Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DDA5202F29911EF9896C58A762E951A.roa
File: 0DDA5202F29911EF9896C58A762E951A.roa (raw, json)
Hash identifier: NUVI+3EXICLtnaWu0Y9KIartQE83LakGnH82Hr1UysU=
Subject key identifier: 5F:60:5A:9C:CB:A5:83:A7:5F:B8:44:55:4F:38:30:16:0B:BF:5E:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015BAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DDA5202F29911EF9896C58A762E951A.roa
Signing time: Mon 24 Feb 2025 10:21:05 +0000
ROA not before: Mon 24 Feb 2025 10:21:01 +0000
ROA not after: Wed 26 Mar 2025 10:21:01 +0000
asID: 5065
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89002 (0x15baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 24 10:21:01 2025 GMT
Not After : Mar 26 10:21:01 2025 GMT
Subject: CN=67bc4811-bd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:80:04:d1:ae:a8:a1:97:9e:2b:d2:94:9f:
9e:83:72:50:38:c8:55:17:45:e7:d3:6d:3e:51:99:
41:28:62:13:43:09:30:e9:02:66:c0:c5:e2:79:8b:
f9:f8:91:c8:a3:03:f6:c1:d2:83:88:26:d2:28:fd:
0d:24:54:68:dc:fb:de:18:85:68:c3:91:8b:4f:26:
fe:39:ee:b3:75:a5:aa:97:5c:07:b8:cb:65:79:d3:
2d:17:80:a8:51:61:9b:d0:47:e0:f8:0f:3d:6f:9b:
68:3f:53:0f:8c:8b:d2:ee:9a:d3:42:89:0a:ad:df:
3e:7c:8b:f0:bb:35:b8:1c:cc:6a:46:88:80:46:7a:
95:35:a7:43:45:cf:3f:06:32:cc:62:c8:2b:c2:e4:
64:a4:92:79:78:a9:ee:df:23:9a:f1:f1:de:77:c9:
16:74:df:70:91:53:2e:3f:05:cb:5a:35:de:39:7a:
2f:2a:51:92:dc:c2:7a:04:e4:5f:08:5d:33:67:44:
c6:7b:e1:62:32:26:2b:78:d8:a8:52:29:88:46:6b:
0a:39:0e:c8:18:be:2c:ec:08:fe:fa:06:07:0e:31:
e5:5a:88:36:6e:52:85:1b:99:00:89:23:b5:3c:cd:
85:05:14:5d:5a:78:b1:92:a3:73:97:45:52:3e:98:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:5A:9C:CB:A5:83:A7:5F:B8:44:55:4F:38:30:16:0B:BF:5E:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DDA5202F29911EF9896C58A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
27:de:0f:25:0c:b4:91:06:36:61:5b:37:fa:4f:82:9a:99:5f:
62:81:a3:eb:52:99:4e:7d:c3:35:91:1d:2d:e8:c3:b5:89:8f:
0b:c6:d7:27:8b:35:28:d5:d5:c6:95:57:50:09:86:70:5e:c4:
f0:e8:d3:c4:71:58:99:a9:c3:b2:37:80:61:e0:30:ae:ec:9a:
65:98:d7:65:0a:03:49:ed:a2:cb:9d:7b:d1:32:95:09:f6:76:
51:6b:64:68:2f:7f:9d:df:41:58:6d:1e:44:2d:3e:16:6e:dd:
d9:99:4b:c0:a0:64:39:d5:60:34:d2:d6:eb:32:fe:93:6d:f6:
68:61:68:18:4c:68:5d:f8:4b:ed:b7:fd:b5:6f:f2:d3:ad:7e:
20:98:b0:a9:13:4f:ee:e0:07:f1:9f:ad:26:75:13:c6:14:0b:
ae:75:27:03:e4:02:4b:f7:60:31:e9:54:f8:bf:6d:4f:3a:02:
5b:1d:48:b7:2b:e6:17:62:c7:43:6d:c4:0d:cd:d3:38:dc:cb:
bd:11:d2:b9:78:dd:d6:4b:5a:ee:0f:59:0a:fe:9d:15:2b:1c:
f4:fd:1d:bf:77:30:ac:52:25:ab:0c:7f:5d:5d:3d:8c:35:b9:
87:6f:b5:93:20:f3:41:ef:c3:34:36:36:e1:3a:ee:b2:8f:d2:
9d:e8:fd:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVuqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTAyMTAxWhcNMjUwMzI2MTAyMTAxWjAYMRYw
FAYDVQQDEw02N2JjNDgxMS1iZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqyeABNGuqKGXnivSlJ+eg3JQOMhVF0Xn020+UZlBKGITQwkw6QJmwMXi
eYv5+JHIowP2wdKDiCbSKP0NJFRo3PveGIVow5GLTyb+Oe6zdaWql1wHuMtledMt
F4CoUWGb0Efg+A89b5toP1MPjIvS7prTQokKrd8+fIvwuzW4HMxqRoiARnqVNadD
Rc8/BjLMYsgrwuRkpJJ5eKnu3yOa8fHed8kWdN9wkVMuPwXLWjXeOXovKlGS3MJ6
BORfCF0zZ0TGe+FiMiYreNioUimIRmsKOQ7IGL4s7Aj++gYHDjHlWog2blKFG5kA
iSO1PM2FBRRdWnixkqNzl0VSPpjPJQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF9g
WpzLpYOnX7hEVU84MBYLv167MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRERBNTIwMkYyOTkxMUVGOTg5NkM1OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4yMA0GCSqGSIb3DQEB
CwUAA4IBAQAn3g8lDLSRBjZhWzf6T4KamV9igaPrUplOfcM1kR0t6MO1iY8Lxtcn
izUo1dXGlVdQCYZwXsTw6NPEcViZqcOyN4Bh4DCu7JplmNdlCgNJ7aLLnXvRMpUJ
9nZRa2RoL3+d30FYbR5ELT4Wbt3ZmUvAoGQ51WA00tbrMv6TbfZoYWgYTGhd+Evt
t/21b/LTrX4gmLCpE0/u4Afxn60mdRPGFAuudScD5AJL92Ax6VT4v21POgJbHUi3
K+YXYsdDbcQNzdM43Mu9EdK5eN3WS1ruD1kK/p0VKxz0/R2/dzCsUiWrDH9dXT2M
NbmHb7WTIPNB78M0NjbhOu6yj9Kd6P3M
-----END CERTIFICATE-----
Generated at Fri May 9 12:09:32 2025 by rpki-client