Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6C6D55A4F16011EC95B5E1ADF1222468.roa
File: 6C6D55A4F16011EC95B5E1ADF1222468.roa (raw, json)
Hash identifier: wcyv/OM4Qli0xFRaDjBki+FbYqOdiE4/L3t5XHodOek=
Subject key identifier: 7D:F4:DE:C7:B9:A4:76:28:C9:81:E5:59:AC:43:B0:16:FB:C1:AD:5D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0763
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6C6D55A4F16011EC95B5E1ADF1222468.roa
Signing time: Tue 21 Jun 2022 12:48:18 +0000
ROA not before: Tue 21 Jun 2022 12:48:15 +0000
ROA not after: Wed 21 Jun 2023 12:48:15 +0000
asID: 203999
IP address blocks: 161.123.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 21 12:48:15 2022 GMT
Not After : Jun 21 12:48:15 2023 GMT
Subject: CN=62b1be12-ff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:13:d1:5c:5f:50:f8:97:31:49:8f:ad:b5:
ad:0a:2f:51:31:5a:bd:dc:11:01:23:b1:54:13:75:
30:14:15:75:0a:c6:9c:1e:ce:47:3d:34:fd:ea:68:
b1:96:09:84:59:b3:2b:16:96:51:54:ad:b6:3e:64:
52:c6:fa:d2:6e:dc:e2:2d:19:56:6b:0c:b1:96:79:
94:0e:6e:1b:36:48:da:2e:98:68:1b:74:fe:8c:36:
c3:cb:c4:ec:37:32:fc:a5:8f:4b:e2:e0:87:12:28:
2a:5f:5f:c6:30:ae:8d:d9:3a:f8:10:ad:69:b3:a7:
c5:c4:e1:37:ed:56:8d:dc:d4:d1:bc:aa:1a:c1:48:
05:a8:32:5d:ef:38:31:84:31:ad:1d:b6:ee:b8:b4:
64:de:e9:ac:a8:32:b9:3c:91:78:99:ba:2f:ca:4b:
27:bd:31:ab:9a:38:6e:c1:7f:a3:23:04:8e:be:16:
92:8c:23:38:27:04:01:b1:45:e6:64:ad:f9:09:e1:
34:ba:6c:c3:89:0e:f9:6f:b7:11:b6:10:1f:26:6d:
e0:7d:19:18:da:08:ef:2e:c8:de:dc:95:e7:f8:e0:
b6:e3:1e:e6:1c:bc:b4:fa:b7:21:57:84:fd:bf:fc:
c5:91:f8:46:b8:27:96:f6:c7:6f:76:8f:0e:5d:33:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:DE:C7:B9:A4:76:28:C9:81:E5:59:AC:43:B0:16:FB:C1:AD:5D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6C6D55A4F16011EC95B5E1ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.16.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d5:c0:80:2f:7b:31:79:2e:33:65:eb:fd:3a:75:95:ea:68:
fb:28:4c:5c:12:ef:9b:bc:3b:9a:b5:ef:3c:3f:01:48:93:c5:
88:43:37:0e:26:f4:85:ac:e9:36:27:74:7a:87:db:ce:53:d8:
18:4a:88:d6:98:97:d8:c4:87:15:91:03:ff:20:9a:ed:e5:f0:
10:f4:92:ca:e5:9a:b5:1c:6a:50:28:06:66:4e:65:73:13:c5:
c8:6a:d6:5b:1b:c2:98:a7:42:53:ca:cd:61:bd:ee:1f:d4:a1:
71:76:5a:f0:a8:71:36:46:cd:c4:30:e5:bc:25:72:e6:3b:c7:
c4:b1:e2:2b:26:37:21:25:57:25:09:d8:93:c5:1e:ce:bc:68:
59:d2:57:e3:99:da:4b:e0:7a:aa:dc:bf:64:ab:72:23:94:09:
61:d9:ef:fc:2d:b6:ea:33:98:db:67:66:5d:bd:cd:5e:53:89:
df:3a:9d:2c:1b:c0:47:ad:17:48:92:a5:81:de:62:55:55:a6:
09:ea:13:01:d0:02:10:f2:89:f1:5f:8b:cf:43:b4:77:9c:c2:
06:27:c9:d0:01:6d:a2:b9:a7:e0:40:e5:59:3e:98:a0:22:9d:
2c:00:ba:ea:35:16:7e:ac:5c:be:55:39:eb:8b:78:06:0d:18:
f1:0e:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org