Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/5CD5E4B41A4C11EA97E45668F8AEA228.roa
File: 5CD5E4B41A4C11EA97E45668F8AEA228.roa (raw, json)
Hash identifier: m79tImwZZSUv7rSvCvn5x6FZnikbkvg9bfacAryQRS0=
Subject key identifier: 64:12:2E:11:7B:F5:9D:41:87:A8:07:67:1C:E0:F8:51:B9:EB:3E:79
Certificate issuer: /CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Certificate serial: CC
Authority key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/5CD5E4B41A4C11EA97E45668F8AEA228.roa
Signing time: Mon 09 Dec 2019 06:23:07 +0000
ROA not before: Mon 09 Dec 2019 06:23:01 +0000
ROA not after: Sat 09 Dec 2023 06:23:01 +0000
asID: 327892
IP address blocks: 102.22.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Validity
Not Before: Dec 9 06:23:01 2019 GMT
Not After : Dec 9 06:23:01 2023 GMT
Subject: CN=5dede84b-aec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:82:4f:e1:6c:8d:14:d5:be:dc:36:28:4b:
e1:a3:b3:26:b1:14:dd:62:87:2a:d4:65:21:6c:c1:
79:35:d2:1b:6f:45:d9:ba:8e:2b:93:4b:9e:4b:99:
83:d5:25:1d:5c:70:cb:58:79:43:a1:8a:4d:19:1c:
d3:0d:e5:8c:5f:74:e9:79:d9:c3:b9:35:77:84:c6:
2e:0e:a5:2e:8b:1d:3c:ab:4f:6f:5f:fa:c0:0c:80:
cb:f5:03:39:a4:57:bf:43:c4:cd:28:eb:eb:2c:bd:
e5:dc:84:88:fb:4e:f8:38:fe:b9:49:02:c6:70:95:
34:3d:13:31:a9:12:14:91:b1:f8:a2:18:e6:23:f9:
60:49:43:45:64:65:8e:ca:55:97:6b:e8:9f:9b:74:
4a:97:0a:8d:a8:8e:24:dd:26:85:1d:ac:2e:35:3b:
08:47:5e:a2:29:4d:6a:54:d7:4c:2b:66:d3:01:2e:
78:f1:eb:6c:37:e0:c7:34:69:a2:04:06:6b:7e:cf:
e8:72:c8:71:22:92:3b:14:3b:00:f2:ae:b2:6f:21:
58:16:48:cc:53:93:1f:49:78:b2:80:c5:89:03:d9:
da:ec:47:b1:e1:da:86:eb:cc:b6:e7:9a:f7:9d:b3:
34:72:8c:d7:e0:d6:05:1f:3e:b0:1d:ff:46:5d:3f:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:2E:11:7B:F5:9D:41:87:A8:07:67:1C:E0:F8:51:B9:EB:3E:79
X509v3 Authority Key Identifier:
keyid:C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/5CD5E4B41A4C11EA97E45668F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
102.22.32.0/19
Signature Algorithm: sha256WithRSAEncryption
57:a5:15:20:9b:57:15:e3:96:64:3e:eb:23:8c:c5:0d:23:b8:
7d:cd:ed:46:d7:4b:44:7f:67:d4:bb:77:30:f4:0f:f4:d8:c4:
2a:c5:64:75:c2:93:39:1a:63:68:75:ec:d1:a1:c1:a6:81:f3:
80:fb:3e:ea:bc:7b:dd:4e:c6:64:4b:53:83:23:0f:b1:c6:b8:
a0:3f:99:ed:9b:db:4d:64:73:da:de:af:5c:45:a3:99:1e:6d:
1f:dd:ed:32:c5:fc:f1:d7:62:94:26:2e:3d:ff:60:25:a9:04:
22:61:2b:c2:ce:3e:7b:6b:62:d2:68:c1:b7:ed:59:29:43:da:
c8:07:38:4a:80:f6:43:36:5b:12:2f:6a:96:94:80:19:f2:2a:
3a:dd:d5:70:8c:82:89:57:56:d3:af:ae:82:c5:4c:56:60:73:
33:39:4b:7f:90:30:31:0a:00:bb:c5:bf:1e:09:e5:69:3d:b0:
05:08:45:1f:14:97:cc:d0:92:06:58:c8:c2:3e:38:d9:75:be:
38:8c:a1:97:c3:53:8f:b1:93:05:4b:e1:64:cb:54:06:5e:d3:
b7:d5:a9:d2:c5:f1:10:8f:7e:a7:60:4f:ee:ed:0f:a9:1b:c7:
29:bd:3a:ae:7a:e1:ec:99:1f:5f:72:0f:14:82:9a:6b:67:e0:
40:c4:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org