Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CDCD1F347DFA11ECBCE364D55A40D577.roa
File: CDCD1F347DFA11ECBCE364D55A40D577.roa (raw, json)
Hash identifier: QbyyGxtj5AcBypIqpulal9CBzE39BtoJQSW0zDZvO0Y=
Subject key identifier: 7B:4A:08:5B:91:1D:72:29:52:5F:EF:E8:99:BD:43:97:DD:E7:D9:84
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0526
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CDCD1F347DFA11ECBCE364D55A40D577.roa
Signing time: Tue 25 Jan 2022 16:21:09 +0000
ROA not before: Tue 25 Jan 2022 16:21:05 +0000
ROA not after: Wed 25 Jan 2023 16:21:05 +0000
asID: 327790
IP address blocks: 161.123.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 25 16:21:05 2022 GMT
Not After : Jan 25 16:21:05 2023 GMT
Subject: CN=61f02375-1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:a1:38:f9:0d:f9:22:12:2b:ce:ce:70:99:
85:7d:e5:95:73:19:cc:74:7a:30:d1:2a:63:69:84:
48:a9:c6:01:1d:53:ac:c4:20:4e:aa:64:ea:37:32:
f6:bd:fb:6d:15:ff:cb:25:21:23:a4:f2:73:52:0f:
33:f7:16:f6:62:e4:eb:24:bd:f2:b3:4a:0d:c0:b7:
a5:95:f2:5b:18:34:c9:7e:63:03:d3:8c:9a:86:a4:
ee:f1:42:37:50:71:99:42:09:3d:63:1a:c3:43:80:
99:9d:48:2d:92:23:f4:53:ff:5a:e1:b9:28:2d:46:
e6:d2:3b:8b:d9:73:3c:aa:ee:be:5f:31:53:07:c7:
50:e3:f9:b2:93:70:f3:21:bb:8d:81:e7:28:be:5d:
6a:e0:ff:0b:ae:39:e9:c7:84:4c:7f:f5:17:63:c0:
1e:cd:a6:6e:b8:f8:b2:63:5d:10:36:93:72:40:e6:
cb:24:a9:3c:cd:6f:ac:59:c0:50:e1:d8:f7:d4:fe:
bc:3c:16:53:83:94:fb:07:93:d0:00:b4:99:ed:7e:
17:55:7d:02:4c:be:13:66:dd:e9:a2:5e:03:7a:94:
fa:33:f7:4d:e4:dd:e2:cd:f7:78:20:02:72:ec:2e:
b6:dc:8e:37:1c:24:b1:76:6a:e2:08:8b:60:28:08:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:08:5B:91:1D:72:29:52:5F:EF:E8:99:BD:43:97:DD:E7:D9:84
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CDCD1F347DFA11ECBCE364D55A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:fc:02:6b:c3:71:05:b4:9a:f9:43:2c:7c:4a:8d:23:50:1a:
ee:93:5f:35:c4:48:00:d7:8b:39:ab:be:f4:60:5b:43:ce:26:
d8:0a:63:30:25:f0:1d:4c:c4:59:49:8e:6b:01:f3:e3:95:7c:
7d:c4:76:3c:8b:60:70:fd:7e:72:8d:29:c2:24:d5:0c:5a:50:
53:83:94:a5:fb:bc:b4:9f:1e:18:36:4e:37:96:5f:cf:9d:d8:
c2:a7:3b:90:05:f1:9a:52:02:48:19:ad:38:01:1e:7c:16:cb:
f5:68:6b:fe:2a:6d:2b:71:9a:cb:87:d7:16:3b:32:83:6c:10:
5b:9b:32:34:72:a8:17:d9:97:8b:81:d8:86:2b:ee:e9:2b:ac:
5c:37:af:1d:d7:55:ce:6c:c4:dc:35:4c:86:4a:20:61:92:fb:
87:bb:b9:38:a4:93:62:9d:76:0b:68:b1:c9:dd:88:54:8e:5d:
88:09:0f:bd:81:f9:c5:56:b8:91:d8:19:a0:66:e1:0c:24:8e:
ac:7a:a3:be:14:04:b5:df:d7:08:8b:71:a9:2a:6b:bd:57:18:
63:d4:a6:27:b0:71:12:2f:1d:94:ec:ae:a0:cb:0f:a6:aa:da:
56:09:59:95:d4:8c:0a:1c:cd:ac:b1:03:6a:83:b2:71:26:bc:
a6:b8:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org