a0:
c7:33:21:99:be:c8:b6:6c:6c:b2:ba:59:fc:73:27:
4c:86:47:22:c4:ef:46:bd:ad:b1:35:83:12:05:10:
82:52:fa:f4:93:10:a0:0e:b6:56:39:63:1d:5c:43:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:31:74:63:3C:99:2B:7B:22:E3:BE:0F:5E:56:1E:75:11:28:87
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6AB4D5F8C30F11EDBEEAACFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3c:3c:d3:6a:0b:94:13:5b:93:5a:de:25:1e:4a:44:b9:de:
c2:fa:31:d7:71:ae:a1:01:f7:2a:e9:f1:d9:c3:22:cc:70:5b:
45:44:8a:d1:81:c7:40:c2:0d:03:dd:da:75:ab:37:37:15:c3:
18:5c:9b:51:51:22:4b:cc:45:f6:f0:f7:17:51:7e:a0:e7:f0:
7d:21:9e:03:db:ff:a1:72:b0:d9:ee:df:73:c1:e8:29:c7:77:
80:73:b9:40:98:07:09:9f:74:95:7a:b9:f4:42:17:c3:4e:7f:
78:21:12:bb:91:93:24:f9:d8:a0:95:10:ac:3a:5c:4c:35:32:
cb:25:c4:8f:9d:49:cf:dc:22:d3:8c:8f:5d:b1:cd:2b:1d:46:
bb:7f:18:e8:b9:d5:0a:a5:b0:7a:63:7a:5b:7a:44:ad:e9:6e:
97:40:50:03:a4:3f:0c:57:82:b2:c8:cd:35:02:3c:5a:77:a7:
70:72:83:8c:20:d8:0b:cf:79:52:69:03:c0:11:4e:36:9f:db:
83:35:2a:f5:4e:5f:5b:94:47:c4:76:ac:ff:7e:f9:93:2d:18:
44:ec:6c:ff:e1:fd:32:de:ee:d5:77:42:54:a1:f3:d3:46:cc:
ae:67:82:c6:49:f9:8a:b0:dc:05:92:06:f7:47:39:a5:6a:a1:
8b:6d:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org