Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF6D71A7DFC11EC9AE7B2DA5A40D577.roa
File: 9AF6D71A7DFC11EC9AE7B2DA5A40D577.roa (raw, json)
Hash identifier: hr6N5rPELoP8ctURuVc6eox9hIBuzJvIBdQjquksiA0=
Subject key identifier: 81:3F:A7:49:88:06:B8:56:5D:2F:2D:22:E9:4F:F7:97:8B:4E:E3:C3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0546
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF6D71A7DFC11EC9AE7B2DA5A40D577.roa
Signing time: Tue 25 Jan 2022 16:34:03 +0000
ROA not before: Tue 25 Jan 2022 16:33:59 +0000
ROA not after: Wed 25 Jan 2023 16:33:59 +0000
asID: 327790
IP address blocks: 161.123.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:33:59 2022 GMT
Not After : Jan 25 16:33:59 2023 GMT
Subject: CN=61f0267b-5ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:c9:b5:cd:5d:6c:b9:d6:4f:df:3f:00:ad:
d3:40:53:16:42:ed:36:60:a1:49:81:6e:16:2f:aa:
c5:6b:49:d2:0a:85:d3:04:9e:40:6b:28:30:92:b8:
59:bd:46:b0:ca:51:a7:90:50:c2:15:15:9a:c2:1f:
dd:a8:47:1d:39:0e:2d:80:a8:98:87:f8:92:0f:82:
a2:dd:2d:98:4f:1c:cf:e6:90:26:ce:39:a0:28:7b:
01:2d:dd:e0:81:a2:7e:de:60:a9:d7:e3:24:c8:d6:
68:6d:ea:20:a7:d2:7a:32:1d:7d:85:04:f9:e1:55:
ee:fc:04:d5:da:46:de:a7:dd:da:d2:81:c4:84:cd:
8e:9d:d3:12:32:61:06:22:ed:11:0f:2e:07:3b:ea:
ae:c5:ca:a0:70:bd:b3:1b:c1:2a:9e:fb:56:57:7e:
6d:d4:70:4f:f4:fe:85:8b:91:52:59:8a:c9:2b:e4:
e1:0d:bd:4e:f6:7e:e3:59:32:ac:9a:b9:97:d0:86:
da:6d:9f:11:b4:d2:1d:26:fa:0c:01:39:fc:c2:27:
c7:0c:f2:77:59:1b:0d:fa:10:0d:0d:e8:97:ab:fd:
92:ac:0b:32:ad:6d:fa:a2:23:0d:58:04:d6:78:0b:
e7:2e:91:5d:ed:bc:5a:4e:b6:b8:b3:56:5b:f8:74:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3F:A7:49:88:06:B8:56:5D:2F:2D:22:E9:4F:F7:97:8B:4E:E3:C3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9AF6D71A7DFC11EC9AE7B2DA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.246.0/23
Signature Algorithm: sha256WithRSAEncryption
96:c0:30:b8:ed:fd:83:85:fa:46:67:0e:8f:15:90:2d:e6:e8:
f0:4d:0a:5b:2b:19:0e:3e:a5:39:40:25:c3:8d:a0:32:f2:52:
99:79:7c:65:a9:4f:9a:19:c1:36:dc:89:2f:df:3c:b7:08:18:
ac:c7:a2:f8:80:b1:94:97:62:8b:8b:da:91:da:da:15:4d:73:
ff:12:60:14:30:e4:ad:c0:80:5b:e4:dd:1d:b0:62:bb:91:02:
32:ae:2d:33:83:6a:03:68:18:87:81:37:20:e5:a4:7a:31:43:
2e:b8:9f:7b:83:71:3e:37:a7:e0:3e:97:a0:ff:a5:52:00:b9:
80:09:38:c6:3c:c0:c2:3d:ae:ff:58:58:d8:29:dc:ac:74:bc:
0c:f2:5c:16:c3:16:fa:50:7b:5f:49:0d:0d:b0:10:81:bb:9d:
31:44:c3:2b:7f:c3:45:b6:19:df:62:4a:60:8d:a3:7c:1b:48:
bd:6e:75:f7:34:e2:15:f2:57:5f:9a:ff:a1:11:57:2b:06:37:
e1:0b:ae:d5:34:4d:11:d6:d0:2a:a1:2e:ff:0b:27:65:33:00:
00:d0:7a:ee:eb:32:14:c3:7d:67:0e:76:9c:9e:01:b9:4d:9f:
5c:d8:d4:98:a7:41:28:62:b0:20:49:15:ee:85:a9:8b:a9:1b:
c8:25:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org