Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F73ACF0057F11F0B5953751762E951A.roa
File: 0F73ACF0057F11F0B5953751762E951A.roa (raw, json)
Hash identifier: aitAYhRTmxU/gwlRYyRwlcWSb6FE5no+A1ugEKJXGn8=
Subject key identifier: 8A:0F:E6:ED:43:54:35:31:E4:E2:57:CE:5D:83:7D:EF:87:43:B3:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01753B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F73ACF0057F11F0B5953751762E951A.roa
Signing time: Thu 20 Mar 2025 11:32:53 +0000
ROA not before: Thu 20 Mar 2025 11:32:49 +0000
ROA not after: Sun 30 Mar 2025 11:32:49 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95547 (0x1753b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 11:32:49 2025 GMT
Not After : Mar 30 11:32:49 2025 GMT
Subject: CN=67dbfce5-f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:19:5d:6f:68:33:2d:c1:0d:3d:2d:70:c2:
7f:03:5c:fa:01:a7:96:f8:83:b0:f4:c5:97:53:81:
71:3c:29:19:88:e7:3c:63:c6:99:05:d8:43:34:e5:
3b:65:41:be:4f:d9:18:61:76:1c:2e:bd:29:a6:b8:
a8:79:27:e7:2c:44:67:c2:e8:54:39:1e:52:19:27:
e1:0b:7a:f8:c0:63:b1:1c:e7:25:40:0e:1a:6a:07:
b0:db:07:78:78:c0:f4:2e:44:1c:de:22:89:13:e8:
88:2a:49:0d:de:6f:9a:cb:2e:37:e9:c3:65:f9:f7:
8a:ff:4e:e6:f4:c3:13:b4:4a:d7:de:7a:a0:e7:72:
e4:c7:2f:ee:83:e3:14:10:ee:c8:2d:71:a8:06:51:
96:c2:2a:cd:42:27:a5:e2:02:4c:80:b4:93:77:f8:
cf:37:6d:a7:55:17:31:94:cb:bd:03:d6:2f:39:68:
53:00:d0:d9:f9:fe:5c:b8:3d:21:8f:63:36:e5:43:
13:66:3e:08:3d:81:01:85:d4:7f:1c:1a:e7:99:b9:
75:ac:9c:30:9f:f6:68:d4:58:d0:ec:89:0c:9b:8f:
17:01:ac:7d:a1:be:2a:28:e8:ff:5e:e2:e7:3a:65:
f5:c8:0b:c6:0f:33:d5:37:ff:22:f0:df:f7:b0:bb:
17:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:E6:ED:43:54:35:31:E4:E2:57:CE:5D:83:7D:EF:87:43:B3:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F73ACF0057F11F0B5953751762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
38:e2:d6:21:70:d8:2c:5e:2f:bf:09:7c:fa:e2:0f:94:87:3f:
b2:ce:25:19:0b:ac:e9:57:b2:8a:87:81:55:d2:d1:83:ed:c4:
e1:b9:c3:fd:bd:d6:03:39:0f:2a:36:85:af:98:04:72:59:f5:
c1:1b:24:3c:70:48:6f:8d:9b:a2:d1:4d:a7:35:d0:95:86:86:
c9:7b:9f:8f:a4:63:11:35:4e:c9:2b:b4:07:a7:36:9d:21:b2:
68:c0:83:20:c3:40:0d:27:0f:0b:76:da:3e:d8:d6:31:cd:1f:
1d:72:e8:97:88:0a:ae:52:7a:49:50:96:e6:08:8e:04:65:47:
d1:53:f8:76:82:e5:17:4f:05:86:c8:69:73:e7:19:37:54:d3:
af:99:d0:69:32:19:33:23:10:3c:2a:7b:03:ba:3e:c9:3e:30:
64:96:75:be:48:bc:22:db:66:e3:f9:df:17:1c:69:73:7f:06:
94:4e:69:b1:2c:6b:15:2d:5c:5f:ee:60:ed:87:64:87:80:cc:
6a:f2:ac:dd:6c:2b:3c:63:ff:59:18:1b:92:b0:71:15:66:3b:
9c:1d:87:32:3d:78:52:f4:5d:d3:2a:35:10:34:c3:81:64:cf:
f5:73:3a:dc:44:c7:8a:8d:e6:48:2d:cb:d3:c8:cf:17:83:5d:
29:04:d6:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXU7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzIwMTEzMjQ5WhcNMjUwMzMwMTEzMjQ5WjAYMRYw
FAYDVQQDEw02N2RiZmNlNS1mOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoDYZXW9oMy3BDT0tcMJ/A1z6AaeW+IOw9MWXU4FxPCkZiOc8Y8aZBdhD
NOU7ZUG+T9kYYXYcLr0pprioeSfnLERnwuhUOR5SGSfhC3r4wGOxHOclQA4aagew
2wd4eMD0LkQc3iKJE+iIKkkN3m+ayy436cNl+feK/07m9MMTtErX3nqg53Lkxy/u
g+MUEO7ILXGoBlGWwirNQiel4gJMgLSTd/jPN22nVRcxlMu9A9YvOWhTANDZ+f5c
uD0hj2M25UMTZj4IPYEBhdR/HBrnmbl1rJwwn/Zo1FjQ7IkMm48XAax9ob4qKOj/
XuLnOmX1yAvGDzPVN/8i8N/3sLsXkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIoP
5u1DVDUx5OJXzl2Dfe+HQ7NRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjczQUNGMDA1N0YxMUYwQjU5NTM3NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlkQMA0GCSqGSIb3DQEB
CwUAA4IBAQA44tYhcNgsXi+/CXz64g+Uhz+yziUZC6zpV7KKh4FV0tGD7cThucP9
vdYDOQ8qNoWvmARyWfXBGyQ8cEhvjZui0U2nNdCVhobJe5+PpGMRNU7JK7QHpzad
IbJowIMgw0ANJw8Ldto+2NYxzR8dcuiXiAquUnpJUJbmCI4EZUfRU/h2guUXTwWG
yGlz5xk3VNOvmdBpMhkzIxA8KnsDuj7JPjBklnW+SLwi22bj+d8XHGlzfwaUTmmx
LGsVLVxf7mDth2SHgMxq8qzdbCs8Y/9ZGBuSsHEVZjucHYcyPXhS9F3TKjUQNMOB
ZM/1czrcRMeKjeZILcvTyM8Xg10pBNbX
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:49 2025 by rpki-client