Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA092A7431CE11EBA5A91A51F8AEA228.roa
File: CA092A7431CE11EBA5A91A51F8AEA228.roa (raw, json)
Hash identifier: ZV+sWBZ7D5Le32zsHWwfl0B/U01BMTgSbmpevRUF5v0=
Subject key identifier: 07:C9:F3:DA:F6:F8:35:9E:AD:AC:7D:CE:75:1F:97:D5:4F:1A:B0:FE
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 65
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA092A7431CE11EBA5A91A51F8AEA228.roa
Signing time: Sat 28 Nov 2020 23:09:39 +0000
ROA not before: Sun 29 Nov 2020 23:09:33 +0000
ROA not after: Sun 30 Jul 2023 23:09:33 +0000
asID: 37119
IP address blocks: 105.173.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 29 23:09:33 2020 GMT
Not After : Jul 30 23:09:33 2023 GMT
Subject: CN=5fc2d8b3-d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:88:2f:03:fd:b4:bc:25:d8:01:a5:4b:47:
05:e1:22:3d:0b:47:be:2e:cb:71:80:f2:44:d7:68:
0b:33:35:d9:27:04:7b:f8:ec:c6:e9:36:7d:07:3d:
17:11:3c:66:ea:e5:a9:11:64:6a:39:b3:f4:2c:5e:
87:dc:d2:06:ca:1c:9e:4d:ed:70:52:d5:d8:d5:00:
cc:79:01:f5:09:5b:e3:e9:fc:a4:d1:28:e3:de:f7:
9c:83:be:2f:e6:55:3a:4e:4c:81:c5:94:b6:1f:cf:
46:fc:b2:bd:09:8a:bd:0a:20:05:2d:7b:b2:65:d7:
76:55:4e:7f:e2:74:73:62:f7:c0:11:89:94:18:b8:
21:de:08:a4:c0:44:68:97:69:ce:31:20:3d:95:25:
3a:98:9b:3e:41:f4:f3:25:3a:ff:28:ce:5b:03:4a:
b5:20:fb:dc:c4:a8:23:42:58:75:86:96:df:67:ac:
7d:70:ca:cf:1e:67:76:e7:ae:63:24:6e:13:71:57:
25:87:26:06:59:25:07:5b:06:6b:d3:24:c9:f8:ee:
53:f9:43:2a:97:ff:44:ee:97:b7:cc:35:e2:26:f2:
57:62:32:32:8a:15:8a:bf:29:e4:3d:06:a1:77:1a:
6e:fb:98:c9:51:ff:0c:64:2c:23:06:c8:f0:7c:1e:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:F3:DA:F6:F8:35:9E:AD:AC:7D:CE:75:1F:97:D5:4F:1A:B0:FE
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CA092A7431CE11EBA5A91A51F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.173.64.0/19
Signature Algorithm: sha256WithRSAEncryption
42:ce:8f:61:4e:69:f6:3b:59:59:b1:b8:ef:07:86:e3:cb:23:
95:50:9e:1c:ae:10:eb:89:b6:fc:d0:2b:65:15:f0:18:db:3c:
7e:ae:c3:8b:98:d9:57:8a:51:89:b6:85:81:8f:f7:d2:56:98:
f5:d7:b9:65:b8:b8:61:46:9e:f7:a1:5a:0a:49:81:8b:2d:72:
bf:7f:c5:6a:f0:d6:9b:dd:5a:97:71:64:33:c7:80:42:cd:dd:
7a:32:8e:93:7c:1e:44:75:b8:1a:0b:61:58:39:46:c7:b1:8b:
80:5a:ea:de:ea:b1:c1:bd:f6:06:d6:8b:dd:f6:fd:aa:15:49:
f1:20:6a:18:2c:29:46:9f:10:7d:a5:3e:5f:71:7e:6e:7f:d9:
16:d8:8d:13:33:7f:80:5d:52:f1:15:62:2c:6d:7d:d9:de:fb:
80:b8:8c:75:e1:f6:e7:8f:9d:56:1c:32:94:ad:01:27:70:38:
f8:5c:67:a3:d6:ac:81:a3:b2:f6:4e:48:07:79:38:59:1e:52:
f2:75:6f:2a:a0:93:d7:0c:0b:b5:52:42:11:72:60:61:d8:31:
8b:1e:eb:c5:ee:b5:d9:af:d0:1c:8c:b1:b5:50:f8:09:d9:04:
10:bf:11:d7:0d:99:89:61:be:6f:67:dc:d6:86:aa:fc:f0:1f:
1b:b5:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org