Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C1204E4E919711EDAB4B68D4F1222468.roa
File: C1204E4E919711EDAB4B68D4F1222468.roa (raw, json)
Hash identifier: RSYX2hPfWz5ceewYy1tJGcguNCyonmLURMAxrhyBYms=
Subject key identifier: 27:69:46:BD:8B:B7:DA:2B:61:FC:2C:C6:05:14:5F:17:18:10:BD:EB
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0946
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C1204E4E919711EDAB4B68D4F1222468.roa
Signing time: Wed 11 Jan 2023 10:07:29 +0000
ROA not before: Wed 11 Jan 2023 10:07:25 +0000
ROA not after: Thu 11 Jan 2024 10:07:25 +0000
asID: 133499
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 11 10:07:25 2023 GMT
Not After : Jan 11 10:07:25 2024 GMT
Subject: CN=63be8a60-d793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:cb:ce:dc:c8:65:f1:7b:5d:d2:d5:c5:c7:
a1:13:da:a2:8d:9e:04:4b:64:26:36:f0:b2:85:20:
15:63:79:3f:d5:56:36:13:09:f6:a3:46:00:c1:26:
8c:1c:ed:e0:f3:38:33:2d:56:3f:ac:36:87:83:6b:
bf:23:6e:66:7c:ed:20:ce:d0:6a:a4:4d:97:ae:2f:
df:50:3e:4b:d2:b0:9b:e7:66:ee:22:e8:f5:74:ab:
db:69:94:5f:a4:be:ab:5f:ad:54:2a:a3:12:82:99:
ec:b4:6c:22:00:3f:4b:97:e4:b9:07:cd:66:ff:73:
bc:6f:08:54:4d:5c:3b:8c:a9:5a:ef:55:77:83:25:
c6:5d:5a:72:81:65:98:48:b6:a4:ab:e9:ec:68:d9:
fa:cb:c4:38:7e:47:63:3d:1a:6c:61:3c:6f:98:b8:
8a:65:1c:9d:58:24:3e:39:30:43:60:a4:7a:44:bd:
4c:20:c8:e3:ba:36:26:80:0a:f0:dd:61:8e:b7:25:
09:21:ee:61:05:35:79:91:31:07:4e:ec:17:71:b6:
ee:39:69:41:90:5b:ad:b1:73:ed:1f:5f:82:12:92:
65:e2:b0:a6:29:e1:f2:0e:b7:12:a1:fb:cf:85:5d:
ea:5c:25:53:0b:09:a3:09:9e:9d:3b:af:62:f1:db:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:46:BD:8B:B7:DA:2B:61:FC:2C:C6:05:14:5F:17:18:10:BD:EB
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C1204E4E919711EDAB4B68D4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:12:25:c2:3f:25:0d:84:aa:29:a2:58:d3:94:83:fb:54:47:
e1:4d:13:60:0f:ff:6d:f6:82:d7:2b:14:d2:71:81:52:80:ef:
10:95:a3:cb:eb:57:99:08:8b:2b:e5:0b:ff:b8:b4:be:cd:bc:
32:d5:61:f1:ce:46:f9:99:48:ac:fd:b3:23:25:04:ae:32:18:
84:05:08:c7:9f:e6:78:5f:ac:f8:45:a1:39:5d:51:30:85:41:
9c:77:68:7a:dd:07:aa:96:7e:a3:69:8b:94:ad:d9:6d:9d:85:
32:94:23:4d:90:aa:30:b1:97:f2:e8:f3:0f:20:ec:ce:3f:6c:
68:b8:0b:50:c4:74:dd:64:e7:b2:1b:26:e3:1a:64:5c:a7:0d:
3c:26:21:57:41:00:36:a4:59:d3:93:36:79:7e:0b:9c:0d:a7:
30:be:c9:68:6a:0d:e9:0d:d5:56:95:2b:04:77:14:2f:ce:4f:
84:a1:66:ed:b4:65:1c:22:26:36:22:0a:27:bf:3c:21:d2:c3:
20:78:b0:3e:f7:a6:50:9b:57:83:d3:df:d6:5a:8c:d6:46:73:
1e:58:27:da:6d:9f:c1:36:5b:e6:33:ca:c5:30:75:a6:bc:c5:
ca:7a:3c:0d:38:36:02:c6:50:e1:42:6f:74:9e:4a:98:43:cd:
97:b6:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org