Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6A235EDB0E11ECACD29186F1222468.roa
File: 0F6A235EDB0E11ECACD29186F1222468.roa (raw, json)
Hash identifier: 7YBKQLyOUqKF8D37OOWp7iEnSNgFsbjaQYzbZBNEEeY=
Subject key identifier: 7D:14:4A:18:B7:3C:72:6E:28:1F:A0:AC:4B:98:88:A9:78:9E:31:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1667
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6A235EDB0E11ECACD29186F1222468.roa
Signing time: Tue 24 May 2022 03:03:18 +0000
ROA not before: Tue 24 May 2022 03:03:13 +0000
ROA not after: Sat 31 Dec 2022 03:03:13 +0000
asID: 139057
IP address blocks: 154.92.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5735 (0x1667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 03:03:13 2022 GMT
Not After : Dec 31 03:03:13 2022 GMT
Subject: CN=628c4af6-56fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:10:6e:4b:0b:31:c4:96:69:c1:ce:c9:97:
97:bd:f7:a2:cd:0a:24:50:82:26:2d:25:bb:52:b3:
b9:0e:22:03:a0:b0:1e:f2:01:52:c6:ca:9e:f9:20:
4d:10:36:0f:54:03:65:1a:ab:bb:96:59:95:13:42:
f5:f0:81:f8:c3:1d:45:e1:eb:47:3d:ee:f4:4d:9d:
b7:dc:62:d5:60:57:bd:bb:78:ef:8f:b0:39:f0:84:
1a:cc:50:c7:38:46:68:ae:20:5b:1e:37:60:53:ed:
18:c5:0d:25:39:92:22:e5:15:19:d7:d8:1c:42:e6:
7a:af:83:f4:52:d1:54:47:c8:4d:32:6f:fa:4c:3d:
74:54:73:06:99:e4:ad:46:d3:9e:29:c8:40:e2:98:
aa:16:e5:27:16:0e:a7:a6:50:37:7f:f9:94:e8:8b:
10:13:e3:61:9e:08:5a:c8:24:4d:e5:d9:f1:d0:2a:
11:76:ef:0a:bb:f0:91:b3:d3:03:ac:71:74:e3:f5:
cf:5d:ae:83:27:7d:16:5a:7c:3b:68:d6:96:95:76:
90:90:1c:9f:d5:14:f1:aa:a2:ac:b3:3e:62:68:e5:
91:51:7b:72:93:1d:84:2c:89:4a:1a:50:29:2b:d1:
66:a1:a4:4a:7f:ac:0d:29:6f:c6:01:2e:a4:55:e7:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:4A:18:B7:3C:72:6E:28:1F:A0:AC:4B:98:88:A9:78:9E:31:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6A235EDB0E11ECACD29186F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:39:e6:82:42:bd:c2:19:2c:1d:12:09:ce:0f:f4:be:35:77:
a2:52:c5:2c:2f:23:17:3c:b9:78:64:0f:0f:c3:d7:9f:65:f3:
fe:98:35:67:03:2d:cd:b2:f8:78:af:81:11:0e:1a:73:9b:40:
71:2f:36:c9:af:8a:fc:2f:f1:69:bf:9e:46:af:70:3a:3f:a0:
ab:be:e3:a8:59:e2:f3:c2:d0:53:04:31:3d:b7:9f:09:bc:a9:
d6:db:75:1f:db:d3:8e:0b:07:6a:3e:b6:07:bc:ea:49:86:88:
fc:27:5a:ec:9e:f9:66:5a:b7:ad:10:ed:f2:02:74:9a:43:a1:
e9:0c:86:26:a1:a0:cb:d9:f7:be:77:79:96:5c:5c:f1:69:94:
20:9a:da:3d:06:fe:70:8d:90:5e:25:b0:6e:26:ed:2f:b6:55:
65:c5:cf:d2:09:ed:e6:f8:71:b5:f5:89:98:c9:f6:fa:97:65:
33:21:09:7e:9b:89:51:35:cd:44:ae:3f:0d:6e:47:93:96:57:
9b:55:2f:65:8e:17:b8:39:33:90:aa:53:82:23:1e:8d:fb:d3:
98:93:24:f6:b6:32:0b:d2:8b:8e:d8:7f:e4:bb:bf:3a:9d:8f:
4a:56:13:1c:f8:0f:f0:a4:13:e3:b5:d1:5e:9a:51:7a:92:07:
b5:64:43:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFmcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA1MjQwMzAzMTNaFw0yMjEyMzEwMzAzMTNaMBgxFjAU
BgNVBAMMDTYyOGM0YWY2LTU2ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwihBuSwsxxJZpwc7Jl5e996LNCiRQgiYtJbtSs7kOIgOgsB7yAVLGyp75
IE0QNg9UA2Uaq7uWWZUTQvXwgfjDHUXh60c97vRNnbfcYtVgV727eO+PsDnwhBrM
UMc4RmiuIFseN2BT7RjFDSU5kiLlFRnX2BxC5nqvg/RS0VRHyE0yb/pMPXRUcwaZ
5K1G054pyEDimKoW5ScWDqemUDd/+ZToixAT42GeCFrIJE3l2fHQKhF27wq78JGz
0wOscXTj9c9droMnfRZafDto1paVdpCQHJ/VFPGqoqyzPmJo5ZFRe3KTHYQsiUoa
UCkr0WahpEp/rA0pb8YBLqRV577PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfRRK
GLc8cm4oH6CsS5iIqXieMRYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzBGNkEyMzVFREIwRTExRUNBQ0QyOTE4NkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXBswDQYJKoZIhvcNAQEL
BQADggEBAMU55oJCvcIZLB0SCc4P9L41d6JSxSwvIxc8uXhkDw/D159l8/6YNWcD
Lc2y+HivgREOGnObQHEvNsmvivwv8Wm/nkavcDo/oKu+46hZ4vPC0FMEMT23nwm8
qdbbdR/b044LB2o+tge86kmGiPwnWuye+WZat60Q7fICdJpDoekMhiahoMvZ9753
eZZcXPFplCCa2j0G/nCNkF4lsG4m7S+2VWXFz9IJ7eb4cbX1iZjJ9vqXZTMhCX6b
iVE1zUSuPw1uR5OWV5tVL2WOF7g5M5CqU4IjHo3705iTJPa2MgvSi47Yf+S7vzqd
j0pWExz4D/CkE+O10V6aUXqSB7VkQ5M=
-----END CERTIFICATE-----
Generated at Sat Jul 5 19:21:41 2025 by rpki-client