Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0192982D1F211EDA279CCBCF1222468.roa
File: A0192982D1F211EDA279CCBCF1222468.roa (raw, json)
Hash identifier: KVLqW82G+wI9ca/3dt0khX/VFc9aAoYqoZ1aqN8GaTc=
Subject key identifier: 41:36:7A:90:B0:DA:E6:21:24:C6:EE:A8:3A:5C:0D:45:5D:98:EB:0F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A67
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0192982D1F211EDA279CCBCF1222468.roa
Signing time: Mon 03 Apr 2023 07:39:12 +0000
ROA not before: Mon 03 Apr 2023 07:39:08 +0000
ROA not after: Wed 03 Apr 2024 07:39:08 +0000
asID: 207990
IP address blocks: 161.123.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2663 (0xa67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 3 07:39:08 2023 GMT
Not After : Apr 3 07:39:08 2024 GMT
Subject: CN=642a82a0-262f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:78:f2:56:eb:5e:3c:ef:bd:9a:8a:26:e4:
52:5b:a9:71:24:bb:26:7d:ce:52:d7:10:65:a1:74:
ac:4a:1d:53:60:a5:ed:f8:71:80:42:46:52:5c:00:
95:6b:a2:ae:0a:00:a9:09:07:d2:60:ed:6d:6b:7d:
ea:a7:13:35:9f:f5:d1:2e:ce:f6:3e:88:42:29:55:
21:66:ad:22:8e:50:ec:25:8c:b9:20:4c:5f:22:4a:
7d:33:12:2c:4d:b2:6c:4a:4a:cb:6a:32:b9:7f:eb:
b6:98:71:ff:fc:ab:67:a8:7d:01:eb:4a:f3:e6:20:
50:50:4f:d4:e7:09:80:92:9b:cd:49:2c:8c:5d:46:
f5:ba:89:5a:f2:45:c9:8e:bc:d7:43:ec:ac:18:e5:
8e:f3:51:c5:dc:16:71:b2:83:5b:dd:01:c5:bc:95:
37:89:b2:5d:e3:76:63:c8:73:d9:c9:a4:8f:ba:3c:
09:a3:fe:95:d2:be:3e:4b:76:3b:44:c8:f7:c6:42:
09:5b:d8:a7:8f:19:ab:31:53:ef:b6:9b:90:21:f6:
9d:19:4c:0b:91:8e:26:09:46:e6:34:62:a7:4e:3f:
5e:9d:c1:d7:0e:4a:97:43:10:76:29:89:96:5b:37:
d6:f3:43:b0:e2:2a:a8:cc:fe:d3:0a:db:8e:83:98:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:36:7A:90:B0:DA:E6:21:24:C6:EE:A8:3A:5C:0D:45:5D:98:EB:0F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0192982D1F211EDA279CCBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d8:cc:0a:65:7a:61:84:69:c6:88:63:e6:76:29:7f:4b:bf:
bd:0f:44:22:5f:e5:eb:e8:b3:16:44:95:69:e0:b8:5c:e9:fc:
80:88:3f:97:34:9c:81:bb:92:e8:cb:73:17:5a:17:84:b0:9c:
da:42:b5:56:33:97:6e:96:7d:04:74:50:b4:0c:d3:bb:3b:d2:
92:f2:0b:13:15:11:90:ba:2b:b4:c8:67:24:08:f2:5f:27:09:
45:9a:0b:a4:1a:b4:8f:a1:2b:15:e1:a8:b7:2e:30:89:67:38:
7e:9c:26:9e:9f:10:5a:bb:bc:91:80:85:4d:fe:0e:9e:f8:77:
53:69:b0:ad:78:7f:e8:b3:f4:73:86:14:cb:af:45:2c:54:6c:
14:ea:c7:a0:fb:2b:af:74:4a:4e:a4:c6:6b:c4:93:e2:b4:e5:
1e:13:9e:01:a2:d1:82:42:36:9a:29:8e:92:fa:dd:32:90:be:
a7:aa:37:8a:8d:4f:01:50:0f:3f:da:f6:1a:ed:9e:e2:80:e2:
d4:f4:c0:5f:3f:3f:39:ec:a6:3e:1e:39:24:5a:61:ea:5e:c5:
f2:eb:df:3a:52:3d:f0:e6:86:6a:d4:06:c7:05:73:3b:3d:91:
ed:09:41:14:20:93:24:fa:d6:68:8b:30:67:0b:8e:a3:28:15:
8a:da:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org