Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C929E3DEBBE111ECAF7A55AD5A40D577.roa
File: C929E3DEBBE111ECAF7A55AD5A40D577.roa (raw, json)
Hash identifier: Mg0gwMHHoB/KZkD1AGIKTxw6dcgKbp6fBqzIPu2zfBk=
Subject key identifier: 3A:52:33:A2:98:86:E6:2F:5E:60:2C:4C:4B:11:41:0C:31:83:6D:A0
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 066F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C929E3DEBBE111ECAF7A55AD5A40D577.roa
Signing time: Thu 14 Apr 2022 10:58:16 +0000
ROA not before: Thu 14 Apr 2022 10:58:12 +0000
ROA not after: Fri 14 Apr 2023 10:58:12 +0000
asID: 400377
IP address blocks: 161.123.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Apr 14 10:58:12 2022 GMT
Not After : Apr 14 10:58:12 2023 GMT
Subject: CN=6257fe48-554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:e7:00:8b:e8:b5:94:9a:1b:15:36:b1:8f:
28:70:48:08:6f:91:03:54:e9:89:62:ff:c1:4f:0c:
29:75:5b:dd:2c:9b:aa:1f:2b:0a:9f:d2:83:d0:42:
51:33:11:69:d6:36:10:0c:e4:a6:ca:d6:95:b3:40:
20:c3:62:67:8f:5b:f4:99:75:f9:30:4e:ad:99:19:
03:e2:e6:8c:41:3a:57:f0:a0:04:2d:b5:c6:9b:e0:
fc:a4:e8:29:6d:54:1b:d4:c7:08:15:aa:28:8b:80:
4b:b8:a6:f1:37:86:62:79:63:31:fa:c2:4d:7a:51:
dc:95:73:de:4f:89:22:4a:c2:6e:8d:95:d0:76:48:
95:0e:ff:4e:13:42:18:c9:10:28:cf:cf:82:ed:b3:
1b:4f:99:33:ff:87:b6:e5:d4:50:e8:55:79:ec:5a:
d0:2c:ee:3c:ec:c1:3d:f5:74:c4:68:ab:e0:bc:c5:
5b:1c:89:dc:3a:86:bb:d0:92:4c:ca:2f:ff:70:10:
99:e9:a1:02:7d:fd:41:25:e5:b3:63:00:d8:9d:a5:
c1:14:57:9c:27:bb:ec:e9:75:68:9d:e0:06:b0:cd:
2c:86:49:ee:79:ee:34:8c:57:5e:cb:7a:f3:81:81:
9b:8d:a5:65:29:25:cb:87:04:91:6a:29:14:e0:5a:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:33:A2:98:86:E6:2F:5E:60:2C:4C:4B:11:41:0C:31:83:6D:A0
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C929E3DEBBE111ECAF7A55AD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cd:33:2a:8b:a8:4b:b7:98:4b:29:71:1b:15:e7:0a:87:75:
11:2b:51:e0:20:ec:11:6c:46:c1:1d:fe:78:e4:d0:da:96:ec:
c5:4a:00:70:25:81:20:50:c3:93:de:8a:2e:2a:91:a4:84:bc:
65:12:e3:7e:01:7e:57:61:b5:4b:7c:34:14:56:2b:4e:6b:d0:
af:29:1d:40:8e:c3:b8:2e:f6:82:95:53:8f:94:40:03:59:ff:
d8:71:dd:dc:dc:39:72:0e:67:9e:91:7b:c9:2c:6f:f1:77:46:
31:b5:0d:39:78:d2:98:05:7e:2b:25:3e:8f:9e:a9:6b:8a:ad:
36:4c:12:49:91:ef:fb:43:e7:81:37:6d:50:af:78:53:38:79:
e3:2a:08:e9:14:4a:9f:8c:d0:6b:08:31:60:da:76:0e:52:2e:
96:51:44:24:d8:d0:ac:9b:bb:87:23:03:62:09:4f:02:b5:ed:
73:8e:1e:49:7b:7e:d8:0c:7c:fc:86:d9:40:dc:ae:51:3b:fe:
90:c2:06:7b:d5:07:4f:71:c1:78:97:ac:85:1c:38:ed:8c:4e:
7f:86:47:a3:75:2c:98:48:6c:ac:6e:b3:3c:c3:55:7c:33:ad:
9a:28:0c:10:dc:c3:8c:b9:cb:b5:12:20:6a:c2:6c:f5:56:8e:
da:62:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org