Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031079628A7D11EE91B2BA4A4AD9E6FC.roa
File: 031079628A7D11EE91B2BA4A4AD9E6FC.roa (raw, json)
Hash identifier: 5isVnkDKFiV5Y53a9LXSWILcWQxjQdSvD0WOoIXpU4I=
Subject key identifier: E4:D3:B6:57:7C:29:75:2B:95:17:26:B9:BA:CD:61:DA:10:FC:DF:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5276
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031079628A7D11EE91B2BA4A4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 03:53:22 +0000
ROA not before: Fri 24 Nov 2023 03:53:19 +0000
ROA not after: Tue 26 Dec 2023 03:53:19 +0000
asID: 62240
IP address blocks: 154.194.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21110 (0x5276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 03:53:19 2023 GMT
Not After : Dec 26 03:53:19 2023 GMT
Subject: CN=65601e32-5d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:3e:40:b0:d1:ae:34:aa:d3:e1:d0:80:84:
0a:c5:e7:33:10:34:f1:fe:ed:e2:17:0e:ae:60:a3:
b0:2c:d5:dc:7e:df:7b:ad:4f:47:86:c0:88:02:4d:
79:32:26:11:84:f1:4c:78:bc:42:d9:44:dd:da:b1:
09:55:72:b6:39:77:23:bc:5f:93:ad:42:b3:32:a2:
e8:59:57:61:4d:f0:90:13:bc:5f:84:be:87:dd:c6:
63:f6:62:f9:d5:0b:42:04:a6:ec:3e:f5:55:14:d5:
95:ce:09:71:db:57:ea:de:c0:6b:4b:cd:ce:0d:6f:
03:0f:a8:7a:b3:f0:02:d7:ee:05:c3:d3:9e:27:bb:
77:0d:37:d7:3a:6c:c5:51:3f:e6:b4:fd:dc:be:1a:
7c:3b:f3:b3:34:9e:c1:09:61:fb:f6:c3:3b:e5:c7:
fa:74:39:8a:8b:48:89:02:32:1b:6f:8e:ea:d3:8a:
9c:d5:e6:b8:13:7f:f6:aa:7a:91:83:c9:63:ff:fe:
99:7e:3d:c8:0c:6f:84:6f:4b:04:4c:90:6a:98:f0:
0b:fb:94:ef:c2:85:2a:58:08:a8:36:fe:a4:5e:df:
22:86:b6:1e:ce:16:7d:17:bf:36:24:bb:4d:6f:d9:
15:59:bd:f0:e5:fe:d4:79:47:5a:bb:31:7f:a1:4c:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D3:B6:57:7C:29:75:2B:95:17:26:B9:BA:CD:61:DA:10:FC:DF:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031079628A7D11EE91B2BA4A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8d:d1:83:d7:3b:50:cc:b7:2a:c3:3d:39:5a:2c:87:6e:93:
bb:02:fb:00:2f:24:72:8a:2b:2e:b6:47:70:32:af:dc:a3:9c:
1b:17:c6:74:63:3d:72:73:d3:b1:c3:e2:41:2a:71:39:3a:a1:
d2:24:34:9e:0f:9f:ba:45:0c:f4:d6:7e:37:8c:0e:b3:d0:30:
02:9a:f2:ff:4f:27:aa:97:e7:4b:53:d8:86:73:7d:ed:fa:67:
0e:f7:e3:ff:b6:cb:da:aa:fe:ea:45:c6:5d:a6:88:78:df:8f:
c0:10:9c:24:1c:34:9d:f2:85:dd:07:80:ef:48:79:ba:ca:49:
0f:c0:75:60:19:9c:ec:d0:00:b9:fc:76:0b:3f:ac:28:be:62:
9a:d5:20:a3:35:14:1f:49:a6:cb:fc:6b:1d:db:c8:f1:e9:30:
95:06:1c:e2:e5:59:12:00:f0:3f:e0:f1:76:e8:7d:fc:ed:e0:
03:7f:6f:0d:0c:c7:96:d1:ef:2c:8d:c4:9d:18:c1:7f:a6:32:
68:53:c3:61:f7:b3:6c:9a:35:f7:fe:5f:84:b6:8f:4d:99:b6:
b1:ed:92:74:e7:3b:e1:20:a3:d2:dc:7c:4e:a7:c5:2f:53:88:
34:da:bf:5e:af:e5:86:91:93:22:71:b5:3a:e5:88:77:2a:76:
5b:c4:2e:36
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUnYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwMzUzMTlaFw0yMzEyMjYwMzUzMTlaMBgxFjAU
BgNVBAMTDTY1NjAxZTMyLTVkMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDVD5AsNGuNKrT4dCAhArF5zMQNPH+7eIXDq5go7As1dx+33utT0eGwIgC
TXkyJhGE8Ux4vELZRN3asQlVcrY5dyO8X5OtQrMyouhZV2FN8JATvF+EvofdxmP2
YvnVC0IEpuw+9VUU1ZXOCXHbV+rewGtLzc4NbwMPqHqz8ALX7gXD054nu3cNN9c6
bMVRP+a0/dy+Gnw787M0nsEJYfv2wzvlx/p0OYqLSIkCMhtvjurTipzV5rgTf/aq
epGDyWP//pl+PcgMb4RvSwRMkGqY8Av7lO/ChSpYCKg2/qRe3yKGth7OFn0XvzYk
u01v2RVZvfDl/tR5R1q7MX+hTPEFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5NO2
V3wpdSuVFya5us1h2hD8350wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzAzMTA3OTYyOEE3RDExRUU5MUIyQkE0QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawlQwDQYJKoZIhvcNAQEL
BQADggEBAKuN0YPXO1DMtyrDPTlaLIduk7sC+wAvJHKKKy62R3Ayr9yjnBsXxnRj
PXJz07HD4kEqcTk6odIkNJ4Pn7pFDPTWfjeMDrPQMAKa8v9PJ6qX50tT2IZzfe36
Zw734/+2y9qq/upFxl2miHjfj8AQnCQcNJ3yhd0HgO9IebrKSQ/AdWAZnOzQALn8
dgs/rCi+YprVIKM1FB9Jpsv8ax3byPHpMJUGHOLlWRIA8D/g8Xboffzt4AN/bw0M
x5bR7yyNxJ0YwX+mMmhTw2H3s2yaNff+X4S2j02ZtrHtknTnO+Ego9LcfE6nxS9T
iDTav16v5YaRkyJxtTrliHcqdlvELjY=
-----END CERTIFICATE-----
Generated at Fri May 9 11:24:23 2025 by rpki-client