Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2A85FE031CD11EB9B3BFD4FF8AEA228.roa
File: B2A85FE031CD11EB9B3BFD4FF8AEA228.roa (raw, json)
Hash identifier: gmm9wfIiBfvKKMWckopXGfKohsqA1w353MRJYqlhv8E=
Subject key identifier: 0C:D0:E3:CB:51:5C:DD:AA:DD:71:5B:A2:C6:A9:1E:9E:5E:2C:B9:B6
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 5F
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2A85FE031CD11EB9B3BFD4FF8AEA228.roa
Signing time: Sat 28 Nov 2020 23:01:51 +0000
ROA not before: Sun 29 Nov 2020 23:01:45 +0000
ROA not after: Sun 30 Jul 2023 23:01:45 +0000
asID: 37119
IP address blocks: 105.173.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 29 23:01:45 2020 GMT
Not After : Jul 30 23:01:45 2023 GMT
Subject: CN=5fc2d6de-591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:f3:17:ac:39:30:d9:67:04:68:c1:74:6e:
73:30:20:13:db:95:35:65:55:5a:f1:70:f9:6d:3a:
1d:98:3d:b8:8a:2c:f2:50:97:50:bb:b6:74:6b:2c:
ed:7e:fe:2f:b7:53:fe:b9:fd:78:50:9f:3a:48:38:
d6:37:37:e7:12:e4:ee:3c:ce:c3:71:96:0f:25:57:
53:95:74:ee:09:a2:c9:f0:0f:9d:ad:c8:8e:03:4b:
e0:c3:63:90:57:4a:fa:06:68:ec:37:58:22:74:79:
e3:fc:f2:97:7a:70:54:86:aa:aa:d7:98:d2:e6:05:
ff:3c:47:91:cd:15:1d:d5:67:cf:1c:05:c8:6e:f3:
e4:9b:3a:16:08:d6:4c:47:e4:92:9b:3a:fb:18:b1:
b3:a1:56:65:6a:16:cd:9f:61:38:d4:ca:7b:ac:64:
c7:b7:9d:86:91:59:b1:f1:8b:5c:0f:25:ec:1d:78:
5d:0b:6a:29:d6:8b:0a:fd:72:52:6d:7d:bf:d2:ac:
ab:f5:06:6b:a9:c9:ff:aa:52:46:e3:ad:83:42:95:
01:00:69:7a:8f:7f:7b:62:31:90:c9:80:16:10:65:
10:66:c1:32:4c:75:2f:bb:44:35:d2:97:74:79:db:
6a:98:85:d8:1a:d7:a6:0a:b2:97:7d:01:fe:fd:15:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:E3:CB:51:5C:DD:AA:DD:71:5B:A2:C6:A9:1E:9E:5E:2C:B9:B6
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B2A85FE031CD11EB9B3BFD4FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.173.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:15:e3:a8:74:d0:d3:81:65:82:38:9e:65:2a:c1:09:ea:e2:
2d:fc:b9:21:e2:34:14:d2:46:6e:75:77:d4:ef:2f:59:16:0a:
24:c3:3d:97:59:23:06:c8:89:4c:5a:00:0e:49:c5:b7:1f:e7:
b9:59:1b:e2:d0:a4:8f:0d:3b:16:21:88:4d:51:ca:4a:e2:42:
cb:83:c3:67:9f:af:0f:b0:ea:34:d9:e0:2e:81:3a:e3:c5:f1:
e4:ed:65:b7:86:4e:92:21:af:92:a6:84:79:60:6f:b7:07:86:
41:e2:d6:bd:93:30:cd:57:f0:4f:8e:06:09:1d:4f:e3:74:5d:
ec:4d:41:13:f9:da:1d:10:c5:ce:a9:7e:fe:25:f4:ef:42:b1:
f3:96:13:cd:91:9e:50:3e:f4:61:6a:6f:81:ec:45:c8:91:e6:
96:30:ff:72:fb:f5:01:6d:9e:b9:6e:ba:9b:91:e9:31:d5:0f:
50:73:53:db:db:07:69:93:ce:11:fe:34:09:fc:e9:62:21:87:
70:ef:98:28:3e:d7:92:53:3b:4b:25:00:9f:74:c5:8d:ce:26:
dd:8f:f5:3c:65:a8:33:2f:c9:92:c8:95:37:3a:59:81:d6:3c:
24:d2:9f:5d:f0:1b:e4:98:bc:46:88:aa:01:81:ce:94:c8:35:
70:f9:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org