Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29AE43C634CF11EBA7A8E230F8AEA228.roa
File: 29AE43C634CF11EBA7A8E230F8AEA228.roa (raw, json)
Hash identifier: oG8LeOy3bm8cUb6Sxc6Q0QfCEpo2KeMQHog2DcB2HNI=
Subject key identifier: 44:7A:1F:BA:D7:F9:89:DF:E0:C0:D8:AA:01:9A:6F:06:AE:68:AA:78
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 96
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29AE43C634CF11EBA7A8E230F8AEA228.roa
Signing time: Wed 02 Dec 2020 18:49:53 +0000
ROA not before: Wed 02 Dec 2020 18:49:49 +0000
ROA not after: Sun 30 Jul 2023 18:49:49 +0000
asID: 37119
IP address blocks: 105.172.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Dec 2 18:49:49 2020 GMT
Not After : Jul 30 18:49:49 2023 GMT
Subject: CN=5fc7e1d1-8310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:1c:52:66:88:db:b0:7e:ac:40:94:48:47:
95:b9:78:1f:84:3f:15:34:bb:8b:a7:e9:5b:ed:8a:
20:9c:73:e0:c0:7e:07:4d:42:61:e1:17:b3:d1:c2:
04:19:31:8d:c9:a3:9d:18:58:31:ef:7f:85:34:e8:
3f:88:06:b5:3d:6c:03:19:d0:1f:6b:7a:b0:a5:a5:
74:f2:1d:cf:8d:d6:46:32:b3:c5:79:b3:4f:a2:5c:
ac:cb:c3:b6:d3:90:76:b5:9d:02:8c:e5:df:e5:40:
5b:8a:53:77:21:a5:1a:b7:e4:58:eb:34:62:8c:d2:
55:bf:a8:ba:cf:be:5c:bd:6a:22:ea:2f:3a:f9:e7:
ef:2e:c5:bf:f2:3f:98:12:cb:93:99:53:d6:18:7d:
12:eb:c4:ce:d5:1b:af:37:af:a6:7c:4c:76:bf:fd:
bd:1c:0a:9b:38:ca:42:b8:d4:19:24:0a:75:21:52:
4d:95:50:04:8a:4d:5b:ef:5f:3a:72:90:53:39:fe:
21:4e:fb:26:c1:b2:9b:96:ea:e3:75:dd:cd:3f:05:
af:c3:4d:79:67:6f:ea:d1:8d:78:c7:23:4a:b5:8d:
e9:9b:70:84:d0:f2:3d:cf:a3:b5:24:4a:84:34:89:
40:9c:dd:88:8b:b3:a3:3e:69:28:3c:d8:4c:16:00:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:1F:BA:D7:F9:89:DF:E0:C0:D8:AA:01:9A:6F:06:AE:68:AA:78
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/29AE43C634CF11EBA7A8E230F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.192.0/18
Signature Algorithm: sha256WithRSAEncryption
58:e5:66:4a:2e:0a:c8:2a:d7:bd:fb:7a:33:59:d4:0b:c9:57:
ac:65:02:64:43:8d:27:9d:8f:bc:f9:0f:15:44:a2:ee:ca:68:
4f:b4:bc:d6:ea:63:9c:05:84:5e:b1:a7:42:de:7f:c8:26:31:
85:b1:76:f9:7d:4b:e1:b9:c4:68:d4:b5:46:2f:d3:4d:9d:41:
3c:fa:bb:9c:e9:9f:3d:58:16:65:4a:4c:e1:fe:a7:11:83:ca:
a8:e2:e2:46:95:75:f3:5a:49:70:a0:ed:55:35:36:4f:5d:29:
45:66:b2:1c:b3:a2:c8:87:40:78:e4:e3:cd:84:c0:32:89:8a:
cf:0f:8c:ac:64:9a:55:20:97:4a:3c:c1:df:91:02:eb:3f:66:
31:f2:14:ba:e9:8e:60:be:9f:0d:35:a2:06:5c:9f:20:d5:4d:
8a:c8:8e:45:53:6a:d8:cc:32:da:16:5f:61:74:b9:4a:5f:18:
0e:c4:4e:11:22:a5:a5:39:23:ea:80:35:83:62:15:80:df:95:
ea:0c:85:27:c2:d8:a0:25:2d:16:8b:7d:a8:19:0d:4d:d8:ea:
5d:88:e5:a8:1d:77:99:eb:aa:f9:c5:97:42:60:ea:ed:7f:51:
e5:60:b2:a6:f5:df:46:ba:e8:fe:83:44:fb:ce:ac:bb:b1:b1:
c1:a4:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org