Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D49415C8A8511EE875A67664AD9E6FC.roa
File: 2D49415C8A8511EE875A67664AD9E6FC.roa (raw, json)
Hash identifier: 27jP3a2wggwZEijDZHoSijzBB042dGGmeybgr6dZ2ZE=
Subject key identifier: 68:2C:C6:D0:4E:A3:25:9F:97:61:7E:7E:8B:08:75:89:4A:D7:52:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D49415C8A8511EE875A67664AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:51:49 +0000
ROA not before: Fri 24 Nov 2023 04:51:46 +0000
ROA not after: Tue 26 Dec 2023 04:51:46 +0000
asID: 62240
IP address blocks: 154.195.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21240 (0x52f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:51:46 2023 GMT
Not After : Dec 26 04:51:46 2023 GMT
Subject: CN=65602be5-1df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:fa:2c:cd:e8:42:b3:60:07:d6:5d:10:d2:
98:a0:b6:f6:b1:3b:21:2c:56:14:09:0f:7c:f5:42:
d5:2a:bd:8a:6c:b8:f5:ae:57:6b:51:16:df:20:6b:
1d:05:cb:c5:44:ad:d1:aa:52:d6:39:6c:a0:0b:c3:
b4:ed:51:82:df:ea:71:97:b9:ab:11:72:da:a6:10:
18:a2:05:f0:17:d5:86:47:b9:4c:7e:99:aa:ac:1e:
b0:b1:b7:7a:23:24:26:2e:fe:d1:b7:e0:91:70:5b:
7d:e4:ed:07:cb:8f:fa:1a:34:4b:7e:34:d2:d9:eb:
aa:f8:79:20:d9:c2:11:45:b4:e1:49:a2:01:33:7c:
a2:76:dc:35:07:11:f0:72:a6:80:a7:1c:9f:a1:1c:
d7:d0:58:1c:5a:d4:ad:12:a2:10:03:c8:d6:60:08:
d8:b3:ba:af:98:aa:13:06:bf:93:db:b6:5a:12:03:
d4:5e:cf:98:69:b3:70:94:55:b7:11:68:7b:80:03:
23:08:75:02:8a:ee:b5:58:ac:95:b8:7a:c9:5a:1e:
51:ce:87:7f:6e:54:4b:0f:74:8a:1c:f3:ff:e1:30:
68:58:32:80:2d:36:4c:9c:5e:d3:b2:48:5a:af:ba:
33:54:ac:3e:51:bb:4b:be:97:36:9f:20:00:81:bc:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:C6:D0:4E:A3:25:9F:97:61:7E:7E:8B:08:75:89:4A:D7:52:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D49415C8A8511EE875A67664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.100.0/24
Signature Algorithm: sha256WithRSAEncryption
81:88:f4:97:76:84:7f:90:4c:04:96:f3:04:59:5e:03:c8:7b:
16:c3:26:a1:0e:db:3f:0a:dd:be:20:27:5f:4d:9b:1f:1d:18:
26:c9:9f:8b:dd:21:c7:62:c4:51:20:d6:7b:d8:ef:02:cf:cb:
4a:ee:f3:d7:db:10:f9:73:7c:bc:cd:11:e7:7a:f3:4c:6a:f4:
b6:53:b7:28:b6:33:c3:4a:e3:be:ef:a4:10:90:d6:ea:c0:22:
e3:0b:3a:35:20:72:b7:19:d9:d3:7e:61:cd:0f:29:c1:2b:09:
d2:1d:62:74:31:82:10:a3:ed:4a:1f:44:09:72:21:f2:7e:6d:
54:cd:80:a9:23:72:28:15:b2:1c:6f:48:01:3d:ac:82:de:3a:
3d:bc:46:0c:89:07:e8:81:32:8c:9c:f9:16:7c:41:ee:14:e8:
f8:03:fb:59:2e:49:92:aa:ed:95:d3:af:52:b9:cc:31:c9:f8:
78:c0:1e:17:aa:02:8a:ce:ab:db:e4:f5:f1:0f:df:2a:b0:32:
7c:da:47:86:a8:ae:c1:61:1d:7d:8e:49:45:bc:21:55:01:18:
1b:2d:33:57:39:8c:66:31:f6:29:02:87:ce:19:0e:28:c0:de:
6e:83:07:2e:79:8e:1d:d1:d7:c7:50:96:4c:5e:ce:c2:f6:85:
79:4a:69:9a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUvgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNDUxNDZaFw0yMzEyMjYwNDUxNDZaMBgxFjAU
BgNVBAMTDTY1NjAyYmU1LTFkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+QPoszehCs2AH1l0Q0pigtvaxOyEsVhQJD3z1QtUqvYpsuPWuV2tRFt8g
ax0Fy8VErdGqUtY5bKALw7TtUYLf6nGXuasRctqmEBiiBfAX1YZHuUx+maqsHrCx
t3ojJCYu/tG34JFwW33k7QfLj/oaNEt+NNLZ66r4eSDZwhFFtOFJogEzfKJ23DUH
EfBypoCnHJ+hHNfQWBxa1K0SohADyNZgCNizuq+YqhMGv5PbtloSA9Rez5hps3CU
VbcRaHuAAyMIdQKK7rVYrJW4eslaHlHOh39uVEsPdIoc8//hMGhYMoAtNkycXtOy
SFqvujNUrD5Ru0u+lzafIACBvIV9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUaCzG
0E6jJZ+XYX5+iwh1iUrXUkIwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzJENDk0MTVDOEE4NTExRUU4NzVBNjc2NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw2QwDQYJKoZIhvcNAQEL
BQADggEBAIGI9Jd2hH+QTASW8wRZXgPIexbDJqEO2z8K3b4gJ19Nmx8dGCbJn4vd
IcdixFEg1nvY7wLPy0ru89fbEPlzfLzNEed680xq9LZTtyi2M8NK477vpBCQ1urA
IuMLOjUgcrcZ2dN+Yc0PKcErCdIdYnQxghCj7UofRAlyIfJ+bVTNgKkjcigVshxv
SAE9rILeOj28RgyJB+iBMoyc+RZ8Qe4U6PgD+1kuSZKq7ZXTr1K5zDHJ+HjAHheq
AorOq9vk9fEP3yqwMnzaR4aorsFhHX2OSUW8IVUBGBstM1c5jGYx9ikCh84ZDijA
3m6DBy55jh3R18dQlkxezsL2hXlKaZo=
-----END CERTIFICATE-----
Generated at Fri May 9 10:51:05 2025 by rpki-client