Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FA885FBC95FA11EC86A058D95A40D577.roa
File: FA885FBC95FA11EC86A058D95A40D577.roa (raw, json)
Hash identifier: Ba33zCv0mDhorgFVKfv5oB2OFjVY6KicX1kOHlbNMQ0=
Subject key identifier: A1:81:25:C1:13:9B:24:A6:F6:88:DB:94:47:01:21:26:CB:8F:1B:12
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 05EA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FA885FBC95FA11EC86A058D95A40D577.roa
Signing time: Fri 25 Feb 2022 05:22:52 +0000
ROA not before: Fri 25 Feb 2022 05:22:47 +0000
ROA not after: Sat 25 Feb 2023 05:22:47 +0000
asID: 327790
IP address blocks: 161.123.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 25 05:22:47 2022 GMT
Not After : Feb 25 05:22:47 2023 GMT
Subject: CN=621867ac-cdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:1c:22:3c:e6:c9:31:f8:43:17:9d:af:9a:
88:d9:a7:f2:c9:b2:88:ce:fd:2e:9c:98:07:17:db:
a1:d5:9d:f7:ea:60:51:e2:9a:4b:96:ce:82:c5:4c:
24:be:d7:ff:29:ab:d0:58:ee:16:53:f9:79:ca:c8:
f8:f0:28:f8:e2:42:ab:0e:a5:4c:a9:a0:f8:31:e5:
9c:e1:a7:44:7f:fa:7b:e7:6f:18:9a:55:b9:47:09:
43:46:96:f6:24:1b:13:a8:d8:04:dc:9a:7b:8e:2d:
53:46:fa:d7:36:17:98:a5:4d:4a:54:33:5e:77:00:
bc:ae:1d:1a:b0:99:fa:e7:14:a2:68:c9:43:66:ff:
bc:42:18:9f:7d:64:c0:6d:ae:4c:26:74:c2:a4:3e:
54:fe:7d:3b:49:a5:94:8e:be:7f:19:49:a7:a6:31:
ea:50:19:be:4d:1a:2f:85:84:7c:9e:a5:42:30:d4:
fd:a2:ad:f3:06:86:aa:ec:46:e5:f8:21:96:93:a9:
fb:24:23:7d:2d:08:c0:66:81:20:cb:27:6b:ad:c8:
f1:9b:6d:7b:dc:9f:a7:f4:6c:21:ff:5b:21:d5:92:
c3:5b:27:bc:37:74:74:b8:82:35:6a:83:e5:3e:ea:
97:d2:30:43:2d:d5:9f:e7:e3:e1:54:48:de:49:95:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:25:C1:13:9B:24:A6:F6:88:DB:94:47:01:21:26:CB:8F:1B:12
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/FA885FBC95FA11EC86A058D95A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:e3:8d:d2:91:b6:55:36:c2:8d:39:5f:2e:3d:e5:fa:dd:51:
8b:a9:63:54:31:fa:9c:e1:40:78:35:41:45:d3:a7:11:b9:ca:
45:43:6d:5b:8e:4c:e5:19:7b:8e:57:8e:3c:7c:15:19:e3:63:
99:32:22:fc:4d:86:1f:a5:4b:71:3e:8d:f2:ad:7e:ef:dd:9d:
cc:ae:e3:15:86:ae:45:70:c2:f7:ca:1a:67:61:09:06:21:a6:
e1:3e:ce:d3:98:af:28:09:52:ea:df:39:86:41:eb:36:ea:7f:
d7:46:3b:38:65:f2:6a:8c:38:23:52:7f:ac:57:2b:e8:bd:d1:
1d:46:e6:3d:c0:7f:99:70:4b:2a:ea:e4:75:fa:96:9d:c3:46:
43:a9:f4:69:6e:9d:e5:25:99:04:1b:50:18:cc:44:ae:fd:ce:
0f:51:49:20:fa:b1:ba:d2:29:0e:b7:54:fc:5e:b4:2e:a2:eb:
55:33:27:16:92:d6:4e:4e:09:08:d0:45:d6:96:9b:5f:2f:d0:
03:3b:31:20:95:eb:6e:65:a7:de:36:fa:1b:b3:8e:0c:8c:42:
02:79:c1:fd:c9:cf:31:4b:13:f1:ad:fc:76:37:7c:69:2d:25:
d6:93:59:9a:55:b3:9a:5c:6a:07:10:a2:9d:99:73:6c:94:f6:
32:16:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org