Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6E1AECA1E6E11ED9FC1FDD8F1222468.roa
File: F6E1AECA1E6E11ED9FC1FDD8F1222468.roa (raw, json)
Hash identifier: JhEwL65YdvVi3LmRfnNopzj0SDMQASyGR0LAYHWha6g=
Subject key identifier: F4:6D:AA:74:7E:29:F8:A6:3E:6B:9E:AD:F9:60:A2:DF:E8:CA:7F:E4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 07EC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6E1AECA1E6E11ED9FC1FDD8F1222468.roa
Signing time: Wed 17 Aug 2022 20:55:46 +0000
ROA not before: Wed 17 Aug 2022 20:55:42 +0000
ROA not after: Thu 17 Aug 2023 20:55:42 +0000
asID: 35916
IP address blocks: 161.123.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 17 20:55:42 2022 GMT
Not After : Aug 17 20:55:42 2023 GMT
Subject: CN=62fd55d1-809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:62:7e:e5:33:18:f1:6d:07:0d:93:03:30:
2b:93:f3:f8:d9:21:74:55:d0:41:a6:3a:23:7c:b8:
76:30:a1:19:c0:f1:28:3c:6e:b6:3f:3b:8f:f2:bd:
61:a1:1c:a8:cc:b7:f9:15:0d:a6:c0:4d:77:c8:74:
85:6a:97:16:e2:a7:19:db:b3:fe:c9:b6:aa:29:59:
15:9c:cb:ea:6b:ff:2a:8c:2c:67:22:c4:8f:e2:a0:
ff:f2:b7:cc:8f:d6:e8:e9:6b:65:c8:f7:b1:2f:6a:
fc:83:0d:64:3a:09:db:33:8a:10:24:4f:62:b3:3c:
03:4f:1e:aa:71:d5:f4:92:7e:cb:a8:f9:43:ea:db:
ce:59:dd:33:d5:7a:76:c4:e8:a4:89:38:f6:77:b1:
10:3d:e5:7b:91:70:2f:55:63:4d:11:f0:a0:c0:f5:
a7:81:13:d7:a5:ce:3b:d2:02:01:3f:5e:b3:f7:fc:
a4:c0:3c:35:8a:99:0a:1d:ab:ab:10:02:3b:7e:6d:
94:39:db:95:d0:84:af:f7:48:d9:62:d1:e4:2a:b0:
df:92:9f:af:64:f3:c2:0d:dc:59:62:b7:65:82:f6:
a0:66:88:91:b1:45:34:b7:85:8e:de:5b:be:a9:f7:
e4:6b:75:ae:51:f3:61:4e:8a:3d:5d:93:40:23:54:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:AA:74:7E:29:F8:A6:3E:6B:9E:AD:F9:60:A2:DF:E8:CA:7F:E4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F6E1AECA1E6E11ED9FC1FDD8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.211.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:ef:fd:17:99:b2:83:22:eb:06:e7:0b:5d:b3:34:40:44:
1f:b4:96:03:af:9c:58:ef:7c:af:f8:4b:10:a2:c7:84:2b:9f:
18:3c:8a:3f:b5:b2:ed:d2:f8:ab:59:9a:45:70:db:37:be:59:
80:10:88:ef:00:c5:45:b8:34:fc:d2:5e:ad:71:2c:df:a5:b5:
8d:2e:5b:30:f5:91:da:bf:0e:68:83:e4:03:1e:2b:a2:0b:c4:
4e:18:bd:d4:c8:c8:af:1f:35:70:42:e3:c2:02:ff:04:33:c8:
2c:8e:f7:c9:bf:ff:35:12:67:5a:b6:03:74:f2:35:1a:ed:8d:
48:08:a6:53:e5:94:e4:3d:50:4e:af:90:a6:88:de:b0:67:6e:
72:87:4c:00:21:dc:30:7f:eb:59:60:54:76:33:60:8a:c3:c9:
3b:1a:dc:9a:be:b2:e6:4d:3b:ed:8a:ae:13:0b:94:1a:da:68:
03:7b:3b:e9:d5:2e:51:74:78:f0:49:9a:96:00:cc:43:26:e4:
22:5c:f9:13:4c:07:eb:42:2a:72:c5:1b:c1:05:64:db:f0:f4:
e2:04:8d:11:dd:03:bc:39:23:a1:f1:0c:4b:8f:cd:65:9e:21:
48:c6:26:31:1d:ab:b5:35:30:5b:2e:4b:fe:83:e7:70:61:5e:
f2:2f:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org