Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
File: 6EC6D1BA95F611EC904F99CC5A40D577.roa (raw, json)
Hash identifier: 0sYxRkQAE8l64yx3tlOvwt7OEvQ3adb2fp69g3Aflv4=
Subject key identifier: 49:2F:7F:C3:3A:7E:8C:3B:A5:7B:DD:BE:FF:44:DD:7D:5E:1C:36:92
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 05E3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
Signing time: Fri 25 Feb 2022 04:50:20 +0000
ROA not before: Fri 25 Feb 2022 04:50:16 +0000
ROA not after: Sat 25 Feb 2023 04:50:16 +0000
asID: 327790
IP address blocks: 161.123.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507 (0x5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 25 04:50:16 2022 GMT
Not After : Feb 25 04:50:16 2023 GMT
Subject: CN=6218600b-6bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:6c:a6:f5:03:6d:b2:57:96:a4:49:f4:d8:
ab:6f:d2:d8:1a:68:33:8d:a8:3b:fe:27:d8:d4:c6:
a5:ce:6f:37:02:2a:52:f5:be:d2:8e:dc:f6:c4:15:
90:ce:a7:0f:46:20:72:5d:ae:88:2b:32:29:c0:b5:
88:4a:a0:f5:d4:34:c8:ff:92:de:5e:ef:1c:ba:8c:
d1:e8:46:f6:b1:39:35:04:56:f2:56:e4:9e:79:0c:
d7:a0:75:f3:1e:20:45:28:49:e2:95:ec:57:36:c4:
32:18:5e:0b:64:54:ec:0a:79:b6:a0:a7:dc:ca:7c:
50:03:ec:32:8b:11:6f:02:5e:a4:2a:9e:e9:1a:78:
eb:91:6f:5d:c3:51:8d:e3:ee:c0:7b:70:f4:c9:f8:
9c:fc:d1:be:24:f7:2a:ef:5c:55:d7:96:61:5d:79:
32:0e:c8:df:e8:0c:67:6b:1f:d3:b7:81:7a:55:c9:
e4:ff:ad:1b:e2:33:d5:88:6c:8b:79:70:7f:68:92:
f9:28:26:17:13:eb:4b:e2:27:9a:57:a8:16:dc:cb:
8b:bb:b0:7a:78:60:d6:cb:dd:db:f2:94:ba:47:25:
ee:e9:01:8e:ac:01:43:cf:f9:4c:a7:64:8f:10:99:
ac:5a:74:a4:cf:4c:be:f5:9b:8c:a2:b5:1b:e3:95:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:7F:C3:3A:7E:8C:3B:A5:7B:DD:BE:FF:44:DD:7D:5E:1C:36:92
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6EC6D1BA95F611EC904F99CC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
76:eb:2e:ea:c3:83:67:eb:c1:c1:58:ec:a4:22:a4:ef:ff:7e:
7f:d6:b3:4a:36:4b:ad:63:35:48:93:74:07:d6:6a:7e:7c:dd:
f6:08:65:37:2d:ea:9e:87:bf:5c:45:b2:6d:55:82:11:10:95:
11:c0:cd:35:21:a4:11:71:70:d4:06:07:41:8b:36:46:0d:b2:
66:06:de:c2:b7:9e:28:5a:d9:01:c0:f8:eb:1b:54:fe:0d:bc:
aa:99:e7:78:b6:b3:da:38:f5:a7:78:44:39:c4:34:07:09:06:
cc:ff:3a:27:d9:4a:e5:6d:0f:7e:54:47:c4:53:0b:af:f2:98:
79:a2:c6:a0:f3:35:bc:26:6c:61:22:9f:5b:64:83:dd:8d:bc:
24:ab:e5:30:81:29:95:4d:28:01:d3:39:5e:c1:6d:a3:0d:88:
0a:c3:eb:a4:86:59:70:e8:52:24:22:30:0e:37:b9:87:13:59:
05:89:6a:39:b0:e7:29:57:73:77:78:ef:8b:22:08:61:43:3a:
c7:23:b9:35:b8:d2:f5:ca:18:67:c4:3f:03:de:16:81:73:fd:
b9:3e:3a:49:14:81:07:88:5f:ed:f9:ad:54:e8:f2:b2:b1:a4:
de:c8:26:d7:59:09:3c:10:8e:ae:14:6a:5d:31:29:67:7f:06:
11:c2:98:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org