Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9654D84E5AEF11EDA090CAD9F1222468.roa
File: 9654D84E5AEF11EDA090CAD9F1222468.roa (raw, json)
Hash identifier: JUm5rinLcU3B8KF2KHNBEZzAjcJ+CLfYRAMS0rnKp+w=
Subject key identifier: 92:A4:61:C1:8C:8A:A0:3E:F7:0B:F1:D1:BE:FC:C7:8F:B7:3C:30:55
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 08DB
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9654D84E5AEF11EDA090CAD9F1222468.roa
Signing time: Wed 02 Nov 2022 20:47:39 +0000
ROA not before: Wed 02 Nov 2022 20:47:35 +0000
ROA not after: Thu 02 Nov 2023 20:47:35 +0000
asID: 203999
IP address blocks: 161.123.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 20:47:35 2022 GMT
Not After : Nov 2 20:47:35 2023 GMT
Subject: CN=6362d76a-4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:8a:9d:89:b0:e2:54:81:d4:e9:65:e3:a4:
a5:49:bc:45:1d:64:bc:d4:dd:51:2e:c3:9a:04:66:
cb:14:6b:58:d9:9e:e1:79:f4:49:62:3d:21:01:16:
68:7e:8a:7a:9d:2f:9b:a2:27:a7:26:53:0b:37:a4:
cb:47:38:d6:c4:fe:20:63:a8:96:6d:79:e2:fe:77:
ea:ab:a2:24:1f:6a:1e:02:04:f4:0c:67:64:22:8d:
d6:43:3d:72:5b:75:e9:e9:b1:44:5f:ad:cb:a0:8a:
76:d4:e8:c4:dc:68:78:a4:54:7d:a7:80:bd:62:5f:
18:c3:66:d8:28:df:51:05:68:da:c8:08:09:49:e7:
4e:79:74:99:14:8c:39:e6:85:26:c3:52:45:be:99:
78:0a:5b:94:ad:30:05:5a:91:3d:8f:a7:e9:28:93:
87:c8:20:d1:77:43:d6:42:96:2b:a0:d9:79:c3:b1:
88:55:c9:44:6a:fa:44:86:d1:e8:25:d7:68:f2:5d:
57:af:d0:2b:a5:1b:b4:03:cc:2d:20:e3:b7:fb:e4:
05:7f:b2:a4:45:40:15:2c:d5:1f:cf:c0:17:01:65:
ed:2a:fa:dc:39:e8:33:75:f8:7e:08:4a:d3:8d:e7:
d9:b9:e8:65:95:13:e0:97:6c:52:13:3c:bd:96:21:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A4:61:C1:8C:8A:A0:3E:F7:0B:F1:D1:BE:FC:C7:8F:B7:3C:30:55
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9654D84E5AEF11EDA090CAD9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c0:97:da:2c:b1:cd:54:48:2c:e2:3f:22:a5:b4:81:83:15:
e1:cf:43:11:09:53:7d:2c:47:6e:4e:9a:c2:5b:e8:c1:c6:ad:
2c:b4:fa:9f:3f:7a:02:94:e7:bf:54:af:c8:dd:e1:dd:e2:32:
b4:9a:18:ae:80:ed:0e:a1:a6:10:2c:a7:f8:a6:c5:4d:89:6d:
89:0b:32:f2:39:45:90:98:4e:0f:2c:bc:b9:b5:95:5e:d0:1c:
18:73:e4:98:ca:0f:8a:ec:ec:70:5c:92:36:fc:9f:84:c3:d7:
08:53:53:3d:bc:66:cc:19:6a:70:72:ed:d2:b5:30:5c:bd:df:
a9:3b:e4:e1:d6:04:3f:33:58:b1:df:83:cd:29:e3:a6:22:12:
43:45:f0:6a:2b:fd:70:fb:23:de:23:5c:d8:a5:a3:46:2e:b0:
f9:07:62:98:46:c3:e8:ee:a2:5b:21:3d:ab:f1:c6:14:eb:85:
c4:c0:2b:35:3c:fd:eb:5d:ef:ce:58:53:66:6e:f7:56:95:1b:
cc:bc:24:5e:4e:08:1a:fd:39:82:f9:b4:9f:4e:94:4a:41:ff:
50:cf:7d:23:d5:6b:7d:3a:95:45:d6:28:ae:b5:8e:5c:a0:63:
e2:64:8b:8c:8a:4c:43:83:27:ed:6d:8c:3c:40:d9:e2:e2:b8:
51:77:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org