Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F91073ADC0E11EFAA593594762E951A.roa
File: 1F91073ADC0E11EFAA593594762E951A.roa (raw, json)
Hash identifier: 4im8SLTvvsz8qB20ctregE9+r9JOvPzV5fjlDMGGywU=
Subject key identifier: A7:DE:4C:5D:99:FA:7C:2C:1A:31:15:41:AC:F1:54:DD:2D:3A:C4:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F91073ADC0E11EFAA593594762E951A.roa
Signing time: Sun 26 Jan 2025 17:51:09 +0000
ROA not before: Sun 26 Jan 2025 17:51:04 +0000
ROA not after: Tue 01 Apr 2025 17:51:04 +0000
asID: 63139
IP address blocks: 154.94.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84788 (0x14b34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:51:04 2025 GMT
Not After : Apr 1 17:51:04 2025 GMT
Subject: CN=6796760d-6ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:5c:24:65:ad:8c:4a:f8:ba:96:c4:7a:d8:
1e:98:7a:e2:61:8f:b5:f8:d4:75:cb:2b:23:72:f7:
99:49:a5:9e:c1:e2:26:4a:a2:ca:a9:2c:9c:41:08:
05:4b:bc:1f:aa:0e:93:92:cd:57:78:13:0f:bd:d8:
c1:b5:3f:63:c8:bc:e5:28:7f:03:d4:bd:86:63:93:
b8:1d:d0:d8:20:3b:91:0c:40:59:c8:93:ce:30:b6:
c0:f0:07:a9:28:ab:3e:10:ef:12:83:a0:bf:d2:9b:
66:2a:eb:ec:fa:db:2e:89:22:71:08:88:29:13:bf:
4e:48:be:02:34:84:bc:95:f7:9c:0d:90:94:de:51:
99:f9:d4:5e:05:06:de:d8:cd:cf:03:a0:3b:d4:28:
4f:e8:ce:f5:c8:7a:b7:ba:8a:ec:46:d4:7d:8d:7d:
20:02:58:20:1c:6f:97:1d:97:84:0f:6b:9d:22:1e:
da:ac:22:4d:a9:3a:29:17:17:fe:e3:fc:33:7d:14:
ad:09:86:d1:ce:07:91:99:01:32:4d:be:25:c8:f0:
38:b1:c0:e3:12:ad:29:ca:bb:40:6f:ac:11:37:d4:
d7:86:14:95:62:79:08:0d:b1:4d:c0:86:ed:96:52:
68:00:99:70:d7:7b:ec:a6:e2:9a:95:b4:52:0f:58:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:4C:5D:99:FA:7C:2C:1A:31:15:41:AC:F1:54:DD:2D:3A:C4:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F91073ADC0E11EFAA593594762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.84.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:e8:44:47:aa:6d:19:8f:bf:71:c9:86:10:5f:ba:59:46:b5:
39:ca:ec:bc:43:c5:e4:f4:fe:ca:c9:9d:44:12:f1:bd:5c:b7:
c2:a2:db:23:df:5d:36:63:5a:45:82:6d:8d:d7:a9:6a:90:e4:
e3:28:a3:f1:d7:f7:e7:8a:f6:7f:b2:18:46:ff:3c:0c:df:1c:
4f:fd:11:a2:7c:2f:a8:8d:b3:78:b3:0a:c6:37:48:83:82:d8:
c9:2f:11:7d:74:27:1f:46:a1:44:c7:d4:a3:d6:79:db:aa:f5:
d6:93:6d:e9:56:62:20:c4:8c:16:33:e4:32:f0:96:ca:16:1e:
01:7f:7c:a9:05:83:de:a8:f5:19:a2:e3:59:49:64:0a:13:80:
07:31:da:e6:29:e0:28:e2:4a:20:19:81:a1:d0:e6:35:56:44:
20:21:ac:7f:40:2d:6e:7f:fd:86:cd:a7:e4:57:06:8b:c3:73:
8c:b4:6b:30:7a:73:27:9b:6d:a0:ab:33:af:37:73:04:f2:5d:
71:d1:03:46:3e:82:16:7c:96:ac:ed:d9:19:d9:d2:85:ab:63:
0b:02:e2:45:8c:38:59:33:c1:47:dc:b1:39:2b:b0:63:65:37:
bc:75:37:d0:b3:52:52:31:f1:9f:f3:c1:ce:79:cf:22:99:3e:
91:98:af:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUs0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTc1MTA0WhcNMjUwNDAxMTc1MTA0WjAYMRYw
FAYDVQQDEw02Nzk2NzYwZC02Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuTFcJGWtjEr4upbEetgemHriYY+1+NR1yysjcveZSaWeweImSqLKqSyc
QQgFS7wfqg6Tks1XeBMPvdjBtT9jyLzlKH8D1L2GY5O4HdDYIDuRDEBZyJPOMLbA
8AepKKs+EO8Sg6C/0ptmKuvs+tsuiSJxCIgpE79OSL4CNIS8lfecDZCU3lGZ+dRe
BQbe2M3PA6A71ChP6M71yHq3uorsRtR9jX0gAlggHG+XHZeED2udIh7arCJNqTop
Fxf+4/wzfRStCYbRzgeRmQEyTb4lyPA4scDjEq0pyrtAb6wRN9TXhhSVYnkIDbFN
wIbtllJoAJlw13vspuKalbRSD1jloQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKfe
TF2Z+nwsGjEVQazxVN0tOsTAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjkxMDczQURDMEUxMUVGQUE1OTM1OTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5UMA0GCSqGSIb3DQEB
CwUAA4IBAQDV6ERHqm0Zj79xyYYQX7pZRrU5yuy8Q8Xk9P7KyZ1EEvG9XLfCotsj
3102Y1pFgm2N16lqkOTjKKPx1/fnivZ/shhG/zwM3xxP/RGifC+ojbN4swrGN0iD
gtjJLxF9dCcfRqFEx9Sj1nnbqvXWk23pVmIgxIwWM+Qy8JbKFh4Bf3ypBYPeqPUZ
ouNZSWQKE4AHMdrmKeAo4kogGYGh0OY1VkQgIax/QC1uf/2GzafkVwaLw3OMtGsw
enMnm22gqzOvN3ME8l1x0QNGPoIWfJas7dkZ2dKFq2MLAuJFjDhZM8FH3LE5K7Bj
ZTe8dTfQs1JSMfGf88HOec8imT6RmK9g
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:44 2025 by rpki-client