Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A4B4444F5E411EFB7CB7A96762E951A.roa
File: 1A4B4444F5E411EFB7CB7A96762E951A.roa (raw, json)
Hash identifier: GdMiptWeOdokasXYq+PtErZa6YhXM+kUxf6Bs4jT2BM=
Subject key identifier: 7D:11:AD:F9:74:B6:60:A7:2F:47:6A:1D:FE:3D:19:B3:A8:88:46:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A4B4444F5E411EFB7CB7A96762E951A.roa
Signing time: Fri 28 Feb 2025 14:55:51 +0000
ROA not before: Fri 28 Feb 2025 14:55:48 +0000
ROA not after: Wed 26 Mar 2025 14:55:48 +0000
asID: 62240
IP address blocks: 154.194.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93058 (0x16b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 14:55:48 2025 GMT
Not After : Mar 26 14:55:48 2025 GMT
Subject: CN=67c1ce77-e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:06:69:7c:e8:83:3b:32:66:ba:5b:b8:d9:
0b:13:96:1d:2e:94:fd:fb:a9:ba:19:a3:cd:f3:7a:
b3:76:75:7b:17:84:6d:7a:51:7f:98:ca:34:26:8d:
3c:aa:c3:69:0c:c0:0a:3b:6e:63:44:9d:ef:0f:ea:
0d:0f:f1:64:1c:12:66:74:38:87:5e:62:19:a6:80:
ad:93:55:9d:70:e0:6e:a8:71:35:81:74:a6:a7:1a:
ff:01:5a:aa:66:d7:34:b7:06:f3:d0:e4:24:97:80:
df:fa:24:39:f7:13:19:8d:2b:97:99:66:fa:92:f5:
ed:9b:81:3f:b6:d1:62:b9:52:a1:9c:35:88:80:8f:
73:0e:34:45:67:3d:74:97:2e:0f:2d:32:ef:37:08:
2f:08:36:61:10:92:aa:42:41:b1:3f:a4:2a:42:66:
84:6d:50:d5:2a:2e:f3:78:cd:c3:31:32:50:16:97:
13:db:87:2c:26:d9:53:65:e3:cf:9b:dd:f3:f1:d5:
69:b0:85:f0:fc:51:5b:39:3c:59:c6:b1:d5:e7:e1:
86:87:78:d3:ef:50:30:e0:80:cf:5c:b9:9e:76:7d:
81:ad:10:b5:ef:48:95:70:37:24:c9:a6:c9:a1:ca:
89:f3:94:82:d6:cb:49:24:07:2a:10:fc:6d:58:22:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:AD:F9:74:B6:60:A7:2F:47:6A:1D:FE:3D:19:B3:A8:88:46:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A4B4444F5E411EFB7CB7A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.91.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a6:5f:63:c5:17:f7:39:da:af:4c:24:9f:62:37:e7:25:6b:
f4:6e:2a:e4:71:fa:9f:01:71:22:64:7c:24:96:84:b7:0d:ce:
7d:7e:39:0e:e4:cb:f2:36:32:4d:af:e4:fb:02:93:b3:0d:9b:
88:67:06:67:f0:a5:25:e4:72:e3:fd:a7:a7:a0:67:e8:33:50:
a7:b6:54:a2:bd:67:60:fc:01:b7:9f:86:4e:47:fc:49:59:20:
4b:1d:31:6d:b1:ed:40:14:f5:a8:1c:97:3d:83:4b:bc:cb:97:
47:3f:2f:50:1f:e4:ce:73:28:46:8f:ca:7e:b7:fe:87:e0:be:
0f:88:bd:7b:9b:ed:d2:f8:08:b5:ee:37:4f:e0:0f:15:5b:55:
09:96:2f:cd:3f:a5:72:53:bf:7c:80:30:7c:ea:85:0f:82:ea:
76:18:d5:41:c1:ef:ed:5d:e6:b5:e6:d1:7a:1e:f3:70:95:84:
4a:33:82:0d:5a:2e:2d:6f:e7:5c:27:18:eb:d9:88:49:16:8d:
79:f2:7b:c4:e7:66:f3:66:80:d2:5a:62:c3:4e:02:d0:f3:42:
f7:91:80:3c:74:8c:cf:be:e1:c7:fe:af:cc:8a:f2:b8:16:72:
c8:81:4f:a6:e9:57:48:04:78:30:0e:09:0c:6d:2e:da:01:a5:
39:71:0a:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWuCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTQ1NTQ4WhcNMjUwMzI2MTQ1NTQ4WjAYMRYw
FAYDVQQDEw02N2MxY2U3Ny1lMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSAGaXzogzsyZrpbuNkLE5YdLpT9+6m6GaPN83qzdnV7F4RtelF/mMo0
Jo08qsNpDMAKO25jRJ3vD+oND/FkHBJmdDiHXmIZpoCtk1WdcOBuqHE1gXSmpxr/
AVqqZtc0twbz0OQkl4Df+iQ59xMZjSuXmWb6kvXtm4E/ttFiuVKhnDWIgI9zDjRF
Zz10ly4PLTLvNwgvCDZhEJKqQkGxP6QqQmaEbVDVKi7zeM3DMTJQFpcT24csJtlT
ZePPm93z8dVpsIXw/FFbOTxZxrHV5+GGh3jT71Aw4IDPXLmedn2BrRC170iVcDck
yabJocqJ85SC1stJJAcqEPxtWCL78wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH0R
rfl0tmCnL0dqHf49GbOoiEa0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQTRCNDQ0NEY1RTQxMUVGQjdDQjdBOTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJbMA0GCSqGSIb3DQEB
CwUAA4IBAQCHpl9jxRf3OdqvTCSfYjfnJWv0birkcfqfAXEiZHwkloS3Dc59fjkO
5MvyNjJNr+T7ApOzDZuIZwZn8KUl5HLj/aenoGfoM1CntlSivWdg/AG3n4ZOR/xJ
WSBLHTFtse1AFPWoHJc9g0u8y5dHPy9QH+TOcyhGj8p+t/6H4L4PiL17m+3S+Ai1
7jdP4A8VW1UJli/NP6VyU798gDB86oUPgup2GNVBwe/tXea15tF6HvNwlYRKM4IN
Wi4tb+dcJxjr2YhJFo158nvE52bzZoDSWmLDTgLQ80L3kYA8dIzPvuHH/q/MivK4
FnLIgU+m6VdIBHgwDgkMbS7aAaU5cQrR
-----END CERTIFICATE-----
Generated at Fri May 9 06:40:18 2025 by rpki-client