Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
File: C15EEF6C451711EEA7AFF5864AD9E6FC.roa (raw, json)
Hash identifier: GqAWzGGHdoTgxq6YbzVjMAu2ar4lZp3xDmRXQRxNiew=
Subject key identifier: B6:CB:80:6F:3D:EA:73:F1:E1:00:15:FD:A2:13:7C:D4:87:C2:6F:81
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BD6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
Signing time: Sun 27 Aug 2023 20:24:43 +0000
ROA not before: Sun 27 Aug 2023 20:24:38 +0000
ROA not after: Sun 25 Aug 2024 20:24:38 +0000
asID: 212738
IP address blocks: 161.123.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 27 20:24:38 2023 GMT
Not After : Aug 25 20:24:38 2024 GMT
Subject: CN=64ebb10b-6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:2e:28:d7:b9:eb:28:5e:b0:fc:93:36:49:
08:8c:0e:69:4f:8a:cf:13:c9:51:18:fe:8c:7e:0e:
9d:4a:69:00:8a:21:31:6c:a5:7e:b0:7d:0b:b7:3d:
55:82:3c:38:06:bb:ef:2e:f4:dd:7c:ba:f9:11:18:
93:0b:57:03:84:e3:94:e2:18:83:3c:78:bc:4a:e6:
5e:d0:93:cd:2b:8e:b7:40:ce:f5:0a:a7:92:38:a7:
6b:e9:f8:68:e5:45:38:3f:9e:b2:9b:1e:0e:92:df:
04:96:f5:f1:53:61:e5:e9:8a:ff:91:1e:ba:17:d0:
07:5a:20:77:0b:5b:72:35:45:e9:e3:46:e9:a8:07:
3f:d7:f2:ba:c3:39:93:32:31:59:86:85:94:d3:37:
5d:24:b7:d9:09:ad:c1:f4:c1:54:8a:1c:be:f5:a8:
30:88:d8:85:08:23:73:af:30:f4:31:0c:ab:e8:b8:
71:de:9d:cf:65:fc:b5:0a:87:51:cd:6f:09:90:c4:
09:4d:7b:4f:49:c5:23:d6:98:2c:10:3d:67:99:f4:
34:c6:45:56:57:f4:bc:ae:63:41:fa:52:57:f6:93:
e7:d8:96:93:83:5b:76:1f:47:a5:49:d0:62:d4:aa:
a4:02:56:ae:0d:f0:58:05:d1:81:83:e5:9e:53:83:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:80:6F:3D:EA:73:F1:E1:00:15:FD:A2:13:7C:D4:87:C2:6F:81
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.116.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4c:f1:21:7b:1b:ff:55:c3:ca:94:7c:df:39:9f:79:68:ac:
7d:bb:5d:fe:f7:5a:de:6f:07:fa:b1:e7:9f:29:b7:39:a3:f2:
1d:d5:2c:e6:ef:1c:98:41:1a:29:9a:8c:01:b2:8e:df:67:fc:
e0:a3:5e:87:26:74:09:3f:75:e2:52:6c:d3:72:ab:f7:ca:09:
e8:d8:00:98:21:65:1f:0b:2a:8a:85:21:d8:f1:eb:15:80:ca:
12:3f:d7:0a:cf:ee:04:94:cc:aa:65:4e:3d:51:87:c6:f6:30:
16:7a:ff:68:a6:00:a0:01:40:fe:a2:c8:3d:1d:22:ee:e7:6b:
ee:a8:01:f5:5f:41:61:83:af:ae:41:fc:fe:32:d0:03:d3:90:
63:df:a0:68:58:22:98:56:db:33:33:3c:e2:dc:84:81:40:7b:
4f:05:68:3e:4a:68:30:24:3b:8c:fe:1a:4a:85:42:f0:59:bf:
cb:d0:a6:52:fd:78:15:4c:88:17:5c:c0:84:0f:0b:b0:b5:b1:
1f:71:57:03:b1:01:82:28:b2:75:f2:71:3e:5a:e5:6b:d4:40:
96:1d:77:c5:5c:a5:0c:39:1f:2c:a7:98:19:58:f6:02:cd:be:
4c:f9:53:5c:06:28:4c:88:11:d3:e7:11:bf:90:f2:70:e1:cb:
52:ea:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 04:27:41 2024 by rpki-client on console-ams.rpki-client.org