Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D27407AC3BD111EC9E201333D8A014CE.roa
File: D27407AC3BD111EC9E201333D8A014CE.roa (raw, json)
Hash identifier: 7kdkCRRDIK8FtuP0MevMGDbUlSNB2VR+rz6rT8p9f7Q=
Subject key identifier: 9C:05:3E:18:FA:3D:B4:39:CE:64:13:3E:B8:2B:E4:1A:94:34:99:64
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 021C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D27407AC3BD111EC9E201333D8A014CE.roa
Signing time: Tue 02 Nov 2021 11:41:31 +0000
ROA not before: Tue 02 Nov 2021 11:41:27 +0000
ROA not after: Wed 02 Nov 2022 11:41:27 +0000
asID: 327790
IP address blocks: 161.123.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 2 11:41:27 2021 GMT
Not After : Nov 2 11:41:27 2022 GMT
Subject: CN=618123eb-ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:a4:04:e5:02:2e:35:3f:66:2a:32:f7:53:
be:80:c6:09:28:28:36:b2:c4:09:1a:fa:35:e4:bb:
26:d3:2e:9b:61:65:3f:b4:f7:9d:cf:d2:95:5d:10:
c8:d8:ac:ee:b4:92:53:ea:61:8d:b7:7c:dd:21:0f:
c4:a7:f3:60:be:e1:f1:d4:36:53:f5:fb:2e:f2:a2:
1b:d8:6f:dc:92:29:5b:82:56:38:47:30:44:26:e1:
0f:18:37:a2:4d:b3:84:df:35:ff:e8:f7:35:40:a0:
62:cf:83:56:4f:c2:63:a1:85:6d:2b:14:cf:22:ab:
28:04:f9:18:de:75:07:e7:6b:03:9d:b3:99:76:3d:
25:15:26:65:d3:f6:4f:3b:80:ad:1b:06:27:ab:16:
f6:ec:62:48:2c:3d:c5:95:96:43:e4:24:2b:5e:2a:
83:86:86:07:f6:67:2a:dc:cf:40:6d:3c:b2:53:c9:
d6:21:cf:9d:e0:f6:bc:19:b6:cf:3c:bf:58:bd:f2:
42:a7:e2:be:a6:e9:e7:e0:3c:c8:0f:76:cd:de:b2:
d7:7b:ad:36:2d:11:9f:a5:c8:22:83:24:50:c2:10:
6f:c8:be:27:76:bb:28:77:23:27:34:dc:19:55:6f:
07:83:d3:51:48:9c:b0:d3:bf:68:19:f3:14:15:63:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:3E:18:FA:3D:B4:39:CE:64:13:3E:B8:2B:E4:1A:94:34:99:64
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D27407AC3BD111EC9E201333D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.248.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ce:c7:a2:b4:cb:68:75:a5:c1:8d:2c:c1:47:17:a4:60:6a:
fb:ac:3e:09:bf:59:a6:cd:40:82:9a:a1:ee:ae:69:c8:4e:3b:
5c:78:5f:bc:2f:1c:ea:da:3d:54:42:7a:d8:fb:2d:50:7a:65:
d9:13:d7:31:de:5a:20:0d:5e:e9:b5:26:81:df:c6:9c:93:64:
21:8b:c0:3a:c7:1a:df:2e:04:35:e2:dc:16:58:22:e0:09:4a:
92:59:5b:2b:bc:70:21:56:43:76:75:52:7a:0a:07:9f:e3:e7:
31:0a:5d:df:a9:e0:6c:6d:57:06:a5:02:67:1b:1a:09:8e:0d:
f3:5f:72:94:78:b3:79:11:ef:c7:8e:92:54:d8:29:bd:5c:5e:
46:4b:80:89:86:e3:94:01:d0:70:30:8c:9f:e6:ef:d3:23:3e:
7c:2c:83:95:7f:94:0a:c9:8e:00:3f:99:65:47:5d:45:42:77:
11:77:48:ce:b4:b5:13:a3:0b:eb:84:1f:0f:11:3c:57:f7:28:
80:2f:7c:2d:8d:ed:e7:56:71:54:b2:7a:b2:c3:40:73:9e:da:
09:d6:0a:f1:08:88:de:67:39:79:95:c8:99:52:ca:a8:41:d4:
41:2a:80:60:66:84:50:cc:10:f3:11:b7:5b:73:ed:56:43:e7:
0e:e7:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org