Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/331E958633AC11ED98DF7B8BF1222468.roa
File: 331E958633AC11ED98DF7B8BF1222468.roa (raw, json)
Hash identifier: 9fViGN/1AiAEPNgfQAU5qKwdk2sea7EWSf6DDLkkaB0=
Subject key identifier: 6A:52:A5:46:DE:BE:96:E7:F9:B8:00:3D:90:4D:92:56:E7:CC:E1:E1
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 0344
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/331E958633AC11ED98DF7B8BF1222468.roa
Signing time: Tue 13 Sep 2022 21:37:00 +0000
ROA not before: Tue 13 Sep 2022 21:36:57 +0000
ROA not after: Sun 30 Jul 2023 21:36:57 +0000
asID: 37119
IP address blocks: 105.171.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Sep 13 21:36:57 2022 GMT
Not After : Jul 30 21:36:57 2023 GMT
Subject: CN=6320f7fc-c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:08:bd:4e:f8:3e:ff:dd:aa:30:c0:f6:9c:
b3:17:ba:f0:87:8b:bd:bf:15:3f:f9:71:d2:3a:2f:
87:36:09:7d:f0:68:9e:ea:ab:58:45:6f:41:89:23:
b8:e9:f4:cc:2d:31:cf:0f:45:0e:70:c3:b4:0e:13:
bb:90:e9:6b:63:f6:70:fd:8d:49:1b:88:9a:6a:93:
59:ec:3f:41:91:51:3f:b0:e8:00:64:82:c0:f7:fc:
9e:70:bd:2b:18:c2:e7:9c:00:5c:08:db:8a:09:7b:
6c:49:5c:59:29:ff:bd:d0:1b:8c:5d:d8:3b:36:3c:
56:50:a7:1e:e4:2e:54:72:59:d2:14:84:a8:3d:a0:
fd:f3:b0:ca:73:2d:b6:d9:5d:cd:4b:86:20:a1:4c:
bf:b8:da:58:e9:6f:73:f7:dc:6b:f1:d7:f6:c1:d3:
f2:1c:7a:b7:2e:bf:e2:8d:67:a9:cd:40:b0:d0:01:
61:97:63:43:4c:4a:6f:d9:29:75:c3:f9:7d:e9:18:
5e:f0:8a:35:08:ee:6b:cd:39:e2:31:6d:cf:77:68:
ab:bc:5f:86:dc:70:3e:08:3b:a9:63:f7:a9:38:f6:
d1:96:5b:af:1e:f6:15:df:65:cf:02:9a:c6:0a:78:
f5:a3:a5:48:aa:d2:f2:c0:eb:6c:26:b0:0b:d8:f6:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:A5:46:DE:BE:96:E7:F9:B8:00:3D:90:4D:92:56:E7:CC:E1:E1
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/331E958633AC11ED98DF7B8BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.171.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:9c:e8:59:5f:65:b5:cf:81:54:c9:37:81:48:6e:4e:87:91:
20:a8:a4:6c:c5:23:e3:3d:0d:53:70:ee:ad:53:b6:5a:8a:f4:
4d:de:23:ac:4e:ae:fb:15:55:21:05:07:7d:70:64:c2:22:8d:
b1:37:3d:02:28:24:56:c5:25:d2:f1:ad:f4:e3:7f:7a:f5:79:
c0:99:73:03:b3:62:f5:20:5a:87:aa:aa:f1:8e:10:1f:9c:93:
b3:9a:c1:31:fb:2e:90:0d:54:95:5b:db:e0:04:1c:d0:3b:2e:
75:92:05:1e:06:05:2f:0d:b2:dc:12:20:b2:c5:e8:ff:42:b2:
72:c6:67:fa:c7:c8:07:43:18:82:aa:3d:87:53:86:71:61:9f:
e6:98:2b:0b:88:76:7d:64:9a:8c:60:af:9d:09:b7:e2:04:43:
3e:64:e5:6b:88:f3:e5:a7:a3:2f:73:2f:db:db:26:ed:43:be:
7f:8e:b5:f0:db:6c:73:e2:c6:3e:de:f4:6f:82:e4:74:28:4c:
fc:c8:04:b8:01:d6:32:76:3a:db:c2:bb:67:69:0b:60:47:e3:
af:ae:5d:bd:97:36:57:0c:bb:3f:a6:ec:85:3c:6a:92:83:4f:
5d:c6:c5:5b:31:58:72:6f:7c:bc:42:72:d4:e2:3c:6f:da:6f:
bc:2a:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org