Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8CF34E5A34CE11EB9D635730F8AEA228.roa
File: 8CF34E5A34CE11EB9D635730F8AEA228.roa (raw, json)
Hash identifier: G0gWhyXSOzMOP8ww4GdldC8ZOJ2S9U68w+NqRl8st+o=
Subject key identifier: 04:AC:89:37:96:95:55:5B:B2:E6:FE:0B:4B:F6:B9:04:B8:CA:C9:0D
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 94
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8CF34E5A34CE11EB9D635730F8AEA228.roa
Signing time: Wed 02 Dec 2020 18:45:30 +0000
ROA not before: Wed 02 Dec 2020 18:45:24 +0000
ROA not after: Sun 30 Jul 2023 18:45:24 +0000
asID: 37119
IP address blocks: 105.168.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Dec 2 18:45:24 2020 GMT
Not After : Jul 30 18:45:24 2023 GMT
Subject: CN=5fc7e0ca-5adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:f2:96:fd:f9:e9:36:cd:a3:7b:b8:68:54:
24:8a:79:de:3d:59:dc:ae:b7:ab:f4:e5:5c:c4:00:
ae:2e:98:00:c4:12:1b:b8:dd:04:b6:20:f4:70:9d:
f8:38:4f:9b:a4:12:e8:5b:a1:6a:23:b0:f3:d1:85:
89:9e:54:74:5e:d3:5e:84:95:04:5b:5a:8c:cd:6a:
fe:a0:98:08:9f:bb:5a:b6:5b:0b:fb:26:eb:60:d1:
99:2e:34:47:a9:0c:ae:0f:ea:3c:ac:2f:c3:93:c8:
3d:ee:60:84:3f:7a:cc:c8:f0:76:8c:be:d6:44:7c:
93:b3:7a:e6:1b:d5:4d:48:02:44:19:c1:12:7c:69:
6c:69:08:5f:10:60:44:67:19:e0:88:bb:09:a9:7f:
39:38:c9:2b:c0:ed:61:14:b4:28:49:39:5f:f1:95:
73:12:78:24:c0:1d:7a:a8:15:10:e4:db:a6:f8:7c:
2f:50:66:77:d3:ca:a5:3a:06:2d:56:d0:ec:2c:44:
88:03:23:b9:63:33:b5:58:b6:e3:2b:0b:7e:4a:1a:
dd:c7:20:8e:c1:14:c5:e7:f6:d0:0b:5f:8a:fe:18:
0b:c5:34:dd:82:f7:ef:80:c9:e7:a3:65:9a:eb:2b:
9d:54:40:85:ca:b4:ce:f0:cf:2f:ce:27:6f:0c:2f:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:89:37:96:95:55:5B:B2:E6:FE:0B:4B:F6:B9:04:B8:CA:C9:0D
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8CF34E5A34CE11EB9D635730F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.192.0/18
Signature Algorithm: sha256WithRSAEncryption
29:76:69:8f:69:4e:ba:bf:49:92:26:5e:71:e8:e3:02:e1:68:
b0:4b:07:f0:44:6b:13:e5:4e:bb:47:49:29:e3:92:07:0e:42:
9a:3b:73:79:0b:4b:34:cc:1e:43:27:dc:1a:27:b1:64:c2:d9:
c1:cb:8b:8d:38:d3:1a:ff:ba:85:42:9e:c7:66:5e:61:69:e7:
ee:16:00:b2:c3:a6:4b:a4:8a:79:ef:56:b2:0b:1c:8f:e4:aa:
16:cb:3d:ff:77:a7:21:80:d3:88:b3:9e:3a:c1:d7:a3:89:a8:
cc:f2:39:5e:46:4f:30:42:fc:36:23:30:ea:d6:ac:6b:1c:07:
77:7e:41:b8:d6:3e:54:c5:e7:31:65:85:7f:fd:52:0c:2c:74:
85:06:a1:08:e2:60:6c:c6:c2:f2:9e:f6:60:72:d5:5d:f3:f0:
9f:b0:e5:47:3c:b2:21:5b:9c:0f:6a:bb:2a:b4:0d:1a:ef:be:
24:66:95:74:38:0c:0f:e1:10:72:24:fc:60:de:ff:fa:19:d2:
78:92:9d:4a:2e:1f:52:c6:f3:6e:9b:7d:94:1c:a2:69:f7:2e:
91:4c:16:b3:a1:bf:18:3f:3c:bb:d2:c6:2c:58:62:90:95:dc:
8c:d5:1f:07:00:07:43:27:6b:96:0c:2e:35:a2:6e:d5:56:c0:
0e:41:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 30 19:21:03 2023 by rpki-client on console-fra.rpki-client.org