Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
File: 5F528C5631CA11EBBE7C8A4CF8AEA228.roa (raw, json)
Hash identifier: 9lsbu4EoBFKPt/gpCdgH+0uPtOEgVcFm5pQhE0Vr+So=
Subject key identifier: 4E:FC:A2:7A:3A:3E:55:FE:D5:B2:B1:5B:AF:59:79:10:F1:9F:E4:7A
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 5B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
Signing time: Sat 28 Nov 2020 22:38:02 +0000
ROA not before: Sat 28 Nov 2020 22:37:56 +0000
ROA not after: Sun 30 Jul 2023 22:37:56 +0000
asID: 37119
IP address blocks: 105.172.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 22:37:56 2020 GMT
Not After : Jul 30 22:37:56 2023 GMT
Subject: CN=5fc2d14a-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:5f:54:4a:9b:a2:e6:ee:f3:22:ae:c6:7d:
ec:5a:1d:30:b8:98:b4:ed:a0:d7:b4:e6:32:94:13:
d6:19:84:04:60:0d:13:f8:37:d2:6b:79:5f:75:5e:
74:7a:51:2b:b8:c6:13:dc:84:3b:ad:c3:47:ea:d9:
13:1f:62:0c:26:d0:9c:e1:70:f7:f4:77:66:38:d5:
8b:30:a5:16:30:f2:67:af:37:12:39:23:c8:bf:99:
db:e9:b2:18:2b:9d:cc:72:94:04:a6:19:05:71:28:
52:29:cd:ff:19:ee:3a:68:70:d1:1f:28:e8:53:8d:
db:76:81:98:f3:f0:c4:9a:6f:93:4a:12:6e:3c:08:
f0:f5:9f:e2:0d:86:7b:41:e3:97:cf:04:7b:4a:1c:
ad:b9:44:af:52:d5:51:1e:6e:e6:0e:b7:ce:cc:8c:
ed:30:1b:98:53:05:ba:b8:6a:ce:8a:ea:ad:5f:dd:
83:cf:e9:a5:0c:1f:76:be:a2:63:cd:25:2e:de:c6:
6d:d9:6d:69:0b:31:5c:eb:ac:ec:91:d5:71:4c:87:
6f:8e:b2:15:92:ea:35:f7:8d:70:54:7e:d2:f1:88:
64:da:6f:c4:56:d1:3d:e2:41:f6:fe:e8:8e:93:1e:
a3:ca:d6:0f:3b:ab:b5:06:d5:d4:5f:2b:88:27:11:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:A2:7A:3A:3E:55:FE:D5:B2:B1:5B:AF:59:79:10:F1:9F:E4:7A
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5F528C5631CA11EBBE7C8A4CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:f3:a5:ca:ab:ec:a7:85:e6:2d:6b:f6:e8:8a:41:da:7e:b3:
40:d2:23:f9:e3:ec:89:a1:14:a5:39:7e:bc:f5:fe:fd:d0:22:
e4:7f:a8:04:8a:3a:4b:ab:ef:a6:12:8e:70:2c:f7:43:a3:65:
fb:c8:56:75:8a:71:b1:c9:09:b9:52:64:02:5c:de:c9:1a:79:
66:7a:8d:df:2b:d9:88:9e:ed:80:76:4e:ca:7f:fa:4d:e4:91:
3c:e6:52:18:da:03:d9:fc:df:b8:84:00:4a:24:cf:fa:bb:46:
bf:1f:27:55:d7:58:90:14:5f:c0:58:12:f5:d5:39:e5:42:2a:
3e:63:07:1d:08:58:ea:3d:a0:c2:ef:08:47:4f:60:7e:e1:d5:
69:ff:1c:9a:08:16:72:fa:63:dd:79:af:5b:88:3a:a4:9e:7c:
ab:07:d2:78:88:f1:5f:a3:a7:df:ac:43:f1:8c:6e:8c:c7:b7:
8d:a6:03:dc:57:6c:7d:fc:c4:b1:71:18:44:4e:a4:f2:48:19:
bf:5a:c7:a8:88:1f:7d:9a:aa:70:e5:ff:0b:70:01:fa:18:10:
3d:ae:e8:b2:39:e4:b2:89:e7:7f:43:0a:41:44:4b:af:e7:90:
c9:49:df:2c:02:51:70:2a:8a:11:8f:17:de:2c:2b:e8:19:dc:
7d:96:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org