Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/93721B3E34CF11EB812F5D31F8AEA228.roa
File: 93721B3E34CF11EB812F5D31F8AEA228.roa (raw, json)
Hash identifier: xi7QQikfSf5OPvKX1YOXLjsbY4YHdmdFX1Zupy5AU+g=
Subject key identifier: 72:B4:EA:1D:3B:E4:96:19:53:EE:DD:29:0E:0C:0D:40:F6:CE:6E:DA
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 98
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/93721B3E34CF11EB812F5D31F8AEA228.roa
Signing time: Wed 02 Dec 2020 18:52:50 +0000
ROA not before: Wed 02 Dec 2020 18:52:46 +0000
ROA not after: Sun 30 Jul 2023 18:52:46 +0000
asID: 37119
IP address blocks: 105.172.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Dec 2 18:52:46 2020 GMT
Not After : Jul 30 18:52:46 2023 GMT
Subject: CN=5fc7e282-3953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:36:1a:86:75:b8:2d:be:34:3c:68:ed:50:
f6:01:c5:09:c8:3b:2c:87:02:c7:48:f5:b7:4c:67:
75:da:94:b8:cd:5b:fc:f1:bb:cc:5a:d0:7a:fe:99:
1d:56:3f:44:cc:2d:5d:18:8c:68:d2:e4:c3:47:d6:
0a:8a:ad:36:ec:2e:ec:a4:5c:f6:eb:de:49:f9:8c:
38:04:d6:f4:cf:e6:74:89:3c:d2:c8:76:91:69:5b:
d7:e2:4c:7f:2c:61:e3:09:15:65:e2:6d:0e:52:a6:
f4:ab:6d:61:f7:80:2f:59:af:b3:ed:84:15:81:71:
60:d2:4b:69:17:c7:e5:91:e3:9c:24:33:f6:c0:85:
b0:9a:02:09:3c:aa:c6:52:39:cd:ac:60:50:7e:24:
9c:44:b5:7a:73:16:50:00:68:f9:51:39:8d:96:36:
3c:1c:14:dd:10:00:bf:e4:a4:28:6c:8f:d7:77:18:
e1:16:c6:8c:9a:fb:6d:c7:ea:f1:3f:bd:f0:19:eb:
86:d9:32:b5:6d:44:2b:4e:67:e0:90:1b:81:67:d8:
be:05:d3:c0:4c:13:80:d0:a5:7a:c5:1a:29:51:4e:
d4:42:f4:5a:a3:17:10:6c:54:87:99:f2:66:8d:eb:
06:e2:0c:b7:a1:82:52:f6:62:2a:36:09:62:06:92:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:EA:1D:3B:E4:96:19:53:EE:DD:29:0E:0C:0D:40:F6:CE:6E:DA
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/93721B3E34CF11EB812F5D31F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.172.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:36:c8:64:fa:48:70:1a:8e:3f:c1:49:01:0c:38:71:48:19:
24:03:8a:ca:30:fd:10:a6:ba:e2:6b:ce:42:46:8a:53:b8:30:
f7:4c:a4:d9:12:7e:5e:b4:99:6d:83:8b:0e:57:39:ce:0a:a2:
59:25:4e:0b:4f:3c:9f:68:e3:17:26:c8:b2:43:95:67:d2:05:
33:99:24:dc:b7:0c:7e:88:71:49:1c:03:7d:3c:d7:9f:19:bd:
83:65:1e:f7:85:37:e1:df:b2:57:68:6a:49:87:f3:eb:34:32:
5f:78:1b:75:25:fa:26:27:be:bb:80:06:8a:c5:c3:68:06:7f:
6b:c0:a1:37:61:e8:12:ba:89:ad:21:a6:2d:97:f5:43:46:cd:
2a:4e:84:53:9b:eb:96:18:49:9b:f5:3a:8b:87:f7:bf:1a:27:
7b:e8:cd:dc:25:a0:f0:61:40:08:02:38:bf:df:a9:d1:71:ef:
c5:cc:f8:34:8e:a7:6b:cc:d2:69:38:d0:80:8d:3f:ce:13:49:
75:83:07:37:80:0b:bb:04:90:da:9d:de:57:a8:22:1f:82:9a:
bd:d3:97:94:17:e2:5e:3a:09:74:ec:36:78:8f:f1:1c:38:cf:
bf:74:b5:48:66:3d:4b:23:de:58:93:87:05:79:63:19:cf:35:
d2:3c:12:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDBGNTBBRjExMC8GA1UEBRMoQUU5OEE1RkRBRDJEQzlGNEZDMUJFNDdGNjY4NTdB
OEM0Nzk4ODEwMjAeFw0yMDEyMDIxODUyNDZaFw0yMzA3MzAxODUyNDZaMBgxFjAU
BgNVBAMTDTVmYzdlMjgyLTM5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDF4jYahnW4Lb40PGjtUPYBxQnIOyyHAsdI9bdMZ3XalLjNW/zxu8xa0Hr+
mR1WP0TMLV0YjGjS5MNH1gqKrTbsLuykXPbr3kn5jDgE1vTP5nSJPNLIdpFpW9fi
TH8sYeMJFWXibQ5SpvSrbWH3gC9Zr7PthBWBcWDSS2kXx+WR45wkM/bAhbCaAgk8
qsZSOc2sYFB+JJxEtXpzFlAAaPlROY2WNjwcFN0QAL/kpChsj9d3GOEWxoya+23H
6vE/vfAZ64bZMrVtRCtOZ+CQG4Fn2L4F08BME4DQpXrFGilRTtRC9FqjFxBsVIeZ
8maN6wbiDLehglL2Yio2CWIGkiUFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcrTq
HTvklhlT7t0pDgwNQPbObtowHwYDVR0jBBgwFoAUrpil/a0tyfT8G+R/ZoV6jEeY
gQIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4QUVBMjI4L3JwaWxf
YTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JwaWxfYTB0eWZUOEctUl9ab1Y2akVlWWdRSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkQwRjUwLzVFQUFBNkI4MjU4RjExRUJCNzBCN0MxOUY4
QUVBMjI4LzkzNzIxQjNFMzRDRjExRUI4MTJGNUQzMUY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZprEAwDQYJKoZIhvcNAQEL
BQADggEBAAA2yGT6SHAajj/BSQEMOHFIGSQDisow/RCmuuJrzkJGilO4MPdMpNkS
fl60mW2Diw5XOc4KolklTgtPPJ9o4xcmyLJDlWfSBTOZJNy3DH6IcUkcA308158Z
vYNlHveFN+HfsldoakmH8+s0Ml94G3Ul+iYnvruABorFw2gGf2vAoTdh6BK6ia0h
pi2X9UNGzSpOhFOb65YYSZv1OouH978aJ3vozdwloPBhQAgCOL/fqdFx78XM+DSO
p2vM0mk40ICNP84TSXWDBzeAC7sEkNqd3leoIh+Cmr3Tl5QX4l46CXTsNniP8Rw4
z790tUhmPUsj3liThwV5YxnPNdI8EsQ=
-----END CERTIFICATE-----
Generated at Sun Jul 30 19:12:20 2023 by rpki-client on console-ams.rpki-client.org