Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2EBFF6D8CD11EFB32907A2762E951A.roa
File: 2E2EBFF6D8CD11EFB32907A2762E951A.roa (raw, json)
Hash identifier: ePcZgW+6obz9cNA++V4Kv25zBgaAyhbLe54EfayniXY=
Subject key identifier: 3D:1C:FB:3E:DE:AE:E5:8A:AA:BA:E1:B9:DA:BB:EA:F6:28:8B:6A:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2EBFF6D8CD11EFB32907A2762E951A.roa
Signing time: Wed 22 Jan 2025 14:28:43 +0000
ROA not before: Wed 22 Jan 2025 14:28:39 +0000
ROA not after: Tue 01 Apr 2025 14:28:39 +0000
asID: 63139
IP address blocks: 154.93.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81828 (0x13fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:28:39 2025 GMT
Not After : Apr 1 14:28:39 2025 GMT
Subject: CN=6791009b-63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:71:62:b1:ab:be:f5:51:92:56:0a:d9:82:
a0:e6:b4:e3:c4:00:14:92:8e:14:29:4e:c0:47:bc:
d5:bb:3f:12:a2:e6:26:61:98:ec:34:58:4e:9e:0d:
34:6e:28:b8:83:b2:b4:9a:ec:78:bc:17:a2:3e:5b:
10:99:97:59:2f:fc:1a:b8:a9:34:bb:1e:9b:c8:52:
ec:c7:98:a6:a7:bc:8b:28:64:47:cc:58:a3:f1:6a:
5a:4a:67:41:8e:4f:31:8e:07:f6:6e:c5:13:e6:43:
b4:d2:5e:d5:6e:7d:2f:34:ad:e2:9b:00:03:34:1f:
c3:85:8a:04:e1:de:b7:00:ba:90:ac:4c:b8:63:da:
de:93:21:60:86:99:db:40:df:d9:8a:22:9d:9e:91:
28:d7:5a:d0:aa:c8:56:89:66:4a:a1:a6:d8:98:e0:
dd:3d:a7:25:27:09:d0:12:7e:39:5d:bc:f0:aa:0e:
d7:12:71:53:70:5f:d0:35:e7:45:a9:2a:2e:62:e8:
94:a8:f3:8e:84:47:e7:0c:3a:2e:67:97:68:4d:b8:
51:7b:7c:b3:06:29:ea:df:df:80:2f:29:16:59:fb:
52:6b:12:a8:1e:c6:c5:2f:95:9c:5e:9c:4a:f0:d5:
8a:6c:2b:29:ad:81:ef:d4:93:13:2d:1f:7d:ee:29:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:FB:3E:DE:AE:E5:8A:AA:BA:E1:B9:DA:BB:EA:F6:28:8B:6A:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2EBFF6D8CD11EFB32907A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.68.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a8:d3:38:c7:46:96:62:70:ea:27:4d:ca:50:72:b7:42:a8:
51:28:cb:d3:e3:86:6d:25:33:ee:a6:65:02:a4:f8:9c:8a:9b:
14:60:bb:da:1b:87:c7:d2:0f:f4:f2:1b:51:1c:96:87:ce:8b:
6f:3e:49:69:87:c3:c3:4c:86:47:41:57:79:d1:94:d4:60:85:
16:ca:0b:44:2b:25:4b:5a:5a:5d:df:c6:ef:46:ca:58:8f:7b:
a9:9e:20:c8:b0:b5:54:ed:df:05:52:94:b2:8b:22:fc:83:66:
3b:94:da:86:05:6b:69:c8:50:87:99:05:f3:cf:3c:0c:81:31:
9b:57:bd:e5:24:72:1d:93:91:9a:ff:56:0d:90:af:80:2c:e5:
32:e7:f7:ab:ba:93:da:34:1b:0b:b9:4b:0d:7f:d8:d6:eb:00:
49:9f:7e:f3:d6:4a:99:4e:7e:72:c9:5d:6a:65:cd:23:04:fc:
67:95:26:fa:36:f1:44:f2:8d:1b:da:b3:14:ec:62:9a:51:24:
0b:e3:77:6b:78:be:ae:7f:cf:be:ec:e0:51:93:f8:a9:ea:18:
12:c5:79:a5:c1:27:fe:49:24:56:05:93:79:8c:b7:c8:7d:38:
47:ba:d7:bf:52:2a:62:19:15:f3:e4:ed:02:dd:2d:6b:21:74:
78:7e:0d:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT+kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTQyODM5WhcNMjUwNDAxMTQyODM5WjAYMRYw
FAYDVQQDEw02NzkxMDA5Yi02M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA57FxYrGrvvVRklYK2YKg5rTjxAAUko4UKU7AR7zVuz8SouYmYZjsNFhO
ng00bii4g7K0mux4vBeiPlsQmZdZL/wauKk0ux6byFLsx5imp7yLKGRHzFij8Wpa
SmdBjk8xjgf2bsUT5kO00l7Vbn0vNK3imwADNB/DhYoE4d63ALqQrEy4Y9rekyFg
hpnbQN/ZiiKdnpEo11rQqshWiWZKoabYmODdPaclJwnQEn45Xbzwqg7XEnFTcF/Q
NedFqSouYuiUqPOOhEfnDDouZ5doTbhRe3yzBinq39+ALykWWftSaxKoHsbFL5Wc
XpxK8NWKbCsprYHv1JMTLR997ilRXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD0c
+z7eruWKqrrhudq76vYoi2qfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTJFQkZGNkQ4Q0QxMUVGQjMyOTA3QTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1EMA0GCSqGSIb3DQEB
CwUAA4IBAQBFqNM4x0aWYnDqJ03KUHK3QqhRKMvT44ZtJTPupmUCpPicipsUYLva
G4fH0g/08htRHJaHzotvPklph8PDTIZHQVd50ZTUYIUWygtEKyVLWlpd38bvRspY
j3upniDIsLVU7d8FUpSyiyL8g2Y7lNqGBWtpyFCHmQXzzzwMgTGbV73lJHIdk5Ga
/1YNkK+ALOUy5/erupPaNBsLuUsNf9jW6wBJn37z1kqZTn5yyV1qZc0jBPxnlSb6
NvFE8o0b2rMU7GKaUSQL43dreL6uf8++7OBRk/ip6hgSxXmlwSf+SSRWBZN5jLfI
fThHute/UipiGRXz5O0C3S1rIXR4fg29
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:32 2025 by rpki-client