Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAD8ABEDB1511EF8ED95B8B762E951A.roa
File: 2CAD8ABEDB1511EF8ED95B8B762E951A.roa (raw, json)
Hash identifier: YBJqOxZrGTL5iMay/fQzMifReX1F+qOu2PvGk+9tF/s=
Subject key identifier: C2:09:D1:87:78:6F:70:60:B9:4C:F3:4D:8C:0E:E9:9D:28:78:B4:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014930
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAD8ABEDB1511EF8ED95B8B762E951A.roa
Signing time: Sat 25 Jan 2025 12:09:06 +0000
ROA not before: Sat 25 Jan 2025 12:09:03 +0000
ROA not after: Sun 30 Mar 2025 12:09:03 +0000
asID: 63139
IP address blocks: 154.94.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84272 (0x14930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:09:03 2025 GMT
Not After : Mar 30 12:09:03 2025 GMT
Subject: CN=6794d462-90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:70:1f:62:90:fa:f7:e8:03:04:86:56:b0:
7a:a0:ee:b0:bb:c6:39:e9:8d:cb:3e:8d:20:b4:ca:
74:b2:de:24:bd:56:8f:ed:b6:9f:0a:cf:2e:36:a5:
9a:28:fb:e8:cc:1c:50:82:b6:a9:50:06:b4:0b:b5:
3e:b7:52:63:7d:9f:76:83:e6:a9:cf:c6:98:b0:20:
97:43:25:cf:e1:7a:94:f2:c0:0a:dc:0d:e3:29:90:
20:2d:06:90:b5:a9:40:5c:a4:e4:1c:b4:42:16:54:
7f:0c:5c:e6:62:b3:5e:78:cd:28:99:50:75:f8:49:
6d:69:d2:20:06:4d:75:dc:cc:eb:61:c3:2c:38:a9:
66:67:12:af:ba:ca:3a:d0:6d:c7:3c:7f:38:52:95:
1b:6a:93:21:7c:44:14:0e:7d:ae:2c:d9:e3:ff:ce:
a7:2d:b4:a7:75:9d:65:53:4f:55:24:c4:e4:cf:50:
4d:81:29:b6:ea:34:ee:ab:10:1d:14:1a:59:a5:4d:
fa:a9:e2:59:9d:48:56:fb:ea:d5:85:e8:18:d1:7a:
e0:68:a3:d2:bb:01:e8:ea:42:c8:be:68:f9:04:aa:
24:7a:2f:0f:3c:a2:a0:79:49:1b:b3:93:7c:06:08:
2b:ae:f1:cb:c5:7b:d2:59:b7:ee:eb:d7:16:c8:27:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:D1:87:78:6F:70:60:B9:4C:F3:4D:8C:0E:E9:9D:28:78:B4:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CAD8ABEDB1511EF8ED95B8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:99:69:ec:a8:ef:3e:8a:0e:cb:cd:cc:1c:de:8d:e8:75:b0:
6b:09:6f:14:f7:53:a7:46:00:21:ac:cf:b4:f8:20:dd:46:48:
20:37:e1:91:31:3e:b7:4b:f5:3d:82:a6:bf:dd:60:bd:29:2f:
3e:0c:71:9d:ba:96:92:06:1f:69:ea:66:d5:43:35:ca:83:69:
71:42:c9:36:c6:65:60:39:73:41:a3:3f:7f:25:00:a3:a0:cc:
d8:26:1a:8b:74:f1:3b:d3:cc:d9:ba:74:b2:b3:b9:98:7b:95:
99:b9:72:9f:15:f0:78:a9:f8:04:b6:7d:cb:13:62:37:44:26:
cb:a5:58:68:a2:c2:05:87:56:a9:53:cd:1b:25:a8:55:8c:d2:
01:83:c7:59:a9:fb:6d:2d:2e:37:1b:46:56:49:50:72:69:f3:
d9:ac:ab:a7:43:e3:03:55:d4:22:1e:33:bb:62:8e:b4:48:3a:
9e:5a:92:25:01:82:7e:0f:57:5c:38:84:dc:a5:91:df:91:aa:
35:e3:fd:7e:84:90:43:2d:38:46:3c:63:2e:a9:1a:36:26:60:
03:05:c7:48:df:02:0f:e0:7f:0c:2c:b0:89:57:4f:45:f9:30:
63:aa:ec:68:68:19:4f:96:9c:fc:bf:78:92:4c:f1:bb:24:54:
0b:a7:70:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTIwOTAzWhcNMjUwMzMwMTIwOTAzWjAYMRYw
FAYDVQQDEw02Nzk0ZDQ2Mi05MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo1JwH2KQ+vfoAwSGVrB6oO6wu8Y56Y3LPo0gtMp0st4kvVaP7bafCs8u
NqWaKPvozBxQgrapUAa0C7U+t1JjfZ92g+apz8aYsCCXQyXP4XqU8sAK3A3jKZAg
LQaQtalAXKTkHLRCFlR/DFzmYrNeeM0omVB1+EltadIgBk113MzrYcMsOKlmZxKv
uso60G3HPH84UpUbapMhfEQUDn2uLNnj/86nLbSndZ1lU09VJMTkz1BNgSm26jTu
qxAdFBpZpU36qeJZnUhW++rVhegY0XrgaKPSuwHo6kLIvmj5BKokei8PPKKgeUkb
s5N8BggrrvHLxXvSWbfu69cWyCdpEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMIJ
0Yd4b3BguUzzTYwO6Z0oeLRhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQ0FEOEFCRURCMTUxMUVGOEVEOTVCOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5/MA0GCSqGSIb3DQEB
CwUAA4IBAQB6mWnsqO8+ig7Lzcwc3o3odbBrCW8U91OnRgAhrM+0+CDdRkggN+GR
MT63S/U9gqa/3WC9KS8+DHGdupaSBh9p6mbVQzXKg2lxQsk2xmVgOXNBoz9/JQCj
oMzYJhqLdPE708zZunSys7mYe5WZuXKfFfB4qfgEtn3LE2I3RCbLpVhoosIFh1ap
U80bJahVjNIBg8dZqfttLS43G0ZWSVByafPZrKunQ+MDVdQiHjO7Yo60SDqeWpIl
AYJ+D1dcOITcpZHfkao14/1+hJBDLThGPGMuqRo2JmADBcdI3wIP4H8MLLCJV09F
+TBjquxoaBlPlpz8v3iSTPG7JFQLp3Ad
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:07:45 2025 by rpki-client