Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F4624F2DA0211EFA7B0C947762E951A.roa
File: 2F4624F2DA0211EFA7B0C947762E951A.roa (raw, json)
Hash identifier: ydswMoU05v7ofZ+8UJqTzgQ+iqyq47BbODZF2nmiXH8=
Subject key identifier: 32:7F:64:46:FD:A9:24:8C:86:B3:64:D9:FB:5A:D3:C8:8D:ED:0A:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014384
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F4624F2DA0211EFA7B0C947762E951A.roa
Signing time: Fri 24 Jan 2025 03:20:39 +0000
ROA not before: Fri 24 Jan 2025 03:20:35 +0000
ROA not after: Sat 01 Mar 2025 03:20:35 +0000
asID: 49505
IP address blocks: 154.223.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82820 (0x14384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 03:20:35 2025 GMT
Not After : Mar 1 03:20:35 2025 GMT
Subject: CN=67930707-75c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:bd:30:53:46:47:98:1e:6b:40:6a:16:89:
e9:f9:36:a6:98:87:75:18:d4:ca:7a:43:53:7a:2c:
fa:07:be:92:da:7f:94:06:c3:63:f0:4d:b5:e6:c6:
0e:e6:db:76:72:26:c9:97:f8:be:c3:6a:b0:3d:b0:
7e:9a:74:8e:cd:59:2d:d5:0e:cc:8e:ef:ce:8e:7b:
31:36:53:ec:9a:b8:ee:23:27:ff:95:52:dd:c1:96:
74:83:90:1c:03:7c:10:c1:1f:4c:57:45:5c:77:a9:
17:3c:a8:6a:59:81:b0:36:8e:3d:54:05:0a:0d:de:
a2:48:0e:24:52:14:d8:ab:6c:b5:d1:af:dd:b9:84:
a4:07:05:d6:cb:e7:01:37:0e:c3:f9:df:f6:69:a7:
5c:c0:40:b6:0f:dd:a1:e1:90:5a:cf:25:b3:56:c4:
f2:30:a1:e3:9f:ed:66:3f:a8:67:7d:a6:b7:be:5b:
0a:fd:67:9b:2f:5d:3d:dc:aa:da:a2:62:7a:f0:8a:
11:1e:03:d6:0c:db:88:be:e8:45:62:df:c6:42:19:
24:95:c1:05:cc:7d:ce:92:82:f7:b8:7d:72:7a:8d:
d8:9e:4a:48:21:3b:e1:33:9d:a9:73:a3:8d:3b:a9:
da:b1:b9:1d:0d:a6:32:ed:e7:e9:1e:70:42:16:0c:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:64:46:FD:A9:24:8C:86:B3:64:D9:FB:5A:D3:C8:8D:ED:0A:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F4624F2DA0211EFA7B0C947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f4:c6:ab:e8:cb:68:4f:eb:5b:ff:af:c3:7a:ff:0b:f7:0b:
40:4c:97:c6:c9:49:40:b6:65:fe:29:05:c0:51:ef:0b:04:6d:
cd:fe:4a:3c:3d:d6:8c:e1:bf:a0:17:42:10:6b:71:37:3a:89:
b3:18:5a:d9:90:d0:d5:af:b9:5e:c0:db:76:f1:19:71:77:38:
2e:cf:26:54:ba:c5:f2:9a:f7:ae:06:eb:6d:c5:ad:63:2d:c7:
8d:a0:d5:3e:e5:20:ee:e6:12:17:6a:16:3c:3b:e1:32:1e:3d:
22:96:f9:67:2b:a5:08:11:66:64:ac:3b:21:5f:ac:71:68:ed:
e7:ef:ae:c1:29:db:18:16:b9:61:5c:34:09:4c:cf:cb:77:02:
23:8f:5e:9a:09:66:b7:c9:37:60:40:a7:99:f6:26:57:e2:30:
15:29:df:bb:e9:cc:84:41:c8:3d:fe:10:db:f3:92:ca:0a:fb:
26:c6:5e:e2:36:3b:d6:fc:3a:41:60:d5:4e:db:e2:d4:99:2d:
92:67:86:1f:13:10:21:8e:b6:4c:ec:99:20:6c:2f:6f:3b:02:
dc:e5:94:b3:59:78:b6:eb:47:5b:15:d5:5a:d0:73:aa:f9:7d:
f6:17:a7:1c:7f:11:dc:57:1a:67:d8:d3:15:68:6f:10:eb:d6:
55:02:79:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUOEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDMyMDM1WhcNMjUwMzAxMDMyMDM1WjAYMRYw
FAYDVQQDEw02NzkzMDcwNy03NWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx4y9MFNGR5gea0BqFonp+TammId1GNTKekNTeiz6B76S2n+UBsNj8E21
5sYO5tt2cibJl/i+w2qwPbB+mnSOzVkt1Q7Mju/OjnsxNlPsmrjuIyf/lVLdwZZ0
g5AcA3wQwR9MV0Vcd6kXPKhqWYGwNo49VAUKDd6iSA4kUhTYq2y10a/duYSkBwXW
y+cBNw7D+d/2aadcwEC2D92h4ZBazyWzVsTyMKHjn+1mP6hnfaa3vlsK/WebL109
3KraomJ68IoRHgPWDNuIvuhFYt/GQhkklcEFzH3OkoL3uH1yeo3YnkpIITvhM52p
c6ONO6nasbkdDaYy7efpHnBCFgzmFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDJ/
ZEb9qSSMhrNk2fta08iN7Qo+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjQ2MjRGMkRBMDIxMUVGQTdCMEM5NDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/HMA0GCSqGSIb3DQEB
CwUAA4IBAQA/9Mar6MtoT+tb/6/Dev8L9wtATJfGyUlAtmX+KQXAUe8LBG3N/ko8
PdaM4b+gF0IQa3E3OomzGFrZkNDVr7lewNt28RlxdzguzyZUusXymveuButtxa1j
LceNoNU+5SDu5hIXahY8O+EyHj0ilvlnK6UIEWZkrDshX6xxaO3n767BKdsYFrlh
XDQJTM/LdwIjj16aCWa3yTdgQKeZ9iZX4jAVKd+76cyEQcg9/hDb85LKCvsmxl7i
NjvW/DpBYNVO2+LUmS2SZ4YfExAhjrZM7JkgbC9vOwLc5ZSzWXi260dbFdVa0HOq
+X32F6ccfxHcVxpn2NMVaG8Q69ZVAnm/
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:53:48 2025 by rpki-client