Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD5FDB8C19F11ED9B3E98A2F1222468.roa
File: 7DD5FDB8C19F11ED9B3E98A2F1222468.roa (raw, json)
Hash identifier: o5UYP5refyxjRijgalgdB2TBtOtifJ6auxawn9ctXps=
Subject key identifier: 3B:D7:D5:5D:9E:13:CD:B8:0F:7E:B3:F0:DA:C4:F9:C7:EA:73:7C:CB
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09F5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD5FDB8C19F11ED9B3E98A2F1222468.roa
Signing time: Mon 13 Mar 2023 13:03:47 +0000
ROA not before: Mon 13 Mar 2023 13:03:44 +0000
ROA not after: Sat 13 Apr 2024 13:03:44 +0000
asID: 205431
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549 (0x9f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 13 13:03:44 2023 GMT
Not After : Apr 13 13:03:44 2024 GMT
Subject: CN=640f1f33-6f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:87:13:5b:f5:07:4d:5c:28:42:a6:a4:b4:
41:d1:ee:d4:d0:19:f1:fe:9b:ac:28:f0:f1:c5:9e:
4d:5b:89:32:3a:92:e9:3f:f7:c3:97:98:2b:2b:c0:
23:3a:a4:1c:44:b5:e7:40:d2:2e:ae:dd:c4:88:df:
ec:c2:3b:a9:0d:ac:c8:08:e7:31:af:5e:16:36:f7:
9f:81:a8:68:3b:bc:56:2f:cd:45:dc:eb:55:16:2e:
3a:2b:18:63:25:19:81:c2:7f:34:6d:a5:69:ca:18:
28:17:38:1d:09:25:44:71:2d:ea:3d:bc:a4:52:b0:
cf:a1:dc:e3:da:ec:85:9e:f6:45:98:de:13:05:8c:
0a:35:81:99:5d:6e:be:a2:67:3b:c0:8c:41:d7:62:
0b:70:ad:ea:6c:db:17:00:0f:94:7f:72:3f:fb:af:
6d:31:62:d4:51:35:b1:ca:8c:a7:4a:c0:76:99:89:
0e:58:64:92:ec:2b:93:d2:55:e3:b3:ae:d9:03:8c:
b8:2c:53:11:e8:93:e2:34:63:a2:18:52:14:99:4c:
b2:cb:c8:dc:e1:89:2a:e2:bf:47:49:13:fe:98:f1:
e9:e9:a4:99:21:51:5e:14:67:80:7f:df:c4:fc:90:
63:55:5c:9e:50:7d:97:86:3f:c8:b1:fb:71:d7:56:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:D5:5D:9E:13:CD:B8:0F:7E:B3:F0:DA:C4:F9:C7:EA:73:7C:CB
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7DD5FDB8C19F11ED9B3E98A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:40:31:08:52:51:a8:82:03:0a:6e:1e:d7:bd:45:a7:be:1a:
e4:60:ea:f6:44:94:87:26:c5:7a:3a:13:d7:f0:9a:a1:d9:6c:
7e:69:ad:ca:1b:34:aa:91:90:3d:ef:76:3c:47:3c:e9:72:ec:
f8:5b:b4:37:29:34:cb:4c:b5:0b:9d:2f:5f:f6:d4:44:81:2f:
0b:b8:56:59:ef:da:76:30:b6:14:d5:31:db:24:b2:e6:31:08:
1f:43:b8:cd:7c:05:97:ab:45:d8:78:7f:c0:ae:42:08:93:1c:
7a:cc:9f:a4:5b:b2:f7:b0:da:fd:b7:3e:bf:5b:a5:5b:80:25:
11:18:fe:fe:06:31:4e:fc:07:f5:25:e9:38:4f:93:2e:c0:01:
e7:7b:c2:ce:44:3b:e3:08:d1:2d:fa:c4:3b:ed:1c:38:52:67:
75:86:bd:30:a8:63:b9:46:f3:41:a2:5e:29:83:43:10:b3:16:
be:a9:17:d1:05:ca:8b:82:b7:31:c8:4b:e0:5d:01:50:7f:57:
ef:6f:5b:dc:ac:e6:9d:95:b7:a8:62:13:2b:34:c4:e2:89:67:
b0:72:39:88:39:bd:3d:bd:e8:b1:24:fb:46:f5:a5:2a:c0:1c:
8c:13:d1:f1:2e:cc:98:04:a5:4e:7c:79:0a:a0:80:dd:26:cd:
b2:8b:46:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org