Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AEEE968A919811ED8F483FD7F1222468.roa
File: AEEE968A919811ED8F483FD7F1222468.roa (raw, json)
Hash identifier: 2MqsGERrGY2RIWh6yIgsu/Md9cTlz7WdDFJGnOgQOPY=
Subject key identifier: 85:9C:8E:01:9A:64:44:C9:19:F5:7A:AA:9A:1D:C3:B6:39:35:9C:64
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0954
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AEEE968A919811ED8F483FD7F1222468.roa
Signing time: Wed 11 Jan 2023 10:14:07 +0000
ROA not before: Wed 11 Jan 2023 10:14:04 +0000
ROA not after: Thu 11 Jan 2024 10:14:04 +0000
asID: 133499
IP address blocks: 161.123.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:14:04 2023 GMT
Not After : Jan 11 10:14:04 2024 GMT
Subject: CN=63be8bef-b766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:d6:95:31:02:60:e9:29:9f:82:fe:8b:c6:
5c:9e:a4:72:c3:a2:91:09:72:54:8d:c5:f8:46:56:
72:97:1d:fe:22:db:d4:df:2c:04:68:ea:cf:85:82:
78:8b:ed:85:7b:2f:b8:37:7f:a7:70:a8:89:d4:ad:
85:86:bd:ba:4c:3e:70:b3:9b:75:28:4c:be:51:89:
16:3b:48:48:2a:db:fa:5d:23:88:07:b0:59:5e:ec:
0a:84:18:22:1f:55:af:5d:96:3c:21:00:9e:5e:71:
9d:25:b7:a2:bc:c6:74:ea:9a:42:f7:87:c2:08:59:
e2:e4:3d:1c:b2:04:81:db:38:3a:88:d2:9b:73:52:
85:77:04:38:e1:20:1e:37:f3:d9:ae:89:41:b8:4b:
56:12:98:14:0f:1e:97:f1:44:a1:b9:73:23:80:6b:
cb:e0:27:04:f6:a8:ac:65:e3:88:68:49:28:33:e0:
38:7b:3d:e9:a4:08:77:e6:bb:4e:ca:2c:d4:50:1d:
02:bd:d8:ef:d7:78:bb:b7:ba:d6:e7:12:77:4a:76:
e0:2b:59:b5:93:21:9c:87:f0:3f:4e:83:2d:11:1f:
64:b6:90:59:9a:70:df:a5:5f:bb:da:b4:3b:06:fb:
0a:6d:60:32:4b:3c:0d:54:cb:13:37:bc:aa:25:93:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:8E:01:9A:64:44:C9:19:F5:7A:AA:9A:1D:C3:B6:39:35:9C:64
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AEEE968A919811ED8F483FD7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.217.0/24
Signature Algorithm: sha256WithRSAEncryption
14:da:46:12:32:d8:fc:b7:a8:3a:ef:87:6d:b2:22:d2:8b:45:
42:9a:ba:0d:13:d0:21:51:bb:1e:fc:ce:6b:8a:33:55:ae:8e:
44:fa:e3:36:ce:4a:ee:9e:b3:14:59:f5:92:57:db:a1:f4:46:
14:60:87:d1:ef:53:2d:c3:99:4f:e5:27:5d:33:e1:f3:be:55:
5c:75:95:ea:52:21:86:bc:ac:3e:74:a8:35:4d:27:29:36:28:
9b:0a:ec:0e:09:4a:1e:cd:40:7a:95:5a:f3:87:4c:31:ae:6e:
78:ab:1f:82:4c:d1:82:c2:f8:44:2c:28:37:58:54:00:9f:40:
45:2e:ec:1e:52:d1:6a:02:da:b8:88:19:7e:da:34:e5:31:2e:
d6:92:fb:40:7e:3f:ac:a6:19:79:76:af:06:5a:9c:a5:f1:49:
ef:c7:f8:3e:fc:76:5a:88:13:4c:03:cc:cd:a3:87:2b:3e:e9:
9a:cf:99:8a:c3:cf:6b:f6:8e:da:ae:8d:b4:c6:cc:b3:ae:f1:
1c:d0:4f:64:d7:7d:fa:c5:42:76:22:e8:d9:b9:0c:34:e4:42:
3e:2e:12:c9:56:98:62:6c:ac:1d:60:c2:53:d4:22:a0:f8:40:
f6:a7:92:cc:11:c8:ee:7d:28:50:e9:df:69:f3:7f:42:ec:7b:
d4:2d:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org