Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31CC475AF4E811EFB054FF5B762E951A.roa
File: 31CC475AF4E811EFB054FF5B762E951A.roa (raw, json)
Hash identifier: 95hNvnPmsoA8cStrvrMoJZCdVTSaIdvCB4RrL8NqcH4=
Subject key identifier: 4A:34:68:F5:9E:00:F5:CB:2F:FB:6B:86:DF:21:02:D3:8E:B6:50:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016705
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31CC475AF4E811EFB054FF5B762E951A.roa
Signing time: Thu 27 Feb 2025 08:52:38 +0000
ROA not before: Thu 27 Feb 2025 08:52:34 +0000
ROA not after: Wed 26 Mar 2025 08:52:34 +0000
asID: 62240
IP address blocks: 154.195.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91909 (0x16705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 08:52:34 2025 GMT
Not After : Mar 26 08:52:34 2025 GMT
Subject: CN=67c027d6-a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:9f:b1:88:25:0e:4a:6c:68:f6:9e:e9:82:
01:19:3c:91:ad:df:41:df:12:99:56:f4:08:66:b6:
1b:3a:f0:3a:7b:d5:ec:bf:6b:2f:47:6d:92:95:4e:
c8:55:d8:e8:95:fd:9b:4a:06:5e:86:4a:22:cd:46:
25:5e:a1:9e:93:47:a7:a6:a6:b0:d1:13:fa:3f:76:
d9:24:df:c6:6e:e7:f0:ad:09:d5:b1:b9:42:53:0d:
74:f0:72:c2:03:19:3d:1e:bc:2d:ee:1a:5b:b1:52:
f4:b3:b4:58:c7:71:72:13:50:14:8a:49:1b:f0:61:
48:d7:ef:45:ee:b7:9e:48:99:ac:22:17:f5:1e:01:
77:fe:9c:99:61:c1:e1:fc:5c:c8:54:ec:83:c0:a9:
11:48:d5:52:94:b2:90:0a:77:ba:bf:10:e6:33:58:
35:d9:b1:f1:55:1b:7c:df:53:96:88:1f:db:df:ee:
3b:12:04:a1:0a:f9:47:4d:47:9b:38:29:67:ba:60:
6e:68:59:0c:16:38:14:98:34:ef:88:ae:19:ad:41:
3c:b4:2e:1c:8b:20:75:cc:fa:f5:a3:f6:ca:31:58:
4e:27:bd:30:81:a7:9a:66:94:e0:71:dd:a4:f1:cc:
e5:e0:c5:4b:da:71:b5:50:08:02:27:27:73:27:3f:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:68:F5:9E:00:F5:CB:2F:FB:6B:86:DF:21:02:D3:8E:B6:50:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31CC475AF4E811EFB054FF5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.17.0/24
Signature Algorithm: sha256WithRSAEncryption
42:62:93:bd:b8:5b:11:79:fb:ef:9c:62:8a:fb:18:36:c8:bf:
ce:e2:63:d9:f0:fc:d5:ec:64:c5:a8:0d:27:27:c0:04:6e:ea:
9d:75:a0:e9:49:10:18:b0:9a:86:52:09:96:74:1d:c8:52:10:
26:06:0d:10:9b:68:01:0e:12:24:9f:09:82:d4:77:c4:40:4b:
79:76:92:51:f6:db:12:59:44:d9:86:92:8a:10:de:f5:f7:37:
6a:9f:9b:80:ac:00:9f:c5:3c:63:85:1d:e0:1e:a1:b9:35:7e:
d6:ec:e4:f6:8a:8e:7d:96:e8:d0:03:a4:a1:66:b3:8f:48:41:
5c:cf:01:cd:d1:1f:0a:5c:71:c5:04:9c:5e:cd:e5:d9:c8:5f:
81:45:35:4b:1c:3a:36:c1:ff:48:1e:e9:89:7b:0b:63:7d:f6:
99:80:6c:27:72:12:69:aa:08:e2:cf:7d:99:a5:d1:21:26:6b:
40:6c:7c:06:e6:26:9e:07:c3:93:5d:86:de:91:7b:72:d6:9d:
18:63:1f:06:37:64:aa:4c:d0:a9:5f:65:5a:77:50:c7:00:2e:
22:d7:f1:b8:c6:95:d2:c8:3a:9b:88:23:f2:15:e0:10:cd:3d:
ba:28:a9:20:6f:73:e4:d9:dc:95:4f:5b:f7:b3:70:ba:c2:e8:
38:0e:af:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWcFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDg1MjM0WhcNMjUwMzI2MDg1MjM0WjAYMRYw
FAYDVQQDEw02N2MwMjdkNi1hMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvCyfsYglDkpsaPae6YIBGTyRrd9B3xKZVvQIZrYbOvA6e9Xsv2svR22S
lU7IVdjolf2bSgZehkoizUYlXqGek0enpqaw0RP6P3bZJN/GbufwrQnVsblCUw10
8HLCAxk9Hrwt7hpbsVL0s7RYx3FyE1AUikkb8GFI1+9F7reeSJmsIhf1HgF3/pyZ
YcHh/FzIVOyDwKkRSNVSlLKQCne6vxDmM1g12bHxVRt831OWiB/b3+47EgShCvlH
TUebOClnumBuaFkMFjgUmDTviK4ZrUE8tC4ciyB1zPr1o/bKMVhOJ70wgaeaZpTg
cd2k8czl4MVL2nG1UAgCJydzJz8B0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEo0
aPWeAPXLL/trht8hAtOOtlApMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMUNDNDc1QUY0RTgxMUVGQjA1NEZGNUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMRMA0GCSqGSIb3DQEB
CwUAA4IBAQBCYpO9uFsRefvvnGKK+xg2yL/O4mPZ8PzV7GTFqA0nJ8AEbuqddaDp
SRAYsJqGUgmWdB3IUhAmBg0Qm2gBDhIknwmC1HfEQEt5dpJR9tsSWUTZhpKKEN71
9zdqn5uArACfxTxjhR3gHqG5NX7W7OT2io59lujQA6ShZrOPSEFczwHN0R8KXHHF
BJxezeXZyF+BRTVLHDo2wf9IHumJewtjffaZgGwnchJpqgjiz32ZpdEhJmtAbHwG
5iaeB8OTXYbekXty1p0YYx8GN2SqTNCpX2Vad1DHAC4i1/G4xpXSyDqbiCPyFeAQ
zT26KKkgb3Pk2dyVT1v3s3C6wug4Dq+n
-----END CERTIFICATE-----
Generated at Fri May 9 05:51:22 2025 by rpki-client