Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17CCF5B8F5E511EFA2B9199F762E951A.roa
File: 17CCF5B8F5E511EFA2B9199F762E951A.roa (raw, json)
Hash identifier: W1ld3TF7JfYl0uYhk5TF/MYnnWs7aTpMTuplTDDKBqE=
Subject key identifier: A9:7E:05:B1:C8:72:9A:7A:8C:62:53:0C:B6:31:64:84:9D:D3:F7:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17CCF5B8F5E511EFA2B9199F762E951A.roa
Signing time: Fri 28 Feb 2025 15:02:57 +0000
ROA not before: Fri 28 Feb 2025 15:02:53 +0000
ROA not after: Wed 26 Mar 2025 15:02:53 +0000
asID: 62240
IP address blocks: 154.194.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93071 (0x16b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 15:02:53 2025 GMT
Not After : Mar 26 15:02:53 2025 GMT
Subject: CN=67c1d021-6e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:54:6c:78:a3:a9:5e:8c:62:2b:51:30:6d:
8f:d6:55:55:a5:96:ea:31:c4:b1:56:65:5b:1d:95:
b2:8d:23:01:1c:bb:0b:e5:5f:65:f2:00:37:49:79:
78:7f:94:50:72:e5:e1:11:88:e8:8b:a6:ea:9b:ee:
f7:42:1b:e1:f4:5b:cc:84:3e:d6:a1:f2:79:8c:8b:
28:7d:62:0b:72:0a:45:35:5f:e6:d6:58:db:3e:78:
b5:09:9a:75:e7:da:0d:cc:92:55:3c:3a:a6:6b:c4:
19:dc:4a:ce:2a:44:99:1c:01:30:60:66:cd:46:7d:
17:ca:f0:4b:ed:2f:55:5e:8e:46:8e:3e:fc:d7:45:
f5:31:61:83:eb:f1:a4:d4:2b:d1:b4:59:7e:a1:64:
05:9c:05:d9:a8:91:5e:22:2e:f0:44:e6:bd:7a:ca:
23:60:27:08:e8:c4:f0:c5:89:f2:60:d4:f2:54:d5:
38:43:b5:4e:2f:96:e7:57:f7:2e:80:a7:09:06:ea:
46:bb:56:94:99:2e:06:35:aa:6c:b7:c9:8c:01:96:
6d:ed:cd:26:08:d6:c9:96:8b:32:22:bc:21:34:83:
cf:ef:ed:59:40:e2:bf:1b:e5:46:63:18:7e:65:51:
87:59:07:ca:3e:13:0e:dd:8a:74:ef:5d:1f:c9:a8:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:05:B1:C8:72:9A:7A:8C:62:53:0C:B6:31:64:84:9D:D3:F7:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17CCF5B8F5E511EFA2B9199F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
21:56:5b:f1:e7:49:d4:a1:68:b2:76:0c:ce:a6:88:ce:4e:ae:
f7:9b:53:5c:4d:07:f3:fa:df:af:04:27:f9:60:f7:44:a0:fd:
87:f4:26:c8:1c:4c:04:2c:ee:f1:47:47:11:d6:1b:d1:1b:5d:
01:7c:e3:72:01:4a:4f:ec:1f:38:c5:47:91:a0:2f:be:47:2b:
d1:2f:41:cc:ad:a4:2b:22:2b:52:bc:5a:bf:30:f7:f0:a5:ce:
5a:c2:ae:a2:a4:56:e4:72:ab:a8:bd:d2:69:25:fe:ea:84:b3:
51:8f:c0:06:81:a3:2c:e2:c5:87:c0:0f:e5:a9:50:e8:59:86:
6e:0b:c8:13:f9:bd:24:1b:13:87:00:00:32:09:65:b2:2d:ee:
ea:71:75:91:6b:f4:2d:0b:7d:48:b9:f5:ec:d8:cd:84:ff:a0:
f4:4f:37:39:33:82:30:2e:db:b8:d5:1f:72:c2:8d:94:15:c3:
e3:02:ef:5f:4e:51:28:70:24:91:24:6f:20:f7:34:e2:06:9a:
c8:7e:f6:1d:18:54:27:44:7f:79:3e:ac:8b:cf:9d:ea:8c:ba:
3d:8a:b7:22:ec:22:84:ad:47:2e:20:db:6c:1f:75:2f:4e:cc:
f8:f7:cb:33:2b:4f:b0:66:b0:f1:e7:c7:47:16:da:b7:14:31:
23:71:52:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWuPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTUwMjUzWhcNMjUwMzI2MTUwMjUzWjAYMRYw
FAYDVQQDEw02N2MxZDAyMS02ZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm45UbHijqV6MYitRMG2P1lVVpZbqMcSxVmVbHZWyjSMBHLsL5V9l8gA3
SXl4f5RQcuXhEYjoi6bqm+73Qhvh9FvMhD7WofJ5jIsofWILcgpFNV/m1ljbPni1
CZp159oNzJJVPDqma8QZ3ErOKkSZHAEwYGbNRn0XyvBL7S9VXo5Gjj7810X1MWGD
6/Gk1CvRtFl+oWQFnAXZqJFeIi7wROa9esojYCcI6MTwxYnyYNTyVNU4Q7VOL5bn
V/cugKcJBupGu1aUmS4GNapst8mMAZZt7c0mCNbJlosyIrwhNIPP7+1ZQOK/G+VG
Yxh+ZVGHWQfKPhMO3Yp0710fyahyBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKl+
BbHIcpp6jGJTDLYxZISd0/dDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xN0NDRjVCOEY1RTUxMUVGQTJCOTE5OUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJfMA0GCSqGSIb3DQEB
CwUAA4IBAQAhVlvx50nUoWiydgzOpojOTq73m1NcTQfz+t+vBCf5YPdEoP2H9CbI
HEwELO7xR0cR1hvRG10BfONyAUpP7B84xUeRoC++RyvRL0HMraQrIitSvFq/MPfw
pc5awq6ipFbkcquovdJpJf7qhLNRj8AGgaMs4sWHwA/lqVDoWYZuC8gT+b0kGxOH
AAAyCWWyLe7qcXWRa/QtC31IufXs2M2E/6D0Tzc5M4IwLtu41R9ywo2UFcPjAu9f
TlEocCSRJG8g9zTiBprIfvYdGFQnRH95PqyLz53qjLo9irci7CKErUcuINtsH3Uv
Tsz498szK0+wZrDx58dHFtq3FDEjcVIQ
-----END CERTIFICATE-----
Generated at Fri May 9 07:43:31 2025 by rpki-client