Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4B599AF69711EFB38E6665762E951A.roa
File: 0F4B599AF69711EFB38E6665762E951A.roa (raw, json)
Hash identifier: EkhHGcucH315BhEBwUHWfugzsXy/zDQeQpmC8Z4Q2gc=
Subject key identifier: 78:F4:05:4C:E3:69:E4:FA:5C:AE:E9:8F:31:1D:1A:3A:07:07:10:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4B599AF69711EFB38E6665762E951A.roa
Signing time: Sat 01 Mar 2025 12:16:53 +0000
ROA not before: Sat 01 Mar 2025 12:16:49 +0000
ROA not after: Mon 31 Mar 2025 12:16:49 +0000
asID: 202656
IP address blocks: 154.221.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93748 (0x16e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:16:49 2025 GMT
Not After : Mar 31 12:16:49 2025 GMT
Subject: CN=67c2fab5-98b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:b7:49:fb:e6:95:5c:ef:98:86:35:2b:6c:
04:d6:1e:98:81:3f:6b:b9:21:9f:87:98:a0:d8:92:
76:17:60:89:00:ce:ea:b8:c6:8f:52:ab:09:93:82:
32:79:1a:96:ff:e4:67:d9:25:12:bd:3b:31:4c:24:
38:27:13:03:d5:74:0d:1b:9a:6a:44:04:11:68:80:
3d:01:6b:5b:36:51:0c:e4:4d:79:c0:62:57:d4:99:
f6:10:9c:c0:1c:94:0a:03:93:0f:2a:1a:be:81:69:
e1:9b:bb:06:5b:8d:4a:5d:75:a6:f8:ba:2e:a5:86:
ef:8d:3d:fa:fb:58:8a:b9:20:da:1e:f0:2a:d1:30:
38:2a:b8:f0:c6:b7:bd:1f:c5:eb:d5:77:ed:c2:08:
7a:c4:d5:d4:4c:e8:06:8c:c0:9c:49:09:ae:ad:5c:
3e:97:c4:d7:db:6a:69:fc:50:ab:b7:8f:0d:44:3b:
4d:fc:b6:66:9c:b5:db:77:77:69:70:fd:cf:03:1f:
66:4d:9f:d2:a7:ff:61:bb:a9:10:b3:cc:a6:36:ae:
2f:c3:c2:9a:05:88:dd:db:79:33:9d:03:82:0f:8b:
7c:75:cf:fd:e4:53:eb:8c:4b:bb:9f:f0:ce:3b:6b:
b3:2b:ab:90:fe:84:d2:b1:e6:50:2d:34:e6:bd:a9:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:05:4C:E3:69:E4:FA:5C:AE:E9:8F:31:1D:1A:3A:07:07:10:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4B599AF69711EFB38E6665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.55.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e0:cd:39:a8:13:3d:37:1c:ed:f3:d1:27:29:8f:e7:35:eb:
46:3d:9b:97:8c:51:a1:71:ca:fd:05:a0:fb:28:17:95:21:91:
fa:df:dc:81:84:f1:c0:c6:78:ba:59:0d:d9:54:67:da:b1:5a:
8d:c3:2c:2e:e5:fc:7a:78:4c:94:76:84:30:b9:37:48:e1:9f:
c2:3b:fe:c0:e7:1a:06:64:99:1a:f0:bc:43:ef:27:ca:c8:e1:
6c:04:30:a3:0e:cb:98:82:8a:a2:f3:f9:c7:1d:8f:3f:52:52:
be:3a:99:c9:33:da:a3:2e:1b:a7:56:25:19:23:fe:10:b6:a7:
b6:ff:e8:aa:d3:85:09:cf:2b:10:4e:17:76:90:5c:84:56:4f:
79:39:dd:b1:28:50:e6:5c:56:1c:6c:5f:47:25:d1:cc:b2:36:
a4:ec:5f:3e:48:4d:96:68:29:da:50:31:79:a1:29:32:fa:f3:
62:1f:7d:61:d3:93:b6:2d:ce:df:d4:23:84:1c:39:53:05:26:
c8:4a:dc:d1:07:79:31:3b:2b:44:61:89:a1:de:50:5d:c0:b1:
17:e7:34:89:7b:6a:a9:10:d1:2f:b4:b2:11:02:35:cf:ef:4a:
6e:96:fd:05:67:d6:8c:53:b0:70:cf:b2:b9:62:50:10:70:7a:
d2:9a:ac:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW40MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTIxNjQ5WhcNMjUwMzMxMTIxNjQ5WjAYMRYw
FAYDVQQDEw02N2MyZmFiNS05OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0+C3SfvmlVzvmIY1K2wE1h6YgT9ruSGfh5ig2JJ2F2CJAM7quMaPUqsJ
k4IyeRqW/+Rn2SUSvTsxTCQ4JxMD1XQNG5pqRAQRaIA9AWtbNlEM5E15wGJX1Jn2
EJzAHJQKA5MPKhq+gWnhm7sGW41KXXWm+LoupYbvjT36+1iKuSDaHvAq0TA4Krjw
xre9H8Xr1Xftwgh6xNXUTOgGjMCcSQmurVw+l8TX22pp/FCrt48NRDtN/LZmnLXb
d3dpcP3PAx9mTZ/Sp/9hu6kQs8ymNq4vw8KaBYjd23kznQOCD4t8dc/95FPrjEu7
n/DOO2uzK6uQ/oTSseZQLTTmvak1NQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHj0
BUzjaeT6XK7pjzEdGjoHBxDFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjRCNTk5QUY2OTcxMUVGQjM4RTY2NjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt03MA0GCSqGSIb3DQEB
CwUAA4IBAQCB4M05qBM9Nxzt89EnKY/nNetGPZuXjFGhccr9BaD7KBeVIZH639yB
hPHAxni6WQ3ZVGfasVqNwywu5fx6eEyUdoQwuTdI4Z/CO/7A5xoGZJka8LxD7yfK
yOFsBDCjDsuYgoqi8/nHHY8/UlK+OpnJM9qjLhunViUZI/4Qtqe2/+iq04UJzysQ
Thd2kFyEVk95Od2xKFDmXFYcbF9HJdHMsjak7F8+SE2WaCnaUDF5oSky+vNiH31h
05O2Lc7f1COEHDlTBSbIStzRB3kxOytEYYmh3lBdwLEX5zSJe2qpENEvtLIRAjXP
70pulv0FZ9aMU7Bwz7K5YlAQcHrSmqz0
-----END CERTIFICATE-----
Generated at Fri May 9 07:10:05 2025 by rpki-client