Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6BC0F6CAEB3C11ED9ACD28534AD9E6FC.roa
File: 6BC0F6CAEB3C11ED9ACD28534AD9E6FC.roa (raw, json)
Hash identifier: NlN6vSkCdfk+z4N29Uj9lrCfVNPwu2OOV5KpwAHrw+M=
Subject key identifier: 04:B7:8D:3F:65:54:4A:EE:96:D3:61:CB:CC:C1:E6:6C:BD:A2:C6:61
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AA4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6BC0F6CAEB3C11ED9ACD28534AD9E6FC.roa
Signing time: Fri 05 May 2023 12:00:26 +0000
ROA not before: Fri 05 May 2023 12:00:22 +0000
ROA not after: Sun 05 May 2024 12:00:22 +0000
asID: 205431
IP address blocks: 161.123.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 12:00:22 2023 GMT
Not After : May 5 12:00:22 2024 GMT
Subject: CN=6454efda-9dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:c3:87:f8:f0:8a:ff:d7:8c:93:0a:c2:42:
22:e7:c0:2b:74:d2:0b:ee:3f:36:f2:69:50:e7:c3:
c6:19:17:61:76:e6:8c:21:ed:df:72:0f:15:8e:4e:
55:1d:b4:ba:11:e4:fc:56:67:fd:f0:03:f8:ee:7e:
c5:b8:04:34:3c:cf:be:d3:bb:5c:9e:b7:5c:46:41:
5f:91:c8:1d:89:c6:a2:bc:f4:7a:bf:d6:f5:6d:49:
87:50:cd:33:93:91:5c:0d:b0:4e:f6:bd:67:e3:d9:
d0:d2:a2:bf:15:43:87:ad:5a:12:ee:64:5e:a3:92:
9e:8b:ae:5a:ad:01:3a:a2:63:f5:70:ca:3a:fe:c3:
16:90:64:62:45:b8:94:5b:06:42:05:da:fe:95:97:
c6:d9:17:53:81:11:e0:a2:69:ef:18:70:d2:f0:d9:
03:f2:67:5f:50:e4:1a:35:7b:44:91:de:0f:a5:af:
0e:8e:8f:e6:bc:cc:5d:7d:1a:7d:6d:80:dc:7e:da:
b4:de:39:fe:a3:86:b8:0e:21:ce:3d:47:ba:52:01:
9e:23:c5:e8:f8:26:6b:8a:dc:3a:9d:63:e7:4c:8e:
98:72:80:58:57:d0:a3:23:7f:da:45:20:e8:a8:6b:
6e:0e:65:fe:4e:b5:ae:13:03:81:89:8d:52:98:31:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:8D:3F:65:54:4A:EE:96:D3:61:CB:CC:C1:E6:6C:BD:A2:C6:61
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6BC0F6CAEB3C11ED9ACD28534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e4:69:6e:91:37:cc:8a:23:53:96:8a:10:24:0a:69:64:fc:
bb:c1:f1:dd:c3:e1:b8:5c:00:05:e4:ee:f0:1e:6a:13:96:39:
be:d7:3d:5e:f0:0b:ee:a5:17:f4:e1:47:9c:b0:51:98:bf:62:
02:74:d1:e3:ff:0c:a8:87:ac:4e:54:b5:1b:92:28:78:6c:19:
9f:9d:a4:60:3d:6f:5c:37:af:3a:65:84:9b:04:d9:4a:8b:fe:
38:35:3c:1b:0c:ec:5e:90:73:76:b3:5b:5e:df:ec:42:f3:12:
65:47:d4:44:4f:4d:5d:97:b2:0c:48:2e:a8:87:19:c8:7c:e5:
b7:ce:c0:e7:de:67:b9:2c:fc:cb:f9:0b:02:d9:aa:43:66:fe:
53:e8:f6:ab:07:a2:77:b8:c8:3a:38:b3:7c:5e:72:13:d5:a9:
2c:56:8c:21:ae:cf:2f:b1:77:23:8c:f3:6a:c4:c1:02:bb:33:
79:b5:5a:f3:6c:1a:71:0b:80:f9:34:cd:1c:b0:9b:95:d4:53:
41:36:df:f1:87:9d:9c:6d:2e:9d:e3:90:66:f7:ab:74:18:b7:
47:86:a0:d0:ce:9a:8c:61:cf:e0:83:97:de:88:ca:e0:3a:b6:
68:b1:35:e8:a3:fc:d9:84:0b:82:4b:63:f3:cd:8b:16:36:f4:
c3:25:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org