Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
File: E3D2A52E3D7B11ED8335BBA3F1222468.roa (raw, json)
Hash identifier: RrDjmo1ExT/jBCiuxQesFZJTzH3IeHq97i6fllR8d8c=
Subject key identifier: 8B:C2:80:DE:4F:5E:6D:66:B6:16:FA:45:E7:D9:D5:EC:2B:C8:F8:CD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0847
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
Signing time: Mon 26 Sep 2022 09:16:23 +0000
ROA not before: Mon 26 Sep 2022 09:16:19 +0000
ROA not after: Tue 26 Sep 2023 09:16:19 +0000
asID: 203999
IP address blocks: 161.123.2.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:16:19 2022 GMT
Not After : Sep 26 09:16:19 2023 GMT
Subject: CN=63316de7-0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:c5:b6:e5:2d:0c:4c:50:26:63:72:f3:ad:
68:e9:83:b1:65:44:7f:a7:a1:29:3d:4b:c5:56:31:
c6:12:4a:0f:ed:38:da:b3:3e:d9:41:72:49:52:73:
ee:c4:94:3b:71:4f:fd:1e:0f:0a:79:06:8c:12:45:
07:3e:3e:d5:ea:1b:6f:33:e0:d5:71:60:bd:c7:2d:
3e:fb:fe:2d:c0:8e:d8:1a:3f:44:a1:c3:98:af:c5:
cf:8a:5b:ec:9d:af:9f:d2:73:4a:a9:de:fa:3e:ee:
f0:e1:e5:1e:4c:47:6d:30:72:71:e1:ca:4e:53:5c:
63:62:fc:2d:f1:2b:e3:07:e0:03:fd:69:43:51:5a:
65:38:1c:3b:31:23:ce:de:a3:20:0c:22:82:bf:06:
ff:c7:a6:a0:b8:f0:98:3c:32:57:35:e6:d8:d8:0e:
d4:bd:93:97:24:9f:2a:32:cc:ac:50:21:b9:77:be:
00:c8:e8:be:cf:c1:91:ce:91:99:09:ec:a4:5a:8c:
66:ff:fa:fd:99:83:e3:43:2f:31:41:ce:b9:ee:2b:
43:d0:bc:75:f3:25:8e:ba:33:93:77:df:ae:da:24:
78:09:af:cb:39:17:ae:09:da:8f:23:eb:38:80:07:
2f:40:5b:4b:bf:a7:30:6d:30:82:e0:74:03:e3:cc:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:80:DE:4F:5E:6D:66:B6:16:FA:45:E7:D9:D5:EC:2B:C8:F8:CD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E3D2A52E3D7B11ED8335BBA3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.2.0/23
Signature Algorithm: sha256WithRSAEncryption
29:aa:00:58:37:09:74:31:5a:91:70:6e:ea:00:71:cc:78:1d:
3c:1f:99:43:67:a9:73:c4:35:ea:b3:07:79:0e:90:59:fc:d3:
62:e5:9c:d5:69:76:35:f3:e8:aa:32:fa:ee:32:95:43:06:f0:
de:f6:8e:76:87:00:ae:8b:6d:cc:0a:c9:59:43:2e:25:d0:dd:
21:60:0d:70:9a:2e:9f:be:90:d7:d4:4c:82:5b:db:b7:c0:4f:
69:1a:a5:76:45:0a:79:fd:ea:a9:ab:00:ea:cc:e4:d2:19:ca:
3a:2c:6a:45:4e:d2:e7:9d:c1:6e:10:b6:13:f0:e3:be:18:39:
0c:5f:4b:ad:4c:4d:b9:1f:1d:53:f5:52:9c:ad:02:b8:fb:6c:
69:cc:d4:98:5a:cf:45:6c:6a:cc:71:7a:62:ed:d3:8f:f3:7b:
0e:a6:13:71:c3:d7:1b:3e:85:92:dc:07:cd:94:f4:ff:c1:75:
09:91:d0:cc:8e:44:80:6f:b0:78:e1:52:58:00:26:a4:27:e8:
67:4d:71:32:57:17:70:d4:27:13:8c:9c:e5:bc:1b:1f:e5:48:
fb:7e:62:dd:c1:91:bf:28:a0:69:ca:ca:04:15:51:e4:84:94:
67:21:22:81:f1:22:64:ac:0b:5a:10:3f:3e:be:bd:32:95:fc:
52:95:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org