Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E7FA2EDE31BA11EBA0E66138F8AEA228.roa
File: E7FA2EDE31BA11EBA0E66138F8AEA228.roa (raw, json)
Hash identifier: igNfAp59d/SRYlgvdil9xvYiAepL9JIwBTUAPXguxxc=
Subject key identifier: C4:5F:9E:09:88:00:A9:3D:F2:D6:D2:6D:03:28:9E:84:0B:8D:BA:50
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 19
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E7FA2EDE31BA11EBA0E66138F8AEA228.roa
Signing time: Sat 28 Nov 2020 20:47:19 +0000
ROA not before: Sat 28 Nov 2020 20:47:15 +0000
ROA not after: Sun 30 Jul 2023 20:47:15 +0000
asID: 37119
IP address blocks: 105.168.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 28 20:47:15 2020 GMT
Not After : Jul 30 20:47:15 2023 GMT
Subject: CN=5fc2b757-1c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:3c:68:ed:36:b8:c4:49:92:36:4a:67:a2:
e8:34:bd:53:f7:55:f8:f8:82:87:2c:c6:08:11:41:
02:f6:3f:f3:1c:25:13:8a:55:5f:2d:ed:e4:fe:07:
d3:b4:75:1a:f4:93:67:b7:ac:e8:53:f7:d4:91:24:
be:6d:34:b4:53:1a:2b:94:12:7a:1c:db:73:b8:1c:
83:70:6e:32:e4:fc:b5:d6:d2:f1:59:c3:b2:40:35:
1a:03:a6:0b:93:5f:59:d1:c8:11:e3:7f:ed:0b:c1:
5d:1c:34:6e:9b:6c:22:02:9a:7c:69:3c:6d:da:f5:
12:36:61:92:96:4d:f5:44:84:23:d4:fa:5e:1b:74:
ce:cc:14:50:0e:c3:f2:d2:88:14:9e:cd:34:9b:10:
2b:70:28:5e:79:20:67:0e:79:db:24:13:82:b9:28:
6e:bf:4f:f3:c8:94:86:59:f6:59:d5:16:a1:ba:ba:
70:d7:8e:3b:66:10:2a:3b:39:22:0e:c2:0c:0a:ad:
aa:2d:fa:b8:83:48:d9:4c:8a:be:b9:5a:8b:3d:a0:
65:6d:7c:14:40:98:48:91:e9:8f:87:13:fd:f7:10:
28:49:83:05:64:7b:4d:ba:b2:e7:ee:5c:31:d1:1b:
36:7e:97:2b:c1:b8:51:57:9d:84:d6:1d:a5:5d:9e:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:9E:09:88:00:A9:3D:F2:D6:D2:6D:03:28:9E:84:0B:8D:BA:50
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/E7FA2EDE31BA11EBA0E66138F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:64:1e:e5:1c:e2:c2:5d:c6:1b:90:f0:33:3d:6b:ae:dd:a1:
28:1f:1a:ef:da:63:58:48:65:b5:8b:83:3e:fe:e6:cc:68:78:
7c:6c:95:61:2d:3d:b6:87:1c:0b:ef:7f:10:d7:5e:e1:c4:6e:
39:94:54:af:e2:48:0f:d7:2c:c2:7f:8c:ba:3a:32:17:76:09:
70:be:8b:45:54:77:d7:22:8e:af:f9:ee:22:e6:72:2c:9d:79:
82:af:44:2c:c7:92:69:7c:2d:a9:5d:8d:8f:75:9d:fe:e4:06:
02:74:a8:97:fc:9d:4f:78:a3:0e:06:f2:9c:ae:f8:33:a4:5b:
fd:01:8c:16:40:a4:4b:70:e9:9c:5b:25:9a:99:a7:9b:87:f5:
36:fc:35:91:c6:ad:e4:8e:3f:85:45:34:64:af:66:72:64:25:
63:e8:23:a6:b4:82:b8:a1:bc:cc:68:4b:77:64:2d:9c:e3:9d:
4c:1f:5d:f5:6a:9d:e2:6e:7d:56:5f:07:86:2b:a3:ae:8d:6c:
63:2f:3d:b0:27:20:72:42:5a:20:ab:c0:5b:25:7f:22:fd:de:
ea:61:a3:30:86:b7:d4:ca:26:d5:04:30:df:f6:61:c5:3c:09:
42:23:ad:07:01:b6:55:3b:1e:1b:09:26:da:87:32:80:b0:27:
92:d3:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org