Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06564C6E893811EE92D8C2364AD9E6FC.roa
File: 06564C6E893811EE92D8C2364AD9E6FC.roa (raw, json)
Hash identifier: 5Zw8xbUbCZbs0vR0QbxR9C6u333yM0rui2XU/vTJht8=
Subject key identifier: 28:22:E5:BD:D5:0E:69:40:94:7F:67:2F:F5:58:D8:5C:E4:99:05:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5239
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06564C6E893811EE92D8C2364AD9E6FC.roa
Signing time: Wed 22 Nov 2023 13:07:01 +0000
ROA not before: Wed 22 Nov 2023 13:06:58 +0000
ROA not after: Mon 25 Dec 2023 13:06:58 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21049 (0x5239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:06:58 2023 GMT
Not After : Dec 25 13:06:58 2023 GMT
Subject: CN=655dfcf5-94b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:28:2f:1c:e8:0a:10:64:cb:3b:a2:b2:94:32:
5f:e3:88:a0:79:6d:25:59:d7:1d:21:dd:75:48:7a:
46:a4:e1:31:47:fc:5e:03:d1:d2:75:41:44:a5:77:
27:3f:85:79:37:cf:31:88:18:00:0c:59:de:c4:5d:
9c:98:a1:ed:97:be:ae:ea:eb:43:68:d5:66:e1:9e:
b3:62:92:45:82:d2:2c:46:d3:5a:71:e4:db:fe:35:
ae:5b:34:0b:0a:7b:d1:32:e3:36:f2:51:ad:d1:33:
e9:f4:bc:52:df:25:58:53:4b:48:61:d0:9a:21:eb:
1b:10:c3:3f:05:83:0c:47:d5:6a:19:c5:15:6e:fe:
26:5d:0c:02:72:49:60:30:d0:82:06:19:5d:c6:de:
e9:cf:6c:b7:c2:42:14:bc:68:d8:0b:ae:00:6e:0d:
f9:7a:c3:ae:af:aa:d8:75:49:c5:10:16:7e:8b:2c:
e3:fc:c4:ce:c7:70:a5:ef:98:2c:0f:7e:84:24:5d:
09:c9:ac:34:d2:44:16:49:a8:f1:56:ee:43:25:1d:
fe:11:5d:32:68:e4:f6:b5:60:b4:49:04:45:4a:cc:
45:85:80:f5:6c:ca:ae:c5:63:09:12:76:53:29:ac:
bb:e8:9b:9e:d8:9a:95:48:f2:df:0c:d6:68:13:31:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:E5:BD:D5:0E:69:40:94:7F:67:2F:F5:58:D8:5C:E4:99:05:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06564C6E893811EE92D8C2364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f2:1f:dc:e4:7e:7d:88:6b:b6:4a:74:b9:ba:30:27:75:c4:
4c:ce:8a:73:07:ee:34:b6:c2:a0:5c:61:95:95:ac:d0:15:86:
5b:ed:69:f1:b6:8a:eb:26:db:c8:80:3f:93:a1:6d:20:61:b7:
3f:2d:4f:63:15:bb:db:89:df:0d:fb:af:cc:ba:02:13:17:20:
d7:f7:ed:31:c6:24:c0:f8:a8:e3:eb:78:22:74:f1:94:98:25:
22:fa:81:47:d1:98:2b:85:14:19:c0:82:8c:1f:fa:91:5b:12:
cc:95:ee:67:29:1f:f5:c3:50:ef:18:fb:7f:20:03:4c:81:f1:
7d:0a:10:3c:e5:2b:98:40:51:ad:27:aa:b3:ca:2a:fa:d5:d3:
8e:bd:d7:42:18:10:7d:68:26:fd:34:70:dc:73:00:14:fd:76:
81:3f:04:ac:d2:5a:54:83:3b:31:8e:3e:e0:1a:ea:29:6c:3f:
16:b7:65:40:17:54:ca:c5:6d:27:76:87:b1:50:e8:1a:22:8d:
79:be:d9:55:6c:f2:2e:46:23:ca:ee:51:33:ff:1b:8b:23:d4:
13:c5:33:f6:85:d4:91:7d:f3:99:76:b3:d2:38:da:7e:fd:5e:
e9:e2:1a:4c:8a:e1:6f:4d:50:92:30:47:52:09:ee:9e:cb:a1:
ac:39:d2:4c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUjkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjIxMzA2NThaFw0yMzEyMjUxMzA2NThaMBgxFjAU
BgNVBAMTDTY1NWRmY2Y1LTk0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1KC8c6AoQZMs7orKUMl/jiKB5bSVZ1x0h3XVIekak4TFH/F4D0dJ1QUSl
dyc/hXk3zzGIGAAMWd7EXZyYoe2Xvq7q60No1WbhnrNikkWC0ixG01px5Nv+Na5b
NAsKe9Ey4zbyUa3RM+n0vFLfJVhTS0hh0Joh6xsQwz8FgwxH1WoZxRVu/iZdDAJy
SWAw0IIGGV3G3unPbLfCQhS8aNgLrgBuDfl6w66vqth1ScUQFn6LLOP8xM7HcKXv
mCwPfoQkXQnJrDTSRBZJqPFW7kMlHf4RXTJo5Pa1YLRJBEVKzEWFgPVsyq7FYwkS
dlMprLvom57YmpVI8t8M1mgTMdjrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKCLl
vdUOaUCUf2cv9VjYXOSZBXMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzA2NTY0QzZFODkzODExRUU5MkQ4QzIzNjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVJkwDQYJKoZIhvcNAQEL
BQADggEBANLyH9zkfn2Ia7ZKdLm6MCd1xEzOinMH7jS2wqBcYZWVrNAVhlvtafG2
iusm28iAP5OhbSBhtz8tT2MVu9uJ3w37r8y6AhMXINf37THGJMD4qOPreCJ08ZSY
JSL6gUfRmCuFFBnAgowf+pFbEsyV7mcpH/XDUO8Y+38gA0yB8X0KEDzlK5hAUa0n
qrPKKvrV046910IYEH1oJv00cNxzABT9doE/BKzSWlSDOzGOPuAa6ilsPxa3ZUAX
VMrFbSd2h7FQ6BoijXm+2VVs8i5GI8ruUTP/G4sj1BPFM/aF1JF985l2s9I42n79
XuniGkyK4W9NUJIwR1IJ7p7Loaw50kw=
-----END CERTIFICATE-----
Generated at Sun May 11 17:58:48 2025 by rpki-client