This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D54FC8A9411EE936BD5184AD9E6FC.roa
File:                     0B0D54FC8A9411EE936BD5184AD9E6FC.roa (raw, json)
Hash identifier:          x2nEUiVL0Ipe4U1EXMh2p8iGXkhvvpwVtUuSShxvH+o=
Subject key identifier:   4C:24:82:CE:61:54:7E:31:02:CC:42:12:9D:3C:23:72:3E:FD:E5:C7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       53D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D54FC8A9411EE936BD5184AD9E6FC.roa
Signing time:             Fri 24 Nov 2023 06:38:14 +0000
ROA not before:           Fri 24 Nov 2023 06:38:11 +0000
ROA not after:            Tue 26 Dec 2023 06:38:11 +0000
asID:                     62240
IP address blocks:        154.195.25.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21462 (0x53d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 06:38:11 2023 GMT
            Not After : Dec 26 06:38:11 2023 GMT
        Subject: CN=656044d6-29b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:36:28:1d:a2:d7:64:4b:3f:f9:7e:02:7c:
                    4e:fa:62:b0:52:f1:da:3c:2d:ca:cd:9d:dc:45:72:
                    65:7e:af:eb:75:a3:e6:34:42:b6:70:e9:60:e1:91:
                    b6:b8:73:86:54:96:fd:e1:8e:35:cd:a2:6c:fd:48:
                    02:89:2c:14:1f:ac:b9:e8:b3:1e:cb:09:1d:36:7c:
                    60:19:75:49:ba:f5:69:ed:07:5f:b8:cb:53:3f:b4:
                    82:b9:fc:45:d7:a9:4f:df:cd:b7:3e:17:43:3b:26:
                    56:5d:b4:7f:a5:3d:11:54:8c:2f:c5:b3:a1:3b:b7:
                    84:b0:f5:cb:0b:72:43:4e:a5:09:ed:1d:21:7c:06:
                    cf:71:82:8b:d2:06:74:30:43:23:b6:03:30:ea:18:
                    7b:6f:21:44:ec:cb:ff:ed:e5:bc:95:f3:f2:11:50:
                    81:ae:c1:a4:ab:7d:12:c9:15:63:ec:e5:82:26:a1:
                    93:0d:3c:2e:de:c7:ea:0d:fb:c1:6f:38:d7:9e:19:
                    4f:c3:08:fd:07:d1:ad:e5:c2:ca:ae:64:8d:22:5e:
                    10:f9:2a:38:cc:9f:2a:46:00:55:83:23:10:71:59:
                    1b:78:c3:ad:68:86:0a:bf:97:ce:7a:b9:2a:8c:0a:
                    d8:f8:71:b3:24:aa:b8:69:92:23:aa:be:b6:1d:d2:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:24:82:CE:61:54:7E:31:02:CC:42:12:9D:3C:23:72:3E:FD:E5:C7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B0D54FC8A9411EE936BD5184AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:89:45:b5:ba:df:15:f4:f3:07:d8:d9:e6:62:31:0c:9d:99:
         98:76:17:95:0c:9e:d2:44:2b:70:74:73:52:8d:df:b2:49:dc:
         3a:18:f7:b8:07:47:34:cc:27:35:e6:30:58:21:de:7e:3e:f9:
         d4:39:71:aa:fb:74:fc:0f:8c:a6:36:96:f5:62:5b:b4:fe:ff:
         18:48:8b:b2:9e:c5:60:ce:d4:9b:36:5f:f1:ab:55:54:14:d2:
         28:5a:33:bc:25:f0:de:22:70:38:9f:d6:a1:44:45:8d:39:03:
         a6:d3:de:9c:7e:44:4b:7a:e2:aa:40:d9:8f:85:12:48:6a:86:
         ba:d0:ac:6d:46:26:08:c5:ce:bb:6c:84:01:67:19:72:b6:8f:
         1d:fb:39:30:5e:42:4f:d8:f8:10:d0:25:12:58:eb:b4:45:fc:
         b1:a5:f0:9e:29:7d:9f:f5:52:03:33:34:02:67:87:35:4f:7d:
         31:58:68:20:47:a7:04:3f:50:24:60:f6:7c:2c:c3:64:e3:9a:
         23:5a:15:32:af:c5:89:cc:b5:de:ab:88:85:f9:4e:8d:98:3f:
         db:48:f9:42:76:fa:43:0d:dd:cc:f3:70:ac:3a:2a:f0:38:c8:
         22:5d:6e:b0:92:04:7d:4d:b3:db:59:58:39:d8:a5:a7:d3:53:
         30:5f:ce:34
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU9YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjM4MTFaFw0yMzEyMjYwNjM4MTFaMBgxFjAU
BgNVBAMTDTY1NjA0NGQ2LTI5YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9DTYoHaLXZEs/+X4CfE76YrBS8do8LcrNndxFcmV+r+t1o+Y0QrZw6WDh
kba4c4ZUlv3hjjXNomz9SAKJLBQfrLnosx7LCR02fGAZdUm69WntB1+4y1M/tIK5
/EXXqU/fzbc+F0M7JlZdtH+lPRFUjC/Fs6E7t4Sw9csLckNOpQntHSF8Bs9xgovS
BnQwQyO2AzDqGHtvIUTsy//t5byV8/IRUIGuwaSrfRLJFWPs5YImoZMNPC7ex+oN
+8FvONeeGU/DCP0H0a3lwsquZI0iXhD5KjjMnypGAFWDIxBxWRt4w61ohgq/l856
uSqMCtj4cbMkqrhpkiOqvrYd0mtbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUTCSC
zmFUfjECzEISnTwjcj795ccwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzBCMEQ1NEZDOEE5NDExRUU5MzZCRDUxODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawxkwDQYJKoZIhvcNAQEL
BQADggEBAGOJRbW63xX08wfY2eZiMQydmZh2F5UMntJEK3B0c1KN37JJ3DoY97gH
RzTMJzXmMFgh3n4++dQ5car7dPwPjKY2lvViW7T+/xhIi7KexWDO1Js2X/GrVVQU
0ihaM7wl8N4icDif1qFERY05A6bT3px+REt64qpA2Y+FEkhqhrrQrG1GJgjFzrts
hAFnGXK2jx37OTBeQk/Y+BDQJRJY67RF/LGl8J4pfZ/1UgMzNAJnhzVPfTFYaCBH
pwQ/UCRg9nwsw2TjmiNaFTKvxYnMtd6riIX5To2YP9tI+UJ2+kMN3czzcKw6KvA4
yCJdbrCSBH1Ns9tZWDnYpafTUzBfzjQ=
-----END CERTIFICATE-----