Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE66576A31CF11EBB8254C52F8AEA228.roa
File: EE66576A31CF11EBB8254C52F8AEA228.roa (raw, json)
Hash identifier: oLdnT53EJ7iuduZ3Wwro+G14LTaXHxktAyY800wfSao=
Subject key identifier: 61:E6:0B:74:90:36:FA:6F:96:7E:2C:35:DF:06:66:32:15:19:03:CE
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 6B
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE66576A31CF11EBB8254C52F8AEA228.roa
Signing time: Sat 28 Nov 2020 23:17:50 +0000
ROA not before: Sun 29 Nov 2020 23:17:45 +0000
ROA not after: Sun 30 Jul 2023 23:17:45 +0000
asID: 37119
IP address blocks: 105.173.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 29 23:17:45 2020 GMT
Not After : Jul 30 23:17:45 2023 GMT
Subject: CN=5fc2da9d-0aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:16:4e:4d:ec:35:df:9e:ca:00:f3:1c:5a:
3b:89:d2:b7:df:81:47:7b:2b:4d:51:23:fc:6b:70:
9d:be:59:f2:20:3a:46:99:ee:8c:f8:e3:d5:cd:33:
5f:ef:65:0c:8c:76:48:ff:89:e7:d4:c0:28:e6:52:
2a:6a:a3:35:64:00:fa:91:5d:e1:20:9f:32:b8:f0:
86:83:12:d5:64:52:08:54:69:cd:8f:cf:0a:c5:d7:
44:e4:d2:42:58:e2:42:a8:2c:4d:00:c1:18:34:64:
14:3a:2c:5b:ec:50:85:b2:a7:29:d7:6b:2c:16:17:
97:33:ad:07:54:17:0b:4d:7e:c9:1a:2b:fd:24:66:
62:da:b3:0f:ff:7c:64:85:82:b4:55:ec:86:a6:bc:
af:5d:d1:be:b1:b6:8b:c5:d3:17:0a:13:45:c0:7b:
8b:4a:d5:5b:55:93:1c:0d:bd:c9:c8:60:f9:1d:f9:
e3:25:77:f7:82:28:78:4a:96:f5:20:11:38:29:ff:
76:f0:9f:4f:c4:24:1b:f1:64:9f:1e:ab:7b:29:a7:
ef:55:0e:10:0a:f9:c0:72:eb:46:9c:ab:c8:8f:2c:
cb:42:33:83:d4:83:1b:f0:54:89:89:84:04:f5:7f:
cc:fb:53:fe:32:29:58:a6:c2:16:76:4e:6d:15:ea:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E6:0B:74:90:36:FA:6F:96:7E:2C:35:DF:06:66:32:15:19:03:CE
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/EE66576A31CF11EBB8254C52F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.173.160.0/19
Signature Algorithm: sha256WithRSAEncryption
03:0f:cc:18:ba:81:58:55:25:a6:fd:8d:39:27:d3:c6:f6:34:
a9:74:33:f9:78:9b:1b:05:b6:79:35:6a:6f:1b:eb:a0:a8:e8:
18:7a:d0:8e:fb:30:21:ea:8d:ec:d6:81:01:61:24:60:3b:ad:
e7:34:1f:89:a7:da:6c:59:54:4b:78:9f:02:03:57:4b:24:ed:
d0:35:0f:44:e9:a6:51:b4:35:5e:90:5f:ba:10:e9:14:ac:5f:
26:59:db:e2:1f:6f:52:c7:2b:69:45:e4:27:b5:5a:13:9a:ff:
76:7a:5d:b1:0d:b2:d2:51:8e:4f:75:21:1b:76:72:d7:c1:fc:
3e:a0:64:da:82:2a:f4:86:bf:17:13:78:a9:a3:f9:c3:14:94:
87:35:b7:9e:d0:99:3c:ce:0b:43:e5:0b:20:da:8d:82:f4:6a:
64:e7:b5:fc:c1:4c:23:e9:17:c0:1d:c8:41:71:1c:f3:b8:9a:
30:c5:bc:64:99:2a:69:38:5a:76:2a:ed:fd:29:5c:12:5a:d7:
58:ec:06:d7:1b:62:18:2f:e1:b7:9d:84:44:3c:c2:5d:e0:3d:
da:dd:28:ed:d6:7c:6e:b7:e3:30:70:a8:70:23:8f:63:10:3c:
d9:6c:bb:90:09:94:d5:2c:86:3e:05:91:f9:fb:01:0f:d3:84:
1d:67:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:52 2024 by rpki-client on console-fra.rpki-client.org