Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA5E6192C30F11EDAD5FD37CF1222468.roa
File: AA5E6192C30F11EDAD5FD37CF1222468.roa (raw, json)
Hash identifier: 6bnqMI5YE+G9MxW84cC4Tpq0wpSfXndCA8KZW5GpvII=
Subject key identifier: 81:A3:AD:2F:39:B3:1D:43:C8:C5:1F:4B:8F:38:00:E3:70:11:D6:1C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A03
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA5E6192C30F11EDAD5FD37CF1222468.roa
Signing time: Wed 15 Mar 2023 08:59:17 +0000
ROA not before: Wed 15 Mar 2023 08:59:13 +0000
ROA not after: Fri 15 Mar 2024 08:59:13 +0000
asID: 61290
IP address blocks: 161.123.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 08:59:13 2023 GMT
Not After : Mar 15 08:59:13 2024 GMT
Subject: CN=641188e5-2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:bd:a7:f0:39:19:f8:19:2a:3d:95:24:96:
ad:24:d0:3f:0e:b1:9d:48:c4:89:d1:de:62:42:13:
48:f3:5b:89:3f:a1:d6:26:14:0d:a6:af:43:e7:ab:
33:2d:af:e4:1a:fc:cc:65:65:bb:3a:29:eb:b8:eb:
2a:ea:1d:b0:e1:53:c6:ae:41:b2:fa:be:1c:e6:04:
5e:40:8d:cc:cf:0e:d5:18:49:e2:25:18:cb:b0:a5:
16:45:28:b0:23:ab:5c:79:84:2a:72:e5:e4:f6:90:
32:44:cf:e1:ef:fa:4f:f1:33:46:3b:b1:14:33:8b:
db:54:58:dd:e3:d4:7b:17:8b:17:92:81:94:9c:95:
c5:cf:7c:5d:26:6a:3b:c9:71:e1:aa:3c:e2:fc:e9:
d1:cb:ae:68:f1:3f:62:4c:f3:f8:b2:41:7f:8a:bc:
a6:e8:2e:c3:d5:41:ab:21:23:d4:21:f8:eb:44:55:
66:e3:15:81:b6:de:ba:32:d1:b7:aa:d0:fe:4a:fa:
12:11:e8:48:6a:74:8e:ae:dd:16:81:ec:e4:6e:8e:
2b:d8:94:8b:1f:11:55:84:31:22:f8:10:44:ef:0a:
a0:0c:33:ab:c7:a8:b8:fa:06:cc:5d:7c:23:a9:40:
c3:e5:1f:0d:eb:bb:a5:cc:ae:85:66:bf:f7:26:02:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A3:AD:2F:39:B3:1D:43:C8:C5:1F:4B:8F:38:00:E3:70:11:D6:1C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AA5E6192C30F11EDAD5FD37CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.68.0/24
Signature Algorithm: sha256WithRSAEncryption
53:31:fd:b1:72:83:69:cb:45:d5:1c:20:05:6e:20:b8:2a:fe:
03:71:b2:20:9b:d0:d2:1a:ef:06:29:74:b5:c6:09:94:fa:ac:
41:24:6a:96:5f:c2:d8:df:95:82:cb:fe:20:d1:d3:99:81:c1:
70:96:e1:cd:77:06:d1:0b:5b:37:a8:f7:9e:42:d7:66:26:bd:
4b:a3:67:13:d3:bc:26:67:91:43:0f:42:08:86:58:27:e4:23:
a3:43:91:5c:45:df:2f:ee:a6:f2:b0:ed:fb:0c:ec:b9:81:cd:
45:76:68:16:08:f7:0b:21:77:69:5f:b2:35:f6:30:b4:54:d9:
2c:d6:82:2d:07:32:d0:75:a7:c3:88:b6:7e:30:f8:69:9a:a9:
29:2c:b8:8b:89:86:f3:ce:42:ff:34:f5:76:ec:e4:f6:b4:55:
85:3c:37:74:de:5b:de:27:58:af:99:c1:1f:35:69:77:34:ff:
9d:c0:07:7a:cd:1c:47:b0:ab:1c:fc:a9:77:7b:2b:93:70:5e:
02:4f:e4:9e:cc:af:cc:aa:7e:9e:f0:f7:75:e5:00:f0:36:07:
89:15:c1:a2:64:c2:6a:78:8f:07:1b:10:9f:7d:b3:3f:7b:8e:
ea:94:da:69:72:f0:be:bc:09:7c:25:de:cc:98:ad:0a:77:04:
92:13:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org