Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DCFEF0F6BB11EFA2CEE654762E951A.roa
File: 12DCFEF0F6BB11EFA2CEE654762E951A.roa (raw, json)
Hash identifier: y/svzFPSIxITWpdeY9mHARd0cHzMlovIqbUIr8l8oHM=
Subject key identifier: 3D:04:4B:82:9B:F8:F6:D1:BD:3E:EE:92:F4:84:8F:07:A5:77:68:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DCFEF0F6BB11EFA2CEE654762E951A.roa
Signing time: Sat 01 Mar 2025 16:34:41 +0000
ROA not before: Sat 01 Mar 2025 16:34:37 +0000
ROA not after: Mon 31 Mar 2025 16:34:37 +0000
asID: 202656
IP address blocks: 154.219.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93927 (0x16ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 16:34:37 2025 GMT
Not After : Mar 31 16:34:37 2025 GMT
Subject: CN=67c33721-441a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:30:6d:f8:9c:a4:1e:45:2f:4d:73:90:b3:
29:5b:1b:2f:f2:be:51:01:ce:4d:87:e9:94:47:5c:
0a:4f:c5:28:4b:68:8e:06:e5:ef:78:a9:af:c9:81:
02:02:11:de:e6:35:bc:6e:f1:ed:9f:c3:be:fc:40:
2b:0a:32:2c:90:48:20:fb:98:e4:9f:19:45:9a:bd:
64:27:a5:c2:ba:75:b8:27:51:94:8b:86:c1:d8:61:
68:86:d6:82:65:9e:27:48:ad:51:0e:91:d1:aa:96:
b8:0e:23:d9:b1:0f:ec:a7:d9:48:75:65:37:3f:06:
f7:1c:bd:25:de:14:e5:f7:9d:ed:99:21:ed:80:ee:
ec:aa:7f:dc:f8:bb:62:8d:41:62:d0:e8:0d:84:fc:
2c:28:9f:d7:f6:07:21:71:ec:2c:2d:ee:37:32:19:
03:6e:4c:06:a9:d3:31:18:cf:a6:9b:20:aa:d4:bb:
a7:ac:ca:6a:ef:61:df:3b:8c:61:f0:d8:90:4a:4d:
c7:57:56:a7:e0:12:d7:55:ae:5d:6e:e6:3c:60:e1:
76:89:03:e3:8f:31:29:8e:3e:db:a1:bc:24:41:e2:
19:7e:f1:47:d0:71:a7:cf:4c:f4:50:89:80:47:aa:
e6:40:7b:fd:88:ea:b6:2a:98:9a:fb:53:20:66:f8:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:4B:82:9B:F8:F6:D1:BD:3E:EE:92:F4:84:8F:07:A5:77:68:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12DCFEF0F6BB11EFA2CEE654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b0:ab:4d:69:e6:54:b8:41:c0:86:07:6e:20:1f:c7:bb:8d:
d7:80:d7:5d:89:37:9a:82:81:a8:77:5a:ec:3b:5d:6e:e1:9c:
83:ab:f8:da:c0:74:a2:b7:e2:38:a3:ee:5b:79:93:52:a8:db:
b7:a7:30:91:e7:30:9b:44:70:2c:02:62:d5:3b:15:0c:74:92:
65:ec:e4:52:ba:f6:67:c7:9c:1d:17:75:22:20:9b:b4:1c:89:
1d:12:c4:5b:96:5d:68:0a:86:9f:2e:f4:22:a9:14:f0:74:0a:
d9:ad:06:ec:92:e0:4c:bd:a3:68:ec:0b:9b:0e:c8:22:43:d5:
af:6b:da:14:ea:16:1b:26:77:fd:b5:ec:d3:17:44:c2:a3:0d:
b5:00:51:60:3f:08:09:8d:9f:8c:3c:cf:86:3e:33:9e:3f:24:
d6:00:aa:1d:49:d9:3e:9d:8c:c0:09:99:1f:33:c9:8b:ef:e5:
b5:e0:8c:7e:b3:1d:60:f2:36:42:0d:a8:12:1d:13:e8:1c:f8:
74:1d:9f:b6:25:c4:33:ec:d6:ea:11:38:a5:2f:06:c8:f4:24:
e1:47:fa:d6:40:41:ae:46:d3:39:7f:3f:27:e4:cc:2c:9d:53:
e0:c1:06:a6:42:2b:c4:72:8e:3f:c3:a4:bb:45:b4:6b:43:bb:
22:d4:42:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW7nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTYzNDM3WhcNMjUwMzMxMTYzNDM3WjAYMRYw
FAYDVQQDEw02N2MzMzcyMS00NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1FYwbficpB5FL01zkLMpWxsv8r5RAc5Nh+mUR1wKT8UoS2iOBuXveKmv
yYECAhHe5jW8bvHtn8O+/EArCjIskEgg+5jknxlFmr1kJ6XCunW4J1GUi4bB2GFo
htaCZZ4nSK1RDpHRqpa4DiPZsQ/sp9lIdWU3Pwb3HL0l3hTl953tmSHtgO7sqn/c
+LtijUFi0OgNhPwsKJ/X9gchcewsLe43MhkDbkwGqdMxGM+mmyCq1LunrMpq72Hf
O4xh8NiQSk3HV1an4BLXVa5dbuY8YOF2iQPjjzEpjj7bobwkQeIZfvFH0HGnz0z0
UImAR6rmQHv9iOq2Kpia+1MgZvhJbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD0E
S4Kb+PbRvT7ukvSEjweld2jmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkRDRkVGMEY2QkIxMUVGQTJDRUU2NTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvhMA0GCSqGSIb3DQEB
CwUAA4IBAQBdsKtNaeZUuEHAhgduIB/Hu43XgNddiTeagoGod1rsO11u4ZyDq/ja
wHSit+I4o+5beZNSqNu3pzCR5zCbRHAsAmLVOxUMdJJl7ORSuvZnx5wdF3UiIJu0
HIkdEsRbll1oCoafLvQiqRTwdArZrQbskuBMvaNo7AubDsgiQ9Wva9oU6hYbJnf9
tezTF0TCow21AFFgPwgJjZ+MPM+GPjOePyTWAKodSdk+nYzACZkfM8mL7+W14Ix+
sx1g8jZCDagSHRPoHPh0HZ+2JcQz7NbqETilLwbI9CThR/rWQEGuRtM5fz8n5Mws
nVPgwQamQivEco4/w6S7RbRrQ7si1EIT
-----END CERTIFICATE-----
Generated at Fri May 9 06:42:59 2025 by rpki-client