Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/FFD3CF0E325C11EBBBD13925F8AEA228.roa
File: FFD3CF0E325C11EBBBD13925F8AEA228.roa (raw, json)
Hash identifier: 8JzgrcMm2pL7bXoXrnI3M6dFN77oFKweyb5fGY5nPqk=
Subject key identifier: 21:0F:BB:FE:B5:CB:FA:5C:5A:85:73:A2:88:9C:59:CA:8A:5E:FA:10
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 85
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/FFD3CF0E325C11EBBBD13925F8AEA228.roa
Signing time: Sun 29 Nov 2020 16:07:38 +0000
ROA not before: Sun 29 Nov 2020 16:07:33 +0000
ROA not after: Sun 30 Jul 2023 16:07:33 +0000
asID: 37119
IP address blocks: 105.168.0.0/13 maxlen: 13
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Nov 29 16:07:33 2020 GMT
Not After : Jul 30 16:07:33 2023 GMT
Subject: CN=5fc3c74a-7b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:aa:c6:c1:cb:11:d0:45:87:82:ea:b2:29:
bb:e3:79:40:44:c5:f3:a5:f1:15:2f:d3:80:bd:bb:
b1:75:8f:0b:d4:e3:9f:06:55:d4:5d:89:f8:fa:d5:
8d:a2:90:13:bf:96:20:61:77:b2:ef:eb:d6:bc:48:
2f:75:67:d0:29:3b:5d:f4:a5:ff:02:be:c4:b6:8d:
26:29:3c:d9:83:dc:98:be:7d:75:57:3a:93:84:00:
05:e6:9c:46:4e:38:e8:33:e4:3f:fd:b9:ce:49:d5:
86:1a:d8:88:ab:a5:2f:e0:d8:ec:0b:db:9d:93:94:
16:c9:37:95:21:00:61:08:25:d0:22:3a:cf:5f:1b:
41:ca:f2:84:83:37:4f:93:0a:d9:7d:09:1d:43:8b:
b9:ba:f0:2c:e4:f1:f3:ba:9a:cc:60:6b:48:e9:d0:
d5:57:79:06:8c:06:d8:15:3b:23:4a:51:8e:58:b7:
db:83:80:f3:da:24:af:87:0f:dc:95:de:1f:ae:72:
6f:80:6b:9c:0f:53:bd:81:c6:a1:bf:90:b1:16:5f:
4d:45:bd:d5:00:18:7a:49:e7:9f:54:2a:19:55:6b:
ff:66:92:9e:51:7d:ee:2b:f8:ef:53:52:a9:56:bf:
95:53:3c:b1:28:45:66:66:95:51:b1:7a:2f:02:27:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:BB:FE:B5:CB:FA:5C:5A:85:73:A2:88:9C:59:CA:8A:5E:FA:10
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/FFD3CF0E325C11EBBBD13925F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.168.0.0/13
Signature Algorithm: sha256WithRSAEncryption
bb:13:32:81:49:ee:80:5e:c1:a1:1b:76:fd:53:0c:d8:72:2c:
86:2c:86:4a:bc:7d:1e:bc:a7:9c:b3:bf:3c:d5:93:9b:10:17:
90:6e:53:04:d3:49:f2:90:4c:91:ee:e6:69:4a:fa:ef:1e:bc:
ae:22:d0:1a:94:81:f8:89:f6:6c:e9:dd:b6:5e:f7:a4:61:4a:
82:84:e9:b8:0d:4c:df:90:ea:ed:77:3d:d9:52:56:12:d5:a2:
2b:df:2c:fb:da:df:6c:a2:eb:20:1f:33:49:fe:62:54:df:7d:
9a:90:34:1f:ef:f0:f6:2c:ff:68:50:a0:71:eb:d1:4d:b8:7e:
e4:09:62:d1:d8:96:4b:cb:4f:de:3a:66:df:58:f7:51:ae:3f:
ce:fa:5b:18:9b:f1:62:f0:b1:c3:67:df:e6:59:35:f1:03:3f:
f6:71:f6:2b:33:a9:18:ad:d1:25:6c:04:d6:08:bd:e1:d3:db:
0c:e6:1e:4f:3b:da:30:00:cf:29:18:2f:6c:59:a3:f3:f4:aa:
98:24:1e:a0:38:11:59:a9:fe:9f:aa:a8:55:8b:17:48:ae:b2:
93:1c:e9:88:5b:99:1f:be:43:6d:4d:ce:11:e3:fd:55:11:7a:
a1:ab:68:01:fc:fc:6e:1d:ad:f0:94:77:51:a7:16:98:3a:be:
ae:40:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:41 2024 by rpki-client on console-ams.rpki-client.org