This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/026C9FD68CDF11EEA68224694AD9E6FC.roa
File:                     026C9FD68CDF11EEA68224694AD9E6FC.roa (raw, json)
Hash identifier:          QoJS6+xhTbWR8XDcOh3VS40Ug2oOvibyCQ/sIkOxIMg=
Subject key identifier:   7C:B5:EF:E0:B9:3E:D5:82:DC:14:0F:0E:B1:AB:AB:37:D9:12:9D:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       5519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/026C9FD68CDF11EEA68224694AD9E6FC.roa
Signing time:             Mon 27 Nov 2023 04:39:54 +0000
ROA not before:           Mon 27 Nov 2023 04:39:51 +0000
ROA not after:            Tue 26 Dec 2023 04:39:51 +0000
asID:                     62240
IP address blocks:        154.196.72.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21785 (0x5519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 04:39:51 2023 GMT
            Not After : Dec 26 04:39:51 2023 GMT
        Subject: CN=65641d9a-4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:21:52:b7:4e:46:e4:20:4c:2d:88:61:1f:
                    55:79:c0:e1:a2:fc:17:f1:fb:96:58:ab:35:7c:aa:
                    89:0f:c2:09:99:3c:0c:e2:3f:55:f4:ad:db:af:34:
                    9e:06:dc:fd:42:7e:15:a1:fe:cc:0d:b8:ba:1b:9d:
                    eb:e5:06:a6:0d:1a:bb:e5:f2:1e:54:c9:4a:33:23:
                    81:05:33:ed:f5:a7:52:b3:01:99:1f:47:d4:34:1e:
                    3c:ae:52:35:58:4a:ab:35:77:fb:06:f9:01:80:e5:
                    66:88:43:d2:b5:4c:de:37:78:c9:56:4f:67:86:ee:
                    0b:6d:c5:85:fe:86:f4:6a:55:04:08:f7:1a:ce:d2:
                    cc:41:a1:75:66:3b:b6:e3:85:c3:8c:44:62:30:cc:
                    0e:8a:89:5c:a6:2d:2b:96:93:90:02:46:0a:04:b7:
                    5d:56:12:78:28:86:e6:d9:25:fd:6c:16:8a:60:b2:
                    b7:a1:35:ad:db:cc:2b:83:4a:2c:b7:e1:53:63:02:
                    99:b2:3f:22:a0:44:d3:b9:27:cc:8e:40:04:65:ab:
                    36:26:e6:e9:ab:d6:5c:d3:0b:0e:26:7e:92:65:cb:
                    e4:30:39:fd:b2:ce:83:9e:f8:51:ae:d2:f7:7f:5a:
                    20:63:ac:27:58:d7:cc:a8:2b:10:18:64:9a:f0:d0:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B5:EF:E0:B9:3E:D5:82:DC:14:0F:0E:B1:AB:AB:37:D9:12:9D:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/026C9FD68CDF11EEA68224694AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:48:3f:48:c8:15:2b:aa:6e:7d:9d:56:7b:b5:0e:8d:3c:
         9f:e4:ed:95:a2:87:59:e3:ca:cf:88:c8:b6:30:5d:80:87:55:
         11:46:ba:f4:58:c7:2c:4a:a8:00:7d:a7:aa:28:38:76:ba:8d:
         03:f4:4b:26:0c:44:ef:ac:42:c7:b6:74:9b:5a:ce:50:f1:16:
         3d:e6:f3:01:85:5e:cd:56:70:23:82:1a:9b:c7:00:e5:73:92:
         28:96:fc:21:cf:67:eb:75:48:1b:44:fc:8c:5a:98:1b:9d:b7:
         87:49:69:3f:83:34:49:5f:08:49:87:94:77:29:89:5a:09:64:
         16:79:35:72:c6:3e:05:84:39:ba:67:40:b1:a3:be:a3:b6:4c:
         bb:66:f4:61:92:be:8d:2f:b6:db:f7:a6:82:c4:90:9e:69:59:
         4c:d3:c4:fe:6f:41:47:ae:14:a9:82:8b:5e:17:3d:8b:f0:d7:
         22:3e:21:19:7e:01:cd:08:c9:c7:70:4b:df:85:09:50:8d:cd:
         75:47:f8:a3:df:59:77:ff:59:19:59:7e:5a:a6:af:09:1f:03:
         da:36:89:23:3e:84:08:42:9b:6c:7d:db:a2:cf:0a:c4:00:e0:
         e3:67:ec:76:81:6c:02:ee:a6:21:b4:7f:8a:9e:47:61:05:2b:
         44:73:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----