Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B2BEE3E6A15B11ED80D32AF3F1222468.roa
File: B2BEE3E6A15B11ED80D32AF3F1222468.roa (raw, json)
Hash identifier: KLx6GCdJsfE0CIvcef3FUXy+Ds49fV7BtRr9A7nv5iQ=
Subject key identifier: 19:F3:B8:DB:19:C5:06:09:2C:90:7F:5D:63:40:82:7F:D4:96:E5:3D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0988
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B2BEE3E6A15B11ED80D32AF3F1222468.roa
Signing time: Tue 31 Jan 2023 11:37:53 +0000
ROA not before: Tue 31 Jan 2023 11:37:49 +0000
ROA not after: Wed 31 Jan 2024 11:37:49 +0000
asID: 213035
IP address blocks: 161.123.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440 (0x988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 31 11:37:49 2023 GMT
Not After : Jan 31 11:37:49 2024 GMT
Subject: CN=63d8fd91-f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:ad:64:a5:63:80:00:c1:a6:89:21:a2:e6:
2d:49:12:8f:4a:6d:c5:99:a6:54:60:9b:39:13:26:
ac:58:32:1e:bc:5a:02:58:42:a4:26:2d:87:53:a5:
ac:34:a4:a6:5d:00:9f:cf:a5:cc:c5:73:b1:42:e5:
da:2d:ed:99:ca:99:54:d4:16:bb:c5:6c:18:33:4a:
65:fc:05:d9:3f:1c:da:30:c9:3e:97:83:35:7c:0b:
41:a7:05:39:a7:b8:4f:f7:84:c6:77:c3:88:a4:d1:
3b:ff:ab:de:53:72:95:18:c2:f5:2d:84:ab:06:64:
2a:ac:ad:da:d0:51:8f:97:db:7d:79:d1:81:0e:c6:
a1:5d:1c:02:e6:eb:26:f5:38:f2:f8:ac:ac:dc:5f:
3f:a7:f7:43:f5:45:a5:0b:66:33:63:0d:11:9d:5f:
14:5d:d7:44:9b:cf:d1:be:65:74:e4:5e:12:65:8f:
13:28:04:8e:0f:37:81:d4:02:2c:2f:6c:d4:3f:33:
8b:12:73:ae:5a:af:f0:44:87:ef:f6:59:57:3b:23:
ec:2a:7b:48:72:7d:ca:bc:2c:2c:fc:43:c1:f3:0d:
64:a4:ea:86:af:a6:06:7b:1f:f8:51:79:c3:d2:19:
5c:d2:b7:90:ed:13:25:ad:56:28:d4:99:ab:b3:d4:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:B8:DB:19:C5:06:09:2C:90:7F:5D:63:40:82:7F:D4:96:E5:3D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B2BEE3E6A15B11ED80D32AF3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1c:27:70:f5:30:eb:e6:a5:0d:c6:3e:f5:65:34:d6:8d:f7:
26:78:8a:c0:b1:e8:50:5b:0b:de:e3:dc:18:27:a1:59:d3:cd:
9f:6f:b5:0c:21:26:af:8e:7e:6e:5e:c2:76:e6:0e:a1:37:33:
c8:b6:91:55:d1:81:94:38:b6:f1:bc:cb:b9:fe:4f:c2:bd:56:
bd:7e:0b:5f:e6:e0:7a:dc:ff:d1:13:17:57:6b:1e:c1:3d:63:
a9:9f:ed:a2:72:a9:63:b1:77:8e:e4:a4:84:ba:95:b2:d9:21:
89:32:ec:0d:7e:74:f2:76:50:48:e1:6f:8e:8d:a4:aa:32:cf:
2f:46:7a:68:b9:17:91:f1:45:04:ad:5c:7b:fd:df:7a:ee:c1:
0e:36:5c:b5:2e:b7:a0:d7:5c:c6:98:e0:4b:10:e7:93:5f:60:
ea:af:13:f6:f4:31:d7:a8:93:20:80:1a:05:90:4f:22:1e:c2:
3e:3f:e0:fa:e4:03:10:30:f5:cd:86:a6:67:4e:2f:f7:b5:d4:
a2:17:d3:31:59:34:ad:80:6b:a8:9c:77:e9:f2:9f:0a:e8:0d:
79:58:37:1e:71:57:72:73:0c:0d:2b:99:1b:5b:07:c1:1a:f3:
22:bd:57:9b:ac:5f:d6:2f:ac:b2:5e:15:ff:37:ba:98:d0:ad:
78:f4:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org