Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9FA501E485BB11EC911F819C5A40D577.roa
File: 9FA501E485BB11EC911F819C5A40D577.roa (raw, json)
Hash identifier: myByN3UWNgDYC84esuIguy0ZxE/JSV/A8/oyMzjiU5Y=
Subject key identifier: 89:98:B9:C3:A8:CD:FF:BA:48:D4:55:2C:59:4B:B6:11:26:CA:90:A2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0589
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9FA501E485BB11EC911F819C5A40D577.roa
Signing time: Fri 04 Feb 2022 13:09:03 +0000
ROA not before: Fri 04 Feb 2022 13:08:59 +0000
ROA not after: Fri 03 Feb 2023 13:08:59 +0000
asID: 58202
IP address blocks: 161.123.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 4 13:08:59 2022 GMT
Not After : Feb 3 13:08:59 2023 GMT
Subject: CN=61fd256e-9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:90:e5:84:ca:e2:01:c0:eb:c5:d6:56:fd:
b3:d6:d8:ee:c5:eb:81:5b:f3:9f:17:84:be:3c:a2:
b0:14:4d:97:47:64:42:37:d1:62:4f:cc:e8:38:f2:
df:28:68:fe:11:f0:b6:a4:13:e8:29:78:01:e2:f4:
f3:02:da:86:9a:d7:e4:a6:3f:a2:fe:a8:da:f5:8c:
ac:76:0d:c3:83:23:47:4a:32:65:b6:a0:6a:c3:23:
67:27:54:68:65:14:a3:00:c2:be:b8:3f:fa:4b:dc:
9d:f5:6f:b6:96:0b:e5:d4:87:2c:77:ca:8e:b1:cc:
79:ae:e0:52:f6:e2:4f:21:15:6f:09:ad:f4:39:bd:
3f:4e:fb:93:db:db:65:9c:7a:00:bb:68:39:d7:7d:
a7:17:41:c7:33:4d:27:9a:6f:db:81:ae:3a:1c:6a:
46:04:c7:d6:3c:0b:50:fd:6a:d5:71:e3:39:88:4b:
f7:9b:43:45:37:c8:f8:89:3d:fa:08:e8:5f:c8:9a:
11:48:6c:94:f8:b1:00:cf:0b:a9:48:f0:69:4a:87:
40:75:29:5b:11:8b:31:c2:69:36:c1:f5:20:f8:63:
51:6d:24:5e:c6:78:55:b9:e3:58:4b:62:14:e8:9b:
17:c3:c6:cd:f6:b0:0b:87:da:bd:74:fb:1e:2f:0a:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:B9:C3:A8:CD:FF:BA:48:D4:55:2C:59:4B:B6:11:26:CA:90:A2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9FA501E485BB11EC911F819C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:9f:6e:53:f4:83:62:09:14:b5:e7:1a:90:af:8f:b3:f5:ec:
5a:5b:2e:4b:93:2f:b8:20:87:6b:11:35:cf:e3:d7:b3:04:78:
4f:3d:85:d8:be:ec:f9:11:5d:e0:20:5d:e0:a6:af:07:9f:f8:
6a:99:7e:e0:c4:6a:cb:7c:88:da:49:6c:5e:68:32:18:85:d6:
2c:68:92:3e:f9:b4:48:fa:a5:45:4f:fa:1b:16:66:1f:41:72:
8a:05:29:0c:c6:0c:90:21:42:44:a5:e0:06:db:eb:9d:46:ae:
94:c3:ae:f8:6f:fa:84:9f:be:02:2a:30:96:47:d8:06:ec:ed:
07:27:a7:22:e9:c1:19:2d:1c:22:23:a7:f1:82:e8:48:ab:07:
5a:6a:58:26:29:b5:f4:bb:c6:a2:01:ee:d2:cd:32:af:8f:c5:
65:cb:9e:9a:97:b8:5f:70:cd:25:e3:db:08:cc:83:4b:46:e3:
cd:e8:21:ba:a6:03:31:44:0b:47:23:77:2c:eb:26:34:03:05:
97:59:cf:32:fe:76:c0:45:c8:83:38:b8:c8:f5:9a:91:c7:14:
f5:6a:7d:58:4c:a4:f8:c1:f0:6e:44:2d:3b:bb:dc:66:e0:3f:
07:aa:35:37:f6:4d:ae:37:df:2f:38:da:64:eb:ba:91:97:f7:
26:a5:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org