Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D12ABF60A8BA11EDBE98D5E6F1222468.roa
File: D12ABF60A8BA11EDBE98D5E6F1222468.roa (raw, json)
Hash identifier: USRctP0/J+VGt+/315sTh3G1E6yvjD/UnTTWwU0dhk4=
Subject key identifier: BD:AC:96:EF:CA:4E:CB:61:9A:E5:FA:5E:F8:05:89:E3:77:9E:62:97
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09C4
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D12ABF60A8BA11EDBE98D5E6F1222468.roa
Signing time: Thu 09 Feb 2023 20:46:24 +0000
ROA not before: Thu 09 Feb 2023 20:46:21 +0000
ROA not after: Fri 09 Feb 2024 20:46:21 +0000
asID: 207990
IP address blocks: 161.123.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:46:21 2023 GMT
Not After : Feb 9 20:46:21 2024 GMT
Subject: CN=63e55ba0-17e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:cc:1b:6c:91:f1:82:08:1a:29:da:46:68:
4b:c7:1b:00:0a:c5:6c:12:ca:fc:25:78:ca:56:fe:
d0:85:a6:08:6f:c0:cd:47:71:81:dd:ea:32:c3:3b:
64:ab:c1:61:6a:c9:8e:ee:b5:03:28:f0:38:c1:53:
36:3b:00:52:89:3e:18:d7:2b:6d:11:44:96:b7:6b:
b3:4e:d4:93:6d:6f:5a:4e:d6:93:c7:41:50:1b:2b:
f6:6f:9b:e7:24:5a:35:3e:2b:71:2e:47:89:e6:e5:
b9:59:f0:4a:9a:e6:74:6f:62:ec:9b:ac:38:18:09:
08:14:81:65:29:8b:20:bf:80:36:90:7b:69:c8:aa:
fc:9e:83:de:f2:3c:3e:ec:24:4f:0d:c0:f3:8e:2f:
74:00:79:b0:01:46:6b:c3:15:d3:c9:02:0f:42:3a:
dd:c0:59:46:e2:22:2f:0e:28:34:43:0f:8d:d3:b0:
ff:d9:07:75:6c:0a:9b:07:a7:d4:c8:e3:8d:f6:f7:
26:33:03:06:4b:dd:ef:31:10:bb:be:c4:29:48:07:
fc:e9:46:1c:a5:95:bf:50:72:bf:ab:77:70:6d:60:
ef:81:9a:2d:7a:43:c9:59:92:3c:dd:c9:a2:00:cf:
d3:57:f1:ed:17:1b:5d:18:98:f3:78:ec:5b:c0:4b:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:96:EF:CA:4E:CB:61:9A:E5:FA:5E:F8:05:89:E3:77:9E:62:97
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D12ABF60A8BA11EDBE98D5E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b2:fa:de:2b:05:f6:f8:ac:fa:b8:77:71:ff:be:5b:ba:5e:
56:57:f3:49:86:9c:37:f3:3e:b9:74:07:6b:e9:de:90:c4:5e:
de:f8:dc:b5:64:3e:61:83:ce:0a:cb:2e:b3:1f:89:4b:88:97:
13:7a:0e:62:0a:8c:e6:6c:03:0f:00:c6:b2:e6:7b:20:ba:4e:
8d:36:7c:d2:87:42:a1:e4:71:dd:ef:e1:e1:cd:60:78:90:a3:
17:f1:c4:1b:39:0d:70:eb:10:e9:43:05:cd:7b:b5:b1:60:98:
9d:6c:46:92:38:d6:cb:e3:89:d2:78:bf:59:52:0f:22:96:c3:
47:61:52:b0:fe:20:8c:5c:e0:d4:f4:02:ea:87:13:ef:b9:c7:
de:e5:04:f5:83:50:78:a6:79:4f:a2:c2:41:07:c9:37:e9:7e:
0b:48:20:d0:65:9b:99:4e:37:84:d1:29:a3:6c:f8:66:42:67:
d3:69:66:a9:c0:84:29:f6:e6:3a:cc:09:39:f9:0a:42:11:0b:
92:ce:3c:ed:22:f9:01:ea:8e:8b:f6:12:04:80:75:31:f7:d9:
99:a6:66:a9:18:5b:49:e1:16:ef:fe:3c:44:c1:15:f0:b1:13:
88:69:c0:66:06:bc:b1:c5:3f:e2:64:72:f6:5e:ee:da:0d:8b:
f6:c6:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org