Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B75442E8A9B11EEB07EC82F4AD9E6FC.roa
File: 1B75442E8A9B11EEB07EC82F4AD9E6FC.roa (raw, json)
Hash identifier: /C8dcTwdU0VfQ1co/6qRoUI1DeazugYO2JziJD96NT8=
Subject key identifier: 12:12:6E:27:25:A4:3F:F9:41:62:CB:24:DC:31:28:07:06:9F:CC:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5470
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B75442E8A9B11EEB07EC82F4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 07:28:48 +0000
ROA not before: Fri 24 Nov 2023 07:28:45 +0000
ROA not after: Tue 26 Dec 2023 07:28:45 +0000
asID: 62240
IP address blocks: 154.194.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21616 (0x5470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 07:28:45 2023 GMT
Not After : Dec 26 07:28:45 2023 GMT
Subject: CN=656050b0-7b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:43:66:21:08:f4:57:75:e2:41:40:99:5d:
72:78:d2:4b:0c:ce:76:e8:9b:1d:a8:b0:77:ab:9e:
31:7d:01:83:10:47:8e:8f:a7:23:d2:e4:f4:34:e5:
1e:db:78:96:24:e5:a3:44:8a:7f:8b:0c:b6:3b:17:
9f:87:15:e4:5e:f0:44:d6:6a:72:62:e0:98:43:27:
e7:ac:e0:b7:50:09:41:60:e3:b9:08:94:13:5a:f0:
77:fb:f2:94:d6:df:59:3b:bf:a1:13:58:ed:48:8f:
f4:17:bf:3a:75:52:e5:36:58:b2:11:15:e6:86:0b:
4b:95:9e:d0:9c:8b:79:68:7c:70:8d:ca:e3:88:3d:
39:c2:3f:2a:bb:49:ae:24:73:81:af:07:e7:90:41:
b7:b3:16:9a:c9:7b:69:ca:8a:fe:ef:fc:7d:61:3e:
f4:bf:10:5e:d4:00:70:61:ad:89:5d:93:ce:3e:d1:
b5:f7:fb:60:40:81:11:ff:02:73:ec:78:f2:c7:ae:
5b:d0:78:63:4f:74:54:1e:7f:85:5c:b5:43:74:8f:
49:1f:27:aa:6d:25:c0:73:65:f9:de:59:c6:66:c5:
a3:96:6f:e4:f7:80:2e:ab:ac:41:9b:36:c1:b0:fc:
4c:f6:ea:d1:90:82:85:1c:d9:1b:5f:3b:92:02:33:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:6E:27:25:A4:3F:F9:41:62:CB:24:DC:31:28:07:06:9F:CC:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B75442E8A9B11EEB07EC82F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dc:a7:b3:53:7b:ec:96:46:50:62:27:cc:77:0a:85:e7:3e:
42:2b:6e:6a:74:46:53:79:72:b1:cc:63:db:23:35:c5:3e:e1:
d9:78:ba:d1:f5:87:f1:d4:7e:41:1e:46:c6:74:ae:66:5a:78:
40:77:6d:05:8d:5b:35:33:ce:d5:ca:8f:4f:68:ba:bd:f4:8c:
79:74:e1:8d:ee:0a:91:44:36:46:a4:db:1b:d5:5b:1c:9a:8f:
57:78:8f:9b:8c:e3:3b:bb:63:ce:a3:d7:62:63:72:bd:a2:ff:
74:55:3b:eb:48:62:6a:26:2a:70:9e:01:0e:b2:e8:ab:4f:3a:
56:dc:19:ab:f6:00:00:b6:4f:45:35:8c:f7:e3:08:93:f3:61:
e5:70:69:c2:a7:52:17:32:e9:d5:16:30:11:ef:da:fb:ff:c4:
ce:8c:de:88:b1:54:0b:7f:32:ed:26:4f:d4:b2:2e:ac:de:c4:
0b:01:72:be:a8:6f:0e:f3:fe:e9:cf:6e:43:91:a4:f0:34:d4:
16:ba:5c:b1:e7:06:0a:b4:46:68:80:9c:8c:9a:4f:1b:f3:e4:
ae:3a:71:c2:9d:56:8d:bc:18:e0:ea:34:af:50:eb:46:e4:0f:
f7:23:ac:f2:18:71:b2:7f:80:de:33:bf:4a:2e:a3:45:1d:43:
23:0b:3d:6c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVHAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNzI4NDVaFw0yMzEyMjYwNzI4NDVaMBgxFjAU
BgNVBAMTDTY1NjA1MGIwLTdiM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVR0NmIQj0V3XiQUCZXXJ40ksMznbomx2osHernjF9AYMQR46PpyPS5PQ0
5R7beJYk5aNEin+LDLY7F5+HFeRe8ETWanJi4JhDJ+es4LdQCUFg47kIlBNa8Hf7
8pTW31k7v6ETWO1Ij/QXvzp1UuU2WLIRFeaGC0uVntCci3lofHCNyuOIPTnCPyq7
Sa4kc4GvB+eQQbezFprJe2nKiv7v/H1hPvS/EF7UAHBhrYldk84+0bX3+2BAgRH/
AnPsePLHrlvQeGNPdFQef4VctUN0j0kfJ6ptJcBzZfneWcZmxaOWb+T3gC6rrEGb
NsGw/Ez26tGQgoUc2RtfO5ICM/qHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUEhJu
JyWkP/lBYssk3DEoBwafzCEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFCNzU0NDJFOEE5QjExRUVCMDdFQzgyRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawl4wDQYJKoZIhvcNAQEL
BQADggEBAJzcp7NTe+yWRlBiJ8x3CoXnPkIrbmp0RlN5crHMY9sjNcU+4dl4utH1
h/HUfkEeRsZ0rmZaeEB3bQWNWzUzztXKj09our30jHl04Y3uCpFENkak2xvVWxya
j1d4j5uM4zu7Y86j12Jjcr2i/3RVO+tIYmomKnCeAQ6y6KtPOlbcGav2AAC2T0U1
jPfjCJPzYeVwacKnUhcy6dUWMBHv2vv/xM6M3oixVAt/Mu0mT9SyLqzexAsBcr6o
bw7z/unPbkORpPA01Ba6XLHnBgq0RmiAnIyaTxvz5K46ccKdVo28GODqNK9Q60bk
D/cjrPIYcbJ/gN4zv0ouo0UdQyMLPWw=
-----END CERTIFICATE-----
Generated at Fri May 9 12:23:03 2025 by rpki-client