Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B9575F0ECF0E11ED8CF064F1F1222468.roa
File: B9575F0ECF0E11ED8CF064F1F1222468.roa (raw, json)
Hash identifier: lVGEBktLg1PHmFzBbdD49gnTKlgCvcLB3nEFVrrOIqs=
Subject key identifier: F6:D6:DC:AB:78:88:CC:02:B4:D8:5C:DB:0E:D1:97:49:0B:36:9F:97
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A54
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B9575F0ECF0E11ED8CF064F1F1222468.roa
Signing time: Thu 30 Mar 2023 15:22:46 +0000
ROA not before: Thu 30 Mar 2023 15:22:43 +0000
ROA not after: Sat 30 Mar 2024 15:22:43 +0000
asID: 204765
IP address blocks: 161.123.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644 (0xa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 30 15:22:43 2023 GMT
Not After : Mar 30 15:22:43 2024 GMT
Subject: CN=6425a946-1e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:e4:e0:e8:84:08:79:f7:c4:a3:a1:b1:ef:
aa:d5:01:2a:1b:7e:9e:af:1f:9a:74:72:06:fa:cf:
ef:86:64:1e:16:ff:c0:02:c4:a9:08:10:37:12:c1:
6c:c1:99:d1:bc:42:5d:b5:15:3e:3a:05:ec:02:e7:
f2:c3:99:8c:5b:cd:81:05:f4:30:e5:a2:a5:cb:95:
99:d4:e8:b4:f5:5b:36:62:82:82:ed:5c:7f:93:14:
e1:9f:6d:81:e8:86:ab:31:a5:c8:a9:1f:fe:d1:8e:
38:58:7f:70:bb:78:85:20:e4:02:34:f6:19:22:5e:
98:15:c2:1f:fc:57:d1:96:fb:8c:9b:20:de:3f:a5:
a1:c5:54:2f:8e:38:6f:92:c8:2e:f7:cb:67:14:a7:
01:f4:ce:ea:da:ac:60:ac:a6:f5:59:44:94:25:ba:
bf:3a:07:f3:f3:89:65:d2:85:35:fb:40:01:43:b4:
8e:7b:90:be:e3:7b:11:46:c8:cc:86:24:a1:bf:a6:
82:f3:dd:f3:c5:88:20:5c:d8:c7:2d:e2:86:61:b2:
40:9f:f2:42:60:ce:fe:81:c7:fb:8e:cb:7c:ac:05:
eb:a3:0c:51:64:ac:a8:7d:14:77:dc:d0:c7:1e:cd:
71:76:ac:42:76:96:4f:ae:30:57:c4:b1:e6:56:09:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D6:DC:AB:78:88:CC:02:B4:D8:5C:DB:0E:D1:97:49:0B:36:9F:97
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B9575F0ECF0E11ED8CF064F1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.247.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6c:5e:9f:23:40:88:9a:7a:92:e4:9b:67:28:d5:2e:65:6b:
18:ce:2f:ed:14:1f:35:65:56:ab:6d:17:b9:75:30:5f:bf:9b:
6d:96:1b:e4:aa:b6:03:b1:99:a4:89:4a:05:58:81:85:9e:39:
ec:5d:ea:8e:cf:f5:bc:bb:f2:3a:11:96:2b:cb:12:7e:3b:59:
15:78:72:64:fb:7b:88:fd:1f:0c:45:35:be:3b:46:4e:78:eb:
73:4a:9f:72:fb:be:33:bf:0d:ce:f6:d3:8b:a2:4b:22:4c:52:
7a:1c:81:48:e6:82:dc:20:0d:e0:12:d5:46:f6:42:1a:55:da:
af:cb:97:a6:4e:fb:f1:9b:c0:17:6e:3a:d2:49:db:33:fc:ad:
87:a3:a4:0f:ef:ce:bc:c4:f6:82:af:7a:dc:5b:11:9e:5e:39:
4d:d4:e4:62:30:50:12:31:e2:c4:26:3f:6e:f2:47:b0:d1:45:
e1:a4:00:81:bd:5f:9a:10:5d:24:3b:d4:43:ba:5c:cd:06:84:
fe:03:05:c0:5c:e4:4a:7c:a4:1a:a1:bc:78:a3:f7:68:e9:63:
07:3f:24:e9:7b:4d:7b:3f:02:57:d1:5b:6b:76:6e:32:4c:77:
38:b7:35:9b:11:8a:8d:b8:62:22:93:40:9a:42:3f:45:6f:f5:
38:ce:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org