Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/812FF3F8C30F11EDA5761C7CF1222468.roa
File: 812FF3F8C30F11EDA5761C7CF1222468.roa (raw, json)
Hash identifier: Sls0C5jXTrF/9Nmmfk9ToROgPKAFAsJnelPZwuy7zCU=
Subject key identifier: 55:C7:E3:54:7A:97:7E:39:E4:B8:57:8B:7E:41:11:0B:83:E6:E5:7A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09FF
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/812FF3F8C30F11EDA5761C7CF1222468.roa
Signing time: Wed 15 Mar 2023 08:58:08 +0000
ROA not before: Wed 15 Mar 2023 08:58:03 +0000
ROA not after: Fri 15 Mar 2024 08:58:03 +0000
asID: 61290
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 08:58:03 2023 GMT
Not After : Mar 15 08:58:03 2024 GMT
Subject: CN=641188a0-01a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:a9:40:52:8f:ed:b9:00:be:d8:ee:45:f5:
7b:2d:c4:3b:29:a5:cc:1b:b5:9a:f3:eb:f5:4d:bc:
ac:77:1b:31:1c:9e:47:d1:40:c8:b6:3d:7a:a4:be:
a2:04:d9:0a:8b:36:02:f1:81:ef:f1:38:c7:d0:62:
40:39:66:ae:24:b9:29:8f:b9:96:e8:49:a7:09:22:
c6:d2:16:fc:0c:2d:4e:7b:f2:50:50:b0:72:f0:9c:
27:b6:2a:01:93:a2:85:0c:4b:25:d8:79:83:28:34:
75:80:a6:41:41:76:d5:4d:5a:d0:e7:da:40:61:32:
55:0c:bc:65:1d:5d:3d:46:01:08:8f:15:c3:01:9e:
67:f3:f5:07:39:ee:86:d8:ed:a9:f5:54:f1:4d:ef:
30:c9:b2:65:25:e5:7d:71:7f:ce:01:d5:12:71:f9:
54:5a:dd:13:0a:42:02:28:44:19:fb:c3:1e:55:3b:
49:54:15:cc:c3:a6:b1:48:43:50:71:0f:47:c5:80:
d6:1b:99:c6:69:17:f4:03:da:7d:d0:c2:37:eb:f5:
72:29:bf:e6:7d:12:1e:44:3d:b7:ad:ef:24:f4:83:
7f:6c:bf:04:ef:8b:f0:2e:cf:d0:36:7f:a0:81:02:
55:10:81:23:d2:95:cb:1f:2e:f3:ac:5b:fd:a2:92:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:E3:54:7A:97:7E:39:E4:B8:57:8B:7E:41:11:0B:83:E6:E5:7A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/812FF3F8C30F11EDA5761C7CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a5:8e:f8:cb:2c:7c:b9:76:be:b0:a6:01:55:99:ca:77:34:
7f:8f:2f:06:d5:aa:20:7b:d6:61:0e:4c:57:b3:0a:ed:5a:78:
3f:31:b0:99:e6:81:3c:01:02:b3:f0:aa:b9:01:18:43:70:a5:
52:79:68:d8:7f:96:a6:9e:2f:a5:96:57:90:fa:63:96:0f:a6:
d7:38:1f:42:35:2d:42:ed:10:c5:ec:32:66:36:6a:aa:95:92:
4b:7f:95:cc:a6:6f:dc:bc:3e:f8:46:0b:d1:bf:e7:33:5e:35:
9f:68:77:e2:a3:a7:73:40:05:05:93:8b:a0:a3:ac:f5:15:a0:
49:4d:77:1b:a2:0e:d9:88:11:ff:0a:3c:12:16:55:36:fc:21:
c8:04:81:2d:32:e1:de:91:b3:48:df:6c:aa:c4:4d:df:e3:9a:
99:6e:5e:3b:ca:cf:0d:cd:b4:c7:9e:ea:c3:47:8c:9f:d9:ff:
a4:1b:61:7f:4e:79:5d:39:97:e3:90:d9:13:49:bf:08:3b:61:
f6:87:42:b4:8f:88:44:c8:5d:96:15:1b:5b:31:49:64:f0:3d:
16:1d:aa:b9:5a:ac:57:e0:78:54:1f:63:0d:48:9d:57:4c:11:
ed:93:ac:31:7b:77:de:1e:98:5e:6e:7d:ce:2c:fd:84:4a:1b:
06:5f:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org