Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE1CCC2A327311ECAEFE826CD8A014CE.roa
File: AE1CCC2A327311ECAEFE826CD8A014CE.roa (raw, json)
Hash identifier: g6xsfjjVjRu405Nh/mepzPzUGCuHJWKp5QwEgbyGc5Q=
Subject key identifier: 5B:30:8B:30:44:35:52:E8:6C:CF:ED:E8:37:C7:FA:52:E1:BD:C7:35
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 01F8
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE1CCC2A327311ECAEFE826CD8A014CE.roa
Signing time: Thu 21 Oct 2021 13:34:57 +0000
ROA not before: Thu 21 Oct 2021 13:34:53 +0000
ROA not after: Fri 21 Oct 2022 13:34:53 +0000
asID: 60458
IP address blocks: 161.123.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Oct 21 13:34:53 2021 GMT
Not After : Oct 21 13:34:53 2022 GMT
Subject: CN=61716c80-422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:8c:78:db:47:a9:ca:2a:fb:a6:b3:09:7d:
e2:52:60:d0:18:68:9c:1a:7b:60:13:9b:e4:bf:67:
5c:ac:a3:5e:6c:72:ba:1e:14:ed:4a:25:95:fd:57:
15:bb:b4:1a:1a:87:2f:d9:cf:ac:40:cf:a2:98:3a:
4f:87:69:19:bf:62:b9:9d:d2:2e:35:e4:01:39:78:
f9:b4:93:e9:8d:2c:be:46:01:a6:59:59:8b:29:64:
24:a2:7a:01:ea:07:c5:88:52:a5:ab:ce:f0:5b:ad:
ca:6d:92:10:ad:c3:35:15:2c:32:f3:98:27:9c:6f:
f5:c6:b1:84:85:ea:de:60:35:b6:45:2d:9b:46:02:
22:35:5c:d1:14:41:a8:ed:fb:f7:60:e1:af:ee:3d:
ab:6d:be:51:80:09:ab:2c:40:28:c0:08:1e:17:90:
1a:dd:8f:67:60:ab:8b:07:c0:24:44:d3:87:4b:3b:
5b:18:33:d0:2c:29:cc:47:34:d4:5a:68:d7:28:e2:
c7:d0:08:71:49:d0:c6:51:55:ea:d7:e9:b1:f9:16:
7e:dc:d0:44:34:18:2a:40:99:44:50:b2:eb:1f:b7:
a6:f9:61:aa:f0:91:20:e6:51:51:d1:73:02:29:21:
79:e2:51:60:ca:cd:9c:d2:d7:04:ce:07:e2:1e:61:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:8B:30:44:35:52:E8:6C:CF:ED:E8:37:C7:FA:52:E1:BD:C7:35
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE1CCC2A327311ECAEFE826CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5e:5c:15:cb:d5:d0:c8:2e:45:22:74:f4:bd:9b:ea:b6:07:
0f:ac:2a:99:df:6f:b5:7a:db:39:13:7c:c0:30:d3:60:0b:bd:
f8:54:d1:f0:b5:2c:3f:52:f5:ff:40:87:d6:c8:2e:01:6d:9f:
94:c6:d5:69:65:62:24:f6:2e:50:11:f9:32:80:4d:af:f8:da:
94:06:5f:16:e6:19:4d:1b:80:b6:e7:38:ff:2b:1d:92:fc:09:
bf:3d:d1:df:80:87:f9:3e:d2:a7:75:37:de:7f:4b:09:77:9f:
79:90:09:10:90:b6:7e:da:7a:6e:e0:9a:b1:71:35:89:b0:0c:
65:04:7d:87:f1:84:58:52:86:51:44:8e:84:f2:43:08:48:b3:
dd:48:10:18:97:3c:b0:79:7b:eb:18:04:dc:18:26:0e:49:d2:
8a:91:b8:e8:10:58:ed:0b:f0:6d:1a:c7:3d:11:55:56:9b:64:
eb:e7:f2:43:9f:ef:5d:a3:23:ed:7d:fb:ca:4b:ad:93:01:bb:
40:0f:de:db:75:91:47:8e:d5:a5:d0:66:0f:85:ca:a1:9f:87:
bc:23:84:18:c1:01:59:c6:7d:71:da:6d:9f:d3:e7:48:9f:f1:
a6:89:af:e8:9a:bc:57:2d:12:46:8e:97:8c:58:b6:4d:8d:d6:
61:55:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org