Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2635F03C31C211EBB08ACD43F8AEA228.roa
File: 2635F03C31C211EBB08ACD43F8AEA228.roa (raw, json)
Hash identifier: JFoZNMTWrwnCWgwu4CHCRoZKkLczIl0Uu5o3p636D8E=
Subject key identifier: F3:FB:52:7F:7C:B9:0C:F7:F3:09:70:1C:66:65:60:13:88:14:42:92
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 30
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2635F03C31C211EBB08ACD43F8AEA228.roa
Signing time: Sat 28 Nov 2020 21:39:10 +0000
ROA not before: Sat 28 Nov 2020 21:39:06 +0000
ROA not after: Sun 30 Jul 2023 21:39:06 +0000
asID: 37119
IP address blocks: 105.169.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 21:39:06 2020 GMT
Not After : Jul 30 21:39:06 2023 GMT
Subject: CN=5fc2c37e-4946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:56:58:b9:e5:9b:ef:49:76:14:b1:dd:02:
30:6f:eb:06:90:ac:aa:7c:2a:02:4a:71:4a:02:56:
92:34:49:57:20:85:ef:ed:91:62:98:46:f6:3d:20:
8c:e8:35:91:17:a7:10:05:7c:11:9b:87:66:1e:89:
6c:ae:dd:10:29:8f:5a:48:0e:c2:32:7e:b8:ea:6a:
06:11:17:c1:64:3c:e8:55:a4:32:14:4b:cb:5b:f7:
c5:d4:f7:c7:c3:b8:0e:12:d3:04:f6:12:c6:62:5c:
f5:8f:68:db:86:96:f9:b2:e2:05:92:94:cd:c2:9d:
37:19:79:f7:ce:5b:7c:6e:39:53:ed:ed:16:a3:57:
57:4d:57:d4:f7:fd:5c:37:c6:e5:6a:7c:54:6e:9b:
6c:52:e6:10:7e:2e:5e:a5:08:e9:11:fa:af:a9:e5:
eb:4d:de:4e:0c:31:d0:79:1c:56:f5:1e:90:33:27:
7c:a7:20:9c:13:b6:12:a5:6a:a9:3f:6d:c7:a1:da:
09:38:b3:50:e4:b9:49:91:43:33:ee:93:17:a3:da:
50:de:ef:c1:6a:7d:52:4c:36:cb:c3:4d:b4:f5:84:
82:8d:9b:22:4d:19:bf:d9:77:24:8f:1a:6d:ce:cc:
42:ad:05:e0:e3:db:1d:31:9c:f9:e8:c3:68:32:f1:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FB:52:7F:7C:B9:0C:F7:F3:09:70:1C:66:65:60:13:88:14:42:92
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/2635F03C31C211EBB08ACD43F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.160.0/19
Signature Algorithm: sha256WithRSAEncryption
22:d8:f9:ce:6d:56:c9:a5:f0:b5:44:ed:7d:1b:32:ab:42:11:
ac:ae:9a:5d:fd:4d:cf:32:f4:cf:61:43:75:18:72:f0:eb:1a:
34:66:c5:88:2e:41:e4:2b:fd:95:29:07:32:80:79:40:30:eb:
40:be:55:6c:22:3e:79:12:91:95:9b:2a:97:bd:07:d6:7f:af:
b2:32:4a:4a:ee:77:53:18:02:24:43:da:85:aa:d4:d4:f8:25:
5e:fe:7e:48:5b:62:2a:7b:14:40:8e:38:8d:60:6b:a5:29:d8:
e0:13:21:ae:21:78:db:18:f4:02:fd:ad:ef:89:34:76:3e:a9:
9b:5c:2f:00:18:cd:16:ce:b1:ea:99:48:ca:e5:57:ec:5e:f9:
b7:6b:b6:98:a6:fe:80:c0:2d:99:ab:e5:d5:c1:54:1f:93:1a:
fa:6b:93:a2:03:b0:90:49:45:a1:bb:ec:0b:09:0f:18:e7:7f:
b0:b8:2c:d5:ef:ea:64:a1:18:6e:09:48:95:82:4e:b6:33:34:
e4:08:43:af:90:41:32:24:db:c2:d1:c5:fc:11:20:f0:25:da:
9a:07:de:63:5b:64:69:52:74:32:f6:4d:65:3a:6b:b5:0d:ef:
a8:eb:bb:49:4d:2d:00:3e:4e:cb:10:34:39:a7:bc:98:6f:4b:
bf:f8:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org