Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A6ED34834C911EB9C14FC2AF8AEA228.roa
File: 3A6ED34834C911EB9C14FC2AF8AEA228.roa (raw, json)
Hash identifier: 56MtwYqUDChfYJZUbtIbkPfx1uMTSy6xouBu/PSfAYU=
Subject key identifier: 5A:6B:61:6A:8C:33:6A:38:7C:A6:A6:9C:E3:9C:FD:09:10:6F:1E:33
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 8E
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A6ED34834C911EB9C14FC2AF8AEA228.roa
Signing time: Wed 02 Dec 2020 18:07:24 +0000
ROA not before: Wed 02 Dec 2020 18:07:18 +0000
ROA not after: Sun 30 Jul 2023 18:07:18 +0000
asID: 37119
IP address blocks: 105.168.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Dec 2 18:07:18 2020 GMT
Not After : Jul 30 18:07:18 2023 GMT
Subject: CN=5fc7d7dc-cdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:b3:1d:f2:c8:db:06:51:37:e1:fe:c4:97:
80:b9:e9:d3:58:53:f3:0f:fd:ba:cd:fa:16:a3:1b:
89:98:65:eb:e8:45:9e:de:d7:99:54:61:12:1d:ad:
30:63:93:a3:9d:f1:fa:54:06:77:59:d6:4f:d8:de:
e0:86:74:9e:c9:e4:a9:42:3d:17:a9:43:09:cc:0d:
7f:f1:b1:7e:fa:ea:ce:61:b1:8a:68:8c:4b:51:6b:
99:ab:99:f1:53:37:e8:81:4c:3a:c7:a3:c8:b2:08:
43:14:8d:9c:64:19:3e:8a:16:59:b7:df:0a:ab:a0:
26:81:f2:c4:7b:5a:00:58:1c:eb:91:5b:47:66:fb:
0c:10:da:ef:70:d5:3a:44:b4:13:d1:5f:43:77:ea:
15:b9:79:59:a5:a0:43:68:10:d2:3f:b9:9b:79:ab:
a3:de:ca:68:6b:82:8a:01:7e:e2:44:00:50:93:23:
8c:74:a2:18:86:7d:68:0d:6c:17:71:78:fd:b1:60:
c9:82:7e:fd:37:b2:08:81:6a:c3:9d:a0:b9:48:52:
fc:0c:a5:45:aa:87:ed:c0:7a:f1:97:fc:ee:65:57:
e1:c3:0c:43:f7:32:d6:e8:01:8f:d5:19:5b:a5:f5:
8e:15:3b:a1:8c:b8:98:35:58:5b:76:bb:e6:39:d2:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:61:6A:8C:33:6A:38:7C:A6:A6:9C:E3:9C:FD:09:10:6F:1E:33
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/3A6ED34834C911EB9C14FC2AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:bb:dc:d3:4e:c7:e9:c0:3a:f6:0c:8e:2b:8a:ca:85:77:02:
22:17:a1:78:21:47:f6:de:5b:0b:89:e6:50:d0:5d:a7:9d:85:
ff:82:c1:49:99:44:68:d8:d5:a1:9e:87:de:6a:df:4c:83:c8:
11:8c:f8:c7:ad:3c:e0:3f:00:35:44:b0:af:f5:3f:ca:7c:f5:
16:57:6c:88:b3:e4:e2:b0:f6:22:87:cc:cb:2c:42:eb:70:19:
e6:f2:4e:ac:80:78:1c:4e:02:01:b8:74:3f:d8:4d:a3:f5:2d:
46:0d:f4:fa:87:2a:0d:ad:2c:7d:52:ec:74:dd:ab:44:3d:db:
d6:bf:df:c4:06:84:49:0a:f3:15:07:00:7d:44:87:e7:45:80:
0f:7d:c3:26:39:dc:66:9d:7b:f9:34:72:e8:24:87:29:8f:f0:
e1:a2:33:ef:ea:33:01:f0:3b:cf:ab:24:7a:d5:e7:d3:ea:fb:
f7:5e:5d:43:bf:78:a4:97:d1:29:2e:92:11:a3:e4:d9:76:7a:
86:95:11:c8:fa:04:27:47:2d:43:3c:83:7e:1b:3e:1c:73:bd:
f9:76:77:97:b6:91:af:59:00:05:c4:af:f2:6c:bf:9c:ca:5f:
01:f9:f5:68:0e:51:c3:c3:82:69:36:af:a3:fa:61:54:c4:2a:
ba:9a:4c:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMDEyMDIxODA3MThaFw0yMzA3MzAxODA3MThaMBgxFjAU
BgNVBAMTDTVmYzdkN2RjLWNkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN+bMd8sjbBlE34f7El4C56dNYU/MP/brN+hajG4mYZevoRZ7e15lUYRId
rTBjk6Od8fpUBndZ1k/Y3uCGdJ7J5KlCPRepQwnMDX/xsX766s5hsYpojEtRa5mr
mfFTN+iBTDrHo8iyCEMUjZxkGT6KFlm33wqroCaB8sR7WgBYHOuRW0dm+wwQ2u9w
1TpEtBPRX0N36hW5eVmloENoENI/uZt5q6PeymhrgooBfuJEAFCTI4x0ohiGfWgN
bBdxeP2xYMmCfv03sgiBasOdoLlIUvwMpUWqh+3AevGX/O5lV+HDDEP3MtboAY/V
GVul9Y4VO6GMuJg1WFt2u+Y50v1/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWmth
aowzajh8pqac45z9CRBvHjMwHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzNBNkVEMzQ4MzRDOTExRUI5QzE0RkMyQUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZpqEAwDQYJKoZIhvcNAQEL
BQADggEBAKq73NNOx+nAOvYMjiuKyoV3AiIXoXghR/beWwuJ5lDQXaedhf+CwUmZ
RGjY1aGeh95q30yDyBGM+MetPOA/ADVEsK/1P8p89RZXbIiz5OKw9iKHzMssQutw
GebyTqyAeBxOAgG4dD/YTaP1LUYN9PqHKg2tLH1S7HTdq0Q929a/38QGhEkK8xUH
AH1Eh+dFgA99wyY53Gade/k0cugkhymP8OGiM+/qMwHwO8+rJHrV59Pq+/deXUO/
eKSX0SkukhGj5Nl2eoaVEcj6BCdHLUM8g34bPhxzvfl2d5e2ka9ZAAXEr/Jsv5zK
XwH59WgOUcPDgmk2r6P6YVTEKrqaTJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org