Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312119068A9111EEBDBF3D0F4AD9E6FC.roa
File: 312119068A9111EEBDBF3D0F4AD9E6FC.roa (raw, json)
Hash identifier: 3PLR+YWujpXzf879YcHjOUAvR1GpFVU5FgYSiQqezW4=
Subject key identifier: 84:18:93:50:80:31:05:53:81:07:28:88:2F:0A:80:A9:1D:0A:43:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 53A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312119068A9111EEBDBF3D0F4AD9E6FC.roa
Signing time: Fri 24 Nov 2023 06:17:49 +0000
ROA not before: Fri 24 Nov 2023 06:17:46 +0000
ROA not after: Tue 26 Dec 2023 06:17:46 +0000
asID: 62240
IP address blocks: 154.196.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21414 (0x53a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 06:17:46 2023 GMT
Not After : Dec 26 06:17:46 2023 GMT
Subject: CN=6560400d-bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:6f:53:90:b9:b8:2c:4a:4e:47:cf:aa:b9:
95:fe:f4:4e:19:32:b8:34:ee:03:8b:8f:d4:11:4a:
16:12:31:d4:f1:54:7a:fa:26:e5:b1:8e:80:6f:9c:
9e:c6:50:47:58:eb:fa:ca:3a:c9:54:fb:b1:16:be:
cc:7c:e3:d6:b6:60:a8:0f:b4:96:a3:e8:78:c5:2f:
a8:22:e8:e3:e7:66:99:b5:97:5d:d4:24:4c:bd:df:
7f:dc:cc:f1:95:97:24:7d:ce:b9:ea:86:3c:d5:36:
25:80:5d:6b:c9:53:e3:73:7d:d7:44:cb:1c:80:bf:
38:9f:25:29:c4:8f:90:fa:d8:c5:fe:31:f5:59:9e:
13:67:d5:25:88:d3:09:53:8a:d0:a4:81:64:c8:a3:
3e:10:aa:26:03:b8:0d:a2:d4:e6:4c:01:70:72:ab:
f1:db:64:a5:ce:40:40:b8:21:e9:48:4e:bf:3d:60:
a6:e7:47:d2:45:81:3e:65:5a:ed:eb:49:bb:20:c3:
5e:52:6e:82:6c:ca:c3:a3:ba:54:40:53:56:f5:76:
a6:f4:f3:1a:a2:bc:b6:9a:2e:a7:0f:da:6c:54:1b:
7a:4b:82:83:bc:2b:56:8b:43:e0:66:27:dd:26:ac:
25:7b:82:cb:e5:de:68:fb:a5:73:1d:48:4e:03:d8:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:93:50:80:31:05:53:81:07:28:88:2F:0A:80:A9:1D:0A:43:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/312119068A9111EEBDBF3D0F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:77:60:64:c4:70:fa:be:5b:12:94:3b:a5:3e:8a:66:3a:01:
51:84:da:8c:fb:35:df:62:6f:bd:e1:de:07:5d:1e:85:81:3b:
5a:e9:11:f6:05:e2:20:b5:5b:7b:d2:33:03:74:8d:b7:5c:0f:
ec:39:af:66:5f:fc:2a:c6:ba:23:25:a2:47:b0:d2:fd:ce:3f:
75:78:8a:de:f1:7f:3b:fd:81:06:81:42:d2:9a:c7:21:9c:71:
c1:ca:66:7c:d9:49:69:1a:33:25:bc:12:a2:06:0d:a2:ef:21:
25:f4:ff:d4:78:74:5d:fb:da:1c:29:47:57:a5:c9:a0:85:77:
98:de:87:3c:29:4d:fc:6f:b9:cb:24:2d:5f:7f:03:3f:fa:86:
84:ed:b4:13:db:14:4e:2d:d6:98:4e:c3:f6:30:ba:9e:e8:2a:
a0:6d:3a:7c:a5:fd:5c:f7:98:da:08:32:98:b6:49:95:09:9b:
2c:e6:0d:f2:1b:9b:18:64:4a:76:a0:f6:2f:c5:f0:b5:55:ce:
c1:81:e8:fe:dc:f4:46:0a:25:17:98:e7:37:30:a2:99:a3:34:
a7:4c:bf:2b:a0:37:3a:e1:f8:99:1c:e1:26:5d:e5:0d:3b:a6:
de:e1:68:4d:d3:b3:0f:86:d9:3e:6c:a4:3a:e3:c6:67:57:33:
cc:ce:70:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICU6YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjQwNjE3NDZaFw0yMzEyMjYwNjE3NDZaMBgxFjAU
BgNVBAMTDTY1NjA0MDBkLWJkYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpRW9TkLm4LEpOR8+quZX+9E4ZMrg07gOLj9QRShYSMdTxVHr6JuWxjoBv
nJ7GUEdY6/rKOslU+7EWvsx849a2YKgPtJaj6HjFL6gi6OPnZpm1l13UJEy933/c
zPGVlyR9zrnqhjzVNiWAXWvJU+NzfddEyxyAvzifJSnEj5D62MX+MfVZnhNn1SWI
0wlTitCkgWTIoz4QqiYDuA2i1OZMAXByq/HbZKXOQEC4IelITr89YKbnR9JFgT5l
Wu3rSbsgw15SboJsysOjulRAU1b1dqb08xqivLaaLqcP2mxUG3pLgoO8K1aLQ+Bm
J90mrCV7gsvl3mj7pXMdSE4D2GSNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhBiT
UIAxBVOBByiILwqAqR0KQ/AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMxMjExOTA2OEE5MTExRUVCREJGM0QwRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxCAwDQYJKoZIhvcNAQEL
BQADggEBAE53YGTEcPq+WxKUO6U+imY6AVGE2oz7Nd9ib73h3gddHoWBO1rpEfYF
4iC1W3vSMwN0jbdcD+w5r2Zf/CrGuiMlokew0v3OP3V4it7xfzv9gQaBQtKaxyGc
ccHKZnzZSWkaMyW8EqIGDaLvISX0/9R4dF372hwpR1elyaCFd5jehzwpTfxvucsk
LV9/Az/6hoTttBPbFE4t1phOw/Ywup7oKqBtOnyl/Vz3mNoIMpi2SZUJmyzmDfIb
mxhkSnag9i/F8LVVzsGB6P7c9EYKJReY5zcwopmjNKdMvyugNzrh+Jkc4SZd5Q07
pt7haE3Tsw+G2T5spDrjxmdXM8zOcEQ=
-----END CERTIFICATE-----
Generated at Fri May 9 12:03:23 2025 by rpki-client