Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
File: 6CF921EA31C911EB9B79AC4BF8AEA228.roa (raw, json)
Hash identifier: E14Xf9e2Sa97Y7QVFop9ljnhL+FmR0tySY9Iz8WAirQ=
Subject key identifier: 3D:52:86:F4:53:AA:D1:71:45:2D:47:8F:F5:A1:A4:86:DF:3E:B5:2A
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 55
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
Signing time: Sat 28 Nov 2020 22:31:15 +0000
ROA not before: Sat 28 Nov 2020 22:31:11 +0000
ROA not after: Sun 30 Jul 2023 22:31:11 +0000
asID: 37119
IP address blocks: 105.172.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 22:31:11 2020 GMT
Not After : Jul 30 22:31:11 2023 GMT
Subject: CN=5fc2cfb3-996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:67:bc:ab:0b:e3:a2:2c:f2:fd:9f:6a:23:
98:9c:39:46:3c:39:17:15:7f:9c:c5:82:b4:58:b0:
13:1f:e5:60:fc:1a:13:62:be:9c:b5:68:f8:ad:22:
e5:ed:45:a6:c8:6e:fb:58:11:5c:a5:ca:75:e2:38:
5a:c3:c8:fc:1e:4f:63:05:e6:15:cc:8e:1c:d5:da:
93:2d:bc:86:b0:a6:4f:79:1d:42:fc:56:5b:bc:5b:
65:03:84:35:53:dc:80:8a:e5:e4:a6:95:53:a7:d0:
84:7b:62:7e:70:c3:be:bf:a9:08:29:da:f3:9c:b1:
fb:93:53:bf:10:ea:a0:f3:0d:c4:76:dd:91:b9:f2:
a4:e8:9f:cc:4d:08:68:22:d9:ee:e1:dd:03:c3:1e:
6c:a6:db:ef:ea:ec:ac:16:bd:a6:db:03:e6:8a:3e:
71:35:78:71:26:95:11:86:7f:ca:90:b7:75:66:d9:
97:fc:d4:17:05:73:01:90:d7:15:65:10:aa:ca:5b:
fa:2e:3f:e1:32:de:14:fc:1a:eb:86:69:d7:a0:d9:
a3:5c:bb:5f:9b:b0:71:23:5a:41:29:98:37:65:76:
01:fc:38:a0:b5:44:5f:30:bf:44:40:6e:98:8d:6c:
a1:0b:71:91:b8:11:12:a1:af:16:c1:96:0b:02:31:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:86:F4:53:AA:D1:71:45:2D:47:8F:F5:A1:A4:86:DF:3E:B5:2A
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/6CF921EA31C911EB9B79AC4BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.96.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:78:5a:1d:24:59:d1:76:43:07:e5:44:d9:16:94:b5:b6:60:
a4:4b:01:db:ae:1a:ab:78:99:71:51:ef:f8:07:b4:e8:c4:0c:
60:49:04:8f:e6:ab:54:12:c8:2d:53:4a:ed:5c:1b:cf:f6:dc:
54:5f:d5:35:43:9b:78:e9:20:a0:cc:9c:9b:73:f6:a9:32:99:
5e:3f:2a:8e:29:f9:47:cc:74:d0:e7:cb:8e:4d:88:7e:ad:00:
b2:86:de:9e:79:ac:24:33:1e:e4:af:b4:43:99:48:ca:0e:01:
64:f6:f3:db:56:82:ad:ae:c5:08:8b:c2:51:40:70:c1:4d:c8:
af:20:a6:52:86:d0:54:4e:10:13:ff:4f:87:24:7f:18:b4:0f:
27:17:1c:cc:b5:ce:00:c7:aa:27:d1:8c:88:a1:38:5f:66:66:
32:d2:59:39:73:5d:84:f3:b3:21:a1:70:1a:d2:7b:3e:4b:a3:
b7:ba:89:c3:23:62:d2:bb:f5:29:31:16:7b:7c:71:0f:da:8d:
3d:86:77:a4:3c:16:0b:3b:62:32:0a:45:08:12:69:eb:e5:83:
c7:c0:6a:f4:bd:54:39:d8:f6:f5:8e:bc:d8:b5:e9:c4:cb:e0:
52:9e:1a:cc:5f:f9:30:3c:88:8b:d2:68:db:23:5b:30:36:4a:
d2:e5:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org