Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBAFC12031C511EBA79AAA47F8AEA228.roa
File: CBAFC12031C511EBA79AAA47F8AEA228.roa (raw, json)
Hash identifier: xw1nnzU+rzXSurzUeint9j4BJALngFaCj+5nW2EU33U=
Subject key identifier: BF:77:69:6E:7D:1B:1D:9D:CF:B8:A2:12:4F:0C:54:D6:04:C0:70:97
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 40
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBAFC12031C511EBA79AAA47F8AEA228.roa
Signing time: Sat 28 Nov 2020 22:05:17 +0000
ROA not before: Sat 28 Nov 2020 22:05:12 +0000
ROA not after: Sun 30 Jul 2023 22:05:12 +0000
asID: 37119
IP address blocks: 105.168.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 22:05:12 2020 GMT
Not After : Jul 30 22:05:12 2023 GMT
Subject: CN=5fc2c99c-36ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:3c:e2:27:0f:72:c6:74:97:45:6b:a7:1e:
73:06:b0:4d:b4:96:67:1c:36:a6:b8:db:51:0d:2b:
c4:af:f4:93:1d:fd:2c:14:6d:0b:f8:c4:5e:37:28:
71:b3:4b:e9:96:ed:3f:6f:47:96:8a:5b:10:26:db:
73:82:f2:7c:18:85:98:f9:3c:fe:8b:01:05:1e:f0:
76:2d:bc:91:f8:f4:c0:fd:26:1c:f5:10:7d:d0:48:
44:35:ee:ee:96:9f:a7:bc:8a:58:46:16:d9:1b:d9:
0c:6f:b2:2d:ef:39:d4:97:67:33:7d:0c:80:dc:5e:
42:04:93:27:40:74:b3:dd:1c:43:33:d3:8a:bf:58:
9c:18:36:79:fa:87:6f:6b:ae:7c:57:22:33:b5:20:
d9:9a:ad:86:13:25:15:18:9b:10:47:e5:da:ab:9d:
bd:07:c6:e2:54:e0:41:47:db:1b:66:6f:0b:e9:44:
4f:4d:c5:7a:9f:99:ca:b8:0a:e8:f3:ee:3a:0f:91:
63:d7:4f:8b:a5:2e:58:e0:47:9e:60:c1:b1:b9:1d:
a9:a0:18:8a:11:22:b3:55:73:a8:b9:1b:16:d1:cd:
23:b3:f6:ac:e8:5f:c7:c7:73:d3:e7:f3:a0:df:1d:
7d:11:a1:75:0c:68:67:3f:34:95:e2:32:60:32:7a:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:69:6E:7D:1B:1D:9D:CF:B8:A2:12:4F:0C:54:D6:04:C0:70:97
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBAFC12031C511EBA79AAA47F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/14
Signature Algorithm: sha256WithRSAEncryption
6f:a1:70:a6:b5:04:ff:d7:5a:02:41:2a:42:dd:10:35:ae:c8:
74:f2:9c:86:ca:0a:0b:6d:e2:35:30:bb:fb:fa:b1:9a:be:85:
d9:5a:a8:7b:d4:46:65:0e:23:07:35:3b:49:51:60:74:bf:59:
f1:c8:20:7d:2e:87:2c:bd:fc:09:16:ba:11:55:87:33:6e:c0:
1a:5d:bd:d8:b0:4d:2f:67:f8:7c:80:1b:ae:51:f5:70:3b:1e:
97:ee:54:0d:cb:6a:04:f4:40:28:02:7d:ca:e7:14:da:7d:de:
ec:c2:e7:fc:2f:32:80:01:ba:2f:86:88:5a:0c:d9:7e:1f:76:
d6:06:f6:3b:7c:4f:63:bb:a6:0f:9e:18:94:b0:1f:1a:ec:63:
60:ef:7b:c2:72:60:3e:87:1f:19:9f:cd:f6:a3:bb:3e:1b:ba:
51:31:a8:55:50:e2:32:41:0b:2a:cc:d7:70:dc:52:a6:4d:03:
88:82:69:0a:d7:03:e1:34:f9:97:2c:59:59:5c:e7:a6:20:8f:
03:48:ce:6d:02:7a:29:0d:8a:52:36:85:9b:1c:76:75:79:df:
51:a8:cf:40:6b:be:59:33:45:e9:f2:b7:24:91:67:01:90:81:
8f:17:73:30:6b:bf:5c:8c:11:3a:ff:72:7e:8e:ba:ea:8b:81:
6a:55:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org