Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBB54E4031D111EB81F56754F8AEA228.roa
File: CBB54E4031D111EB81F56754F8AEA228.roa (raw, json)
Hash identifier: DzsFAXUnSiJg2dV9c8wRZHM304yVZdpQGwrNitJlTrw=
Subject key identifier: 32:5B:35:51:92:EB:4C:B7:C3:20:1C:23:24:F4:1C:88:81:7C:CB:8F
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 72
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBB54E4031D111EB81F56754F8AEA228.roa
Signing time: Sat 28 Nov 2020 23:31:10 +0000
ROA not before: Sun 29 Nov 2020 23:31:05 +0000
ROA not after: Sun 30 Jul 2023 23:31:05 +0000
asID: 37119
IP address blocks: 105.168.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 29 23:31:05 2020 GMT
Not After : Jul 30 23:31:05 2023 GMT
Subject: CN=5fc2ddbe-d8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:70:0f:61:14:1a:10:b6:c4:6c:11:cf:9c:
39:d4:c9:b4:2b:d7:b1:cb:02:0e:3c:9c:52:cd:77:
c9:f4:83:2e:89:cf:9e:ef:b9:54:96:50:b8:95:36:
64:55:ab:ed:8f:33:89:88:42:31:15:40:d6:05:a4:
1d:43:f8:02:1f:df:6e:62:e7:33:07:b5:ab:d4:16:
83:df:27:a3:47:c8:0a:98:45:d6:79:b8:cc:8d:31:
19:0c:0b:7d:1b:ad:83:83:6e:76:69:d8:6e:36:42:
43:3e:9f:18:39:73:83:aa:3b:97:e3:ef:88:bc:c7:
ab:6c:9a:66:9e:c8:82:11:12:db:38:f9:99:66:05:
0a:a6:2f:10:40:57:81:ce:bc:31:77:03:d6:c9:97:
0e:48:3e:b5:65:2b:7d:53:b0:38:6e:f9:dc:a5:1c:
02:39:5b:e3:7a:db:84:d2:6a:1c:7a:88:2e:34:d9:
e8:fc:81:d6:e0:c6:7e:d7:69:49:d1:8d:9e:d0:eb:
a5:de:74:a9:7b:22:c9:2a:cb:71:8d:29:bb:5b:79:
28:18:1e:2a:37:77:ef:96:86:0d:65:a4:14:46:51:
c1:51:ba:f1:47:3e:3b:0b:aa:2f:90:92:2b:e6:c6:
b2:ba:cc:0e:10:73:cd:75:7c:7f:0a:22:f5:9a:09:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:35:51:92:EB:4C:B7:C3:20:1C:23:24:F4:1C:88:81:7C:CB:8F
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CBB54E4031D111EB81F56754F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:96:a8:80:af:20:c9:91:b4:55:6f:21:25:9d:00:44:47:13:
c3:e9:21:dc:24:96:f8:74:6e:86:53:96:e9:6a:25:b2:13:4b:
eb:87:8a:6d:07:29:d7:db:bd:fa:d5:5d:27:cb:79:8b:41:69:
31:81:1b:ae:eb:4c:c8:75:84:76:e3:ec:33:8d:66:d9:fb:cb:
89:af:f0:c6:af:45:3c:38:95:fc:87:cd:40:e6:1a:fb:ca:9b:
09:a8:01:33:ba:09:97:94:f0:56:09:43:e1:3b:8f:3b:87:d3:
7f:87:c0:e4:24:1e:27:48:a7:da:82:13:93:b7:ed:3e:b8:f0:
12:0c:d8:a8:d8:9b:05:2e:24:25:f1:29:8d:71:56:f9:a5:ac:
aa:a3:92:f0:3a:57:b8:8a:9b:eb:16:78:59:7f:5b:67:cb:65:
fc:e2:bc:c0:22:a3:c4:25:35:42:a5:8f:15:0d:e5:87:24:56:
c1:f9:50:10:be:00:6d:05:d2:db:d2:55:ae:03:bf:b3:27:63:
8b:60:0b:75:d4:ef:b5:fd:78:05:62:58:ed:f3:5a:43:6b:0f:
e7:cd:40:ed:08:02:48:58:2a:ce:4a:3d:f0:43:c2:b8:cc:18:
95:35:ab:b8:4d:22:ca:4b:32:30:9e:ba:61:ae:16:bb:fa:36:
49:4e:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org