Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C74A91AF0E811ED886DF8884AD9E6FC.roa
File: 7C74A91AF0E811ED886DF8884AD9E6FC.roa (raw, json)
Hash identifier: X446nBsvOZgo9wpst21z/+E5xodIYA3koQEGSq32ayo=
Subject key identifier: 40:89:35:18:74:D9:CA:7F:5C:26:F8:D9:7A:0E:05:B6:36:2C:E4:D7
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0ABC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C74A91AF0E811ED886DF8884AD9E6FC.roa
Signing time: Fri 12 May 2023 17:14:43 +0000
ROA not before: Fri 12 May 2023 17:14:39 +0000
ROA not after: Sun 12 May 2024 17:14:39 +0000
asID: 399471
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 12 17:14:39 2023 GMT
Not After : May 12 17:14:39 2024 GMT
Subject: CN=645e7403-2815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:37:e7:44:24:8e:04:a5:7a:6b:15:11:cb:
49:b6:f6:b8:3f:87:60:dc:bb:95:b3:ab:a5:55:85:
e0:e2:cc:30:7c:7e:82:37:4b:a4:5e:b6:b0:13:d3:
e8:d8:be:38:2d:54:3f:3e:4f:b1:9d:5d:a7:80:8f:
61:7e:91:80:03:83:13:17:74:13:90:3d:40:27:55:
dc:1c:0b:e9:16:0f:aa:b5:ac:62:26:e0:44:c0:e4:
f9:ed:ca:86:ef:4d:cf:1f:e5:de:b4:a8:6d:0e:3d:
c2:90:e8:c2:86:e5:37:c2:ff:b0:19:04:55:df:a8:
4f:cb:95:be:50:8a:9c:9d:e3:30:39:e0:34:e2:af:
af:f2:5d:ad:b8:e0:92:e4:0c:ce:1c:49:15:b9:15:
17:7d:20:3b:16:ea:9e:03:35:55:7a:ca:8e:31:9e:
56:88:94:98:1b:df:ad:81:80:da:05:bf:fd:31:32:
81:af:34:fa:52:90:6e:c6:fb:7e:1e:9e:52:e3:13:
a5:c2:a2:da:15:27:99:d5:42:03:40:d1:27:eb:5e:
a2:6d:6f:ca:d2:93:3b:e8:03:38:1d:44:8e:f3:2d:
4a:d6:59:6e:51:70:fa:4f:e4:dd:5a:87:95:ed:23:
50:f7:45:09:35:8a:0d:fe:ef:35:8c:58:eb:c8:5c:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:35:18:74:D9:CA:7F:5C:26:F8:D9:7A:0E:05:B6:36:2C:E4:D7
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7C74A91AF0E811ED886DF8884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
66:88:9b:41:af:3c:d2:7e:37:bd:8b:64:13:80:eb:60:24:7a:
83:1e:5b:4b:dd:cf:c7:b2:9a:49:e1:fe:dd:e5:98:83:e7:16:
96:63:45:18:a5:c3:4c:b5:ed:79:57:05:8a:06:49:65:68:e3:
9b:ee:3c:af:59:cd:4a:87:d2:7e:81:1e:81:ce:fe:b2:d7:e6:
24:e7:09:db:43:8d:39:f3:a7:f5:af:6a:42:4a:b7:01:91:db:
94:05:97:3d:d2:0b:6a:2b:79:81:92:b7:56:f5:c2:64:b8:e6:
ab:d6:04:7a:c4:8d:ae:5e:6f:e4:52:49:5e:93:24:76:1b:48:
8c:ac:f9:e7:e9:65:44:0c:4a:c5:b8:b2:37:6e:1a:70:cd:27:
3c:51:c6:14:f0:96:5c:e5:be:32:ef:e7:82:61:96:f6:2f:91:
14:e6:68:b9:82:ee:2b:e4:df:46:a7:a5:57:21:a0:bb:f2:bb:
f4:c2:44:d3:d8:a0:ee:a8:9e:d2:e7:e6:31:bf:fa:d3:06:3b:
6e:9f:32:63:8c:7a:6b:43:82:82:8e:c7:47:50:0d:3a:50:7f:
88:32:8c:ae:df:f4:ec:0f:5c:c2:c3:be:fb:a3:70:f0:a3:e0:
ad:bc:88:9a:af:cb:35:d8:45:6e:75:43:de:62:25:b4:cd:89:
40:f5:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org