Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
File: AA07A7F0919911EDB9503CDAF1222468.roa (raw, json)
Hash identifier: 812htoYamRz9ynTlJBlXQpDzFE3aW/BsSLphmtuxOAo=
Subject key identifier: 52:73:6E:90:BA:38:7B:FB:12:14:98:24:A1:6B:92:DB:E6:F2:88:9D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0962
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
Signing time: Wed 11 Jan 2023 10:21:09 +0000
ROA not before: Wed 11 Jan 2023 10:21:05 +0000
ROA not after: Thu 11 Jan 2024 10:21:05 +0000
asID: 133499
IP address blocks: 161.123.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:21:05 2023 GMT
Not After : Jan 11 10:21:05 2024 GMT
Subject: CN=63be8d95-54ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:c8:c1:10:d0:02:24:a7:f6:01:06:d8:61:
56:15:99:1a:ac:9c:c9:b7:c8:8e:78:2b:9b:73:16:
b2:2a:b6:25:65:9f:9c:ac:bd:17:d5:4f:37:93:98:
0d:ee:9f:53:67:d2:56:96:a0:11:c7:a1:29:24:83:
de:fa:72:5d:dc:20:30:99:37:3d:63:a9:33:83:a2:
36:ef:a4:e8:27:07:4f:9d:8d:38:9a:69:6a:ef:32:
f7:76:13:a4:71:a6:1e:4f:4e:1a:08:d7:b2:35:13:
f4:cb:d5:aa:ff:c9:8a:1e:c2:45:c9:b2:a2:b0:2f:
94:30:41:bf:b7:07:96:21:59:f8:47:ba:44:96:b4:
bd:d0:73:6c:35:d8:6d:87:7f:6d:51:9e:ad:bd:ab:
81:cd:3e:24:54:e8:d0:0b:76:14:13:d9:79:4c:12:
38:46:6e:a9:3f:b0:cc:e0:cc:21:0f:94:fa:69:c0:
8e:85:01:aa:82:03:ea:e0:5c:0a:08:b2:73:68:89:
67:c6:be:29:09:5b:45:6d:9e:5a:eb:49:cd:5c:a0:
77:a5:d6:d9:6f:df:1c:e1:8f:8e:d7:92:dd:63:b7:
0f:79:13:8b:d0:ac:1d:0b:ed:de:b8:f0:ba:c5:c7:
51:cb:3b:2e:75:bb:07:2d:3f:5d:5c:aa:fb:fa:1d:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:6E:90:BA:38:7B:FB:12:14:98:24:A1:6B:92:DB:E6:F2:88:9D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA07A7F0919911EDB9503CDAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:39:08:83:90:fc:79:32:5f:b0:1c:9b:0b:22:ee:1c:44:11:
f5:5f:53:50:90:98:7b:83:c3:1f:47:b3:4e:62:49:77:49:c2:
b7:50:f8:81:8b:1d:fe:43:5b:92:dd:0d:8f:32:eb:c1:56:93:
b0:dc:0e:33:bc:bc:17:24:04:d0:7f:7a:72:05:fc:74:5d:bb:
b6:4f:ea:16:79:91:f5:80:24:3c:1f:51:a8:f3:c4:d9:64:78:
73:f6:17:66:e3:c2:4f:7b:e3:5e:87:05:d4:67:78:85:0b:42:
75:9e:b6:9e:a4:04:7d:96:e1:b9:95:aa:30:44:31:f2:09:b3:
18:3c:4a:30:f9:6f:c1:ad:92:0e:02:07:2f:ea:4b:44:16:ce:
68:74:e7:3b:1a:af:0b:07:e4:51:4f:d5:f3:da:6e:66:3d:d1:
8e:3f:f1:d0:ae:ae:b1:fe:f9:6f:3e:0d:e4:07:9f:cb:b8:71:
dc:3d:34:a8:f3:7a:61:a1:24:f8:45:bc:df:f7:a2:d3:13:c2:
f2:6f:43:a1:c9:37:92:db:95:58:7a:c9:15:eb:2f:58:9d:3a:
c0:64:6e:5e:11:39:bc:71:ef:a7:c5:f7:48:e0:14:e1:af:f2:
b4:56:a4:67:43:94:a4:dc:83:bb:1b:33:0b:18:bc:da:bd:a0:
0f:8d:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org