Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D3ABD0A2C30F11ED819D867DF1222468.roa
File: D3ABD0A2C30F11ED819D867DF1222468.roa (raw, json)
Hash identifier: bOZAFxMXHnQHgLaCtCzMhcCVoYIIYmrb+NrW/2XSuVU=
Subject key identifier: 1F:F5:D7:73:5E:C6:9C:AF:02:69:BF:B3:02:17:2C:68:BC:2F:66:35
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A07
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D3ABD0A2C30F11ED819D867DF1222468.roa
Signing time: Wed 15 Mar 2023 09:00:26 +0000
ROA not before: Wed 15 Mar 2023 09:00:22 +0000
ROA not after: Fri 15 Mar 2024 09:00:22 +0000
asID: 207990
IP address blocks: 161.123.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 09:00:22 2023 GMT
Not After : Mar 15 09:00:22 2024 GMT
Subject: CN=6411892a-5c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:3b:99:41:4a:53:67:5f:6e:67:bf:32:88:
51:01:d6:50:26:26:2f:b6:5a:6c:4e:26:78:7a:4e:
e0:dd:09:bd:2d:db:97:a3:c8:81:cd:c4:d5:2f:a1:
d0:ec:a1:22:95:f8:99:eb:27:a9:4e:00:24:3d:6d:
47:15:b2:af:74:f4:5f:71:b1:75:b1:c9:b7:3a:a0:
5b:a2:54:99:a6:ad:06:a3:73:e1:d6:be:ba:33:f4:
db:98:6f:4e:9c:06:45:f6:0d:84:2b:b0:a6:8c:87:
1c:9e:69:6e:e7:8e:57:6a:46:98:1a:62:89:60:06:
f9:28:15:69:d6:2d:ca:b2:33:d2:51:9e:b0:b6:ec:
84:06:d4:f2:25:77:a9:15:e9:38:12:4b:54:f4:ef:
90:0d:20:df:ec:7a:e8:6c:78:4c:59:71:1f:cd:01:
43:6f:6a:f1:1e:b4:fb:18:b7:46:98:19:0e:a3:60:
36:61:11:ce:00:14:fd:3c:32:b7:b0:3f:89:46:66:
87:2d:72:90:8e:38:ce:30:a7:3c:33:4e:30:09:ce:
a5:40:eb:fb:b2:21:93:e9:36:42:f6:59:67:5b:58:
1a:17:73:27:9f:56:c2:54:b8:4d:41:31:e2:2f:54:
67:9f:85:8e:6d:28:46:24:6a:36:23:54:3d:be:45:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F5:D7:73:5E:C6:9C:AF:02:69:BF:B3:02:17:2C:68:BC:2F:66:35
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D3ABD0A2C30F11ED819D867DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
81:cc:d8:45:54:83:1c:85:19:97:c2:0d:02:87:cf:10:a8:75:
48:4d:53:9a:fe:86:70:53:f7:4e:0f:82:9d:f4:23:80:35:7b:
75:bf:cd:a9:90:49:34:a4:53:97:f6:2c:fd:88:c5:03:d9:18:
53:38:17:c0:79:11:1a:5b:ef:df:2b:c7:d0:45:5b:d2:72:e6:
c4:f3:42:d9:58:40:8c:0a:56:63:d9:e8:d3:d2:e4:02:c9:c7:
69:e3:98:30:d7:c7:7b:f4:8b:72:55:b5:38:a2:28:d2:53:a2:
e5:78:fb:68:3e:a0:63:f4:09:95:4e:29:de:92:9e:ca:cf:c1:
8d:c8:92:f5:55:63:6f:8a:2c:79:bf:0f:12:e5:e3:f5:62:f8:
2f:b9:8a:e1:9b:fb:53:2e:94:60:fa:a9:ba:1a:32:0c:b4:9a:
49:d3:c3:57:0a:a6:e2:a7:a6:9f:ab:4f:f3:91:2e:2f:13:c8:
8e:4a:71:73:54:a8:fe:6d:4b:78:87:d8:c6:de:51:33:8c:85:
21:80:03:27:ee:5a:a9:5b:3e:14:5f:18:ab:ba:aa:54:cd:83:
82:a7:18:54:67:8c:00:5d:7b:f2:6d:17:df:a8:c1:27:b3:e4:
9d:57:fd:c6:ca:11:88:e7:bb:4b:17:16:77:6d:6e:05:f1:fc:
40:b7:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org