Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0FA57F5E31C711EB9E6EF848F8AEA228.roa
File: 0FA57F5E31C711EB9E6EF848F8AEA228.roa (raw, json)
Hash identifier: e4Q7dA2hISkbv6CAZIG6Z5z8cAuEy7h4oojSjlC2M80=
Subject key identifier: 84:80:F5:71:0D:99:A7:59:C4:93:5D:16:75:DE:C9:F3:88:C0:11:BE
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 46
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0FA57F5E31C711EB9E6EF848F8AEA228.roa
Signing time: Sat 28 Nov 2020 22:14:20 +0000
ROA not before: Sat 28 Nov 2020 22:14:14 +0000
ROA not after: Sun 30 Jul 2023 22:14:14 +0000
asID: 37119
IP address blocks: 105.172.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 22:14:14 2020 GMT
Not After : Jul 30 22:14:14 2023 GMT
Subject: CN=5fc2cbbc-31f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:69:be:07:5f:4c:13:b6:e6:e0:f2:c1:f5:
e7:2d:d9:5f:6a:2b:5d:6c:d2:fc:a5:5d:bc:42:a0:
b8:41:9d:ec:14:ad:cc:69:50:e8:1e:e9:3d:f0:f7:
5f:bc:c6:e4:a5:23:a0:51:cf:14:2b:4e:f4:c1:f3:
bb:7e:ad:7c:e9:c9:62:1e:2d:25:1d:a6:7c:b4:0c:
5a:6d:73:27:ab:d7:67:c1:4a:44:5d:1a:07:12:35:
9f:57:6e:c2:40:2a:8b:19:2c:cf:28:e1:7c:4c:47:
ef:14:83:8f:30:48:f7:f4:86:63:61:66:43:91:2e:
b4:04:7a:67:15:12:b9:06:da:d2:6e:1f:20:ae:db:
c8:fd:67:54:0f:d1:a5:96:2e:28:89:79:b8:31:3d:
5d:a0:1b:2e:b5:e4:fe:c7:ad:ce:1c:02:50:7e:c9:
24:ef:f6:2c:f1:07:04:a0:a2:87:34:ba:ba:b8:63:
1d:b6:99:3f:3d:a8:5d:61:36:a6:8a:96:db:0b:05:
3e:1d:44:d8:14:b1:22:1b:5b:b3:77:e2:23:70:a0:
35:60:4d:cf:52:27:c0:25:04:ee:22:3f:a2:fe:3a:
69:28:9a:0b:d0:42:b3:36:db:80:25:2f:e5:4b:0a:
96:6c:18:a6:c7:51:33:06:74:ba:0d:28:e0:bd:cd:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:80:F5:71:0D:99:A7:59:C4:93:5D:16:75:DE:C9:F3:88:C0:11:BE
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/0FA57F5E31C711EB9E6EF848F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:23:24:e5:ec:ba:27:d8:6a:74:94:67:47:a6:6f:d2:31:85:
66:59:58:c1:5b:04:a5:10:0b:d9:c7:c9:5a:e0:6e:d3:2d:fa:
44:cd:2c:58:8b:50:fc:3f:5d:b6:c6:90:e4:0f:0c:32:bc:ae:
f5:af:d9:34:ee:58:cb:8b:53:65:43:40:d8:9e:07:85:d6:42:
d2:fd:d0:29:82:49:b2:2d:74:02:f5:e0:90:ef:82:48:68:53:
da:64:11:67:e9:d5:28:84:73:4e:d4:7c:c3:e6:c6:00:07:11:
bc:06:d0:a4:12:dd:74:dc:ba:85:94:c0:94:2c:e2:3f:e4:73:
98:41:61:64:a9:99:69:ca:61:43:64:b0:33:d1:dc:35:9a:e8:
f0:83:d9:d4:f3:ef:a1:af:17:5f:fe:77:76:f0:93:af:bf:4f:
1d:21:4d:21:56:9f:4d:6f:76:e3:4a:d2:93:60:28:0f:ae:8b:
b8:48:3c:ce:9d:15:8f:82:f1:4f:e4:14:e7:47:e1:0e:c4:a7:
29:3d:b9:7b:9e:f0:a2:ca:88:cc:cc:b1:30:c4:9b:da:cc:46:
83:a2:cf:31:67:c1:cd:99:60:61:11:6e:8f:69:1b:ab:47:98:
09:14:2f:34:5d:be:c7:ef:3c:92:6b:00:f5:96:e3:08:a4:9d:
e6:9d:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org