Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9D135A8831BC11EBA83FC43BF8AEA228.roa
File: 9D135A8831BC11EBA83FC43BF8AEA228.roa (raw, json)
Hash identifier: erA0aGvwf+9tAXdl+DwrsCXy08bj2zFP/TH5Y4mR+Sg=
Subject key identifier: DB:2E:7D:6A:E1:D3:4E:B7:DB:33:6C:31:C7:ED:A7:E7:D6:B8:6F:54
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 1F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9D135A8831BC11EBA83FC43BF8AEA228.roa
Signing time: Sat 28 Nov 2020 20:59:32 +0000
ROA not before: Sat 28 Nov 2020 20:59:28 +0000
ROA not after: Sun 30 Jul 2023 20:59:28 +0000
asID: 37119
IP address blocks: 105.168.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 20:59:28 2020 GMT
Not After : Jul 30 20:59:28 2023 GMT
Subject: CN=5fc2ba34-3874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:42:f9:5d:a4:74:e7:cc:f3:af:1f:ed:92:
e1:15:5d:3d:2e:53:d6:5c:3e:d2:6c:3c:a7:db:c2:
a9:db:98:96:72:38:76:6c:4d:5f:9e:76:3d:14:5e:
6a:57:20:2e:b0:28:1f:31:e1:60:bf:6e:fa:85:d9:
4c:ff:b2:a6:1d:e8:f5:2e:52:6f:86:3c:3d:31:49:
9b:7f:f3:77:4c:a5:5c:aa:a6:21:74:46:ff:39:f0:
b9:d3:54:e9:9f:69:54:15:c7:f7:2e:38:f4:3c:45:
72:1c:57:14:6e:42:c4:3e:4c:37:23:69:3e:ed:95:
be:bf:a1:e3:eb:9b:96:06:63:d8:38:b3:a3:9e:6e:
ad:ac:92:0c:00:a6:44:a1:d3:f5:3b:cf:7e:f6:8e:
b3:3c:47:b0:61:da:10:06:ea:6b:c9:5f:c0:ea:c5:
52:1a:4a:d0:3d:8e:1d:33:b1:f4:ee:cf:cc:6a:67:
2a:74:bf:a2:f5:a3:d6:58:00:69:1d:49:98:7f:a8:
b0:a5:ba:e7:e6:e1:20:e5:68:4b:9a:76:de:23:74:
6e:6c:23:5e:98:0b:e3:07:47:69:1e:76:af:15:81:
7b:fc:47:39:da:7c:f5:4f:7a:70:3a:f3:2a:21:f2:
69:d1:2d:a8:f0:4f:ee:6e:e7:08:c1:f8:cd:35:93:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:7D:6A:E1:D3:4E:B7:DB:33:6C:31:C7:ED:A7:E7:D6:B8:6F:54
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/9D135A8831BC11EBA83FC43BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.192.0/19
Signature Algorithm: sha256WithRSAEncryption
48:37:1e:ae:21:d3:11:dc:65:d5:f1:28:89:83:99:17:7c:5a:
54:60:a0:6c:eb:8a:fc:ef:6d:e3:46:db:ff:de:83:36:80:b3:
1c:de:6d:88:a7:6d:17:25:43:f2:4b:35:22:a4:67:c6:20:f9:
a1:19:3f:02:b7:4e:42:bd:d8:03:a5:28:06:d6:67:9b:43:0f:
10:5f:50:97:68:18:9f:66:69:c5:57:55:74:7f:6e:e3:a0:3b:
cc:29:41:29:47:97:65:29:47:71:fa:e3:92:81:56:bb:90:fa:
b4:0c:f9:aa:f9:20:5b:49:a9:ef:ec:2a:27:94:73:95:7f:65:
28:b3:78:ae:39:20:2a:33:24:6a:be:39:e5:e3:00:35:b8:46:
0f:3d:41:18:4a:42:5f:42:99:15:b4:75:b9:25:cc:3e:5b:89:
ab:71:d1:c0:3e:68:0d:e8:47:83:1d:e7:f6:7f:0e:c1:fd:75:
43:9d:08:21:47:57:e0:8e:94:46:c3:2d:d2:95:46:28:a8:87:
1d:9a:a6:b3:d5:97:00:00:38:9a:4c:b4:b7:03:9b:15:56:28:
30:3f:0d:e2:ba:80:28:4e:84:a4:60:1d:a2:c1:b6:3f:f9:e2:
9c:8f:07:e3:41:06:4d:4d:1d:1a:69:92:ef:39:e7:f2:0e:b7:
a0:b8:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org