Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F6FF24F52711EFAC92DC86762E951A.roa
File: 31F6FF24F52711EFAC92DC86762E951A.roa (raw, json)
Hash identifier: hMjnJOLR5bp6fnrkuhp/PtgcHzkqp8lNVbtbXZ5pv2E=
Subject key identifier: 25:75:C7:6F:B9:B1:CF:D9:FA:E1:DF:A3:BE:8E:E0:AD:2D:D8:CC:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016952
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F6FF24F52711EFAC92DC86762E951A.roa
Signing time: Thu 27 Feb 2025 16:23:36 +0000
ROA not before: Thu 27 Feb 2025 16:23:33 +0000
ROA not after: Fri 28 Mar 2025 16:23:33 +0000
asID: 395793
IP address blocks: 154.193.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92498 (0x16952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 16:23:33 2025 GMT
Not After : Mar 28 16:23:33 2025 GMT
Subject: CN=67c09188-27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:99:d5:42:bc:98:7d:84:0e:4e:eb:d6:a4:
77:9e:e4:e4:6a:8c:8f:6e:48:46:95:57:29:e7:dd:
47:d6:ff:c1:53:8f:3f:df:d3:31:1b:de:eb:24:38:
d1:b4:da:29:c5:58:56:fd:77:f7:88:5f:3c:bc:73:
43:c2:97:0a:19:29:6f:b1:08:09:68:53:e5:6d:f1:
02:d9:c1:bf:f4:cf:c7:12:a7:ae:2d:82:a8:35:cc:
47:bc:1a:8e:02:e2:dd:91:2e:d8:c9:94:69:1d:57:
66:43:b5:ef:ca:a1:c3:7c:15:90:8e:09:ec:bd:88:
d7:17:b6:c9:45:e6:6b:44:c5:a9:ef:5e:dd:06:56:
b8:ba:1b:f3:4d:d4:31:df:b8:27:93:0f:31:1c:1a:
92:92:be:80:a2:95:50:fa:4d:ad:a7:9e:29:ff:b6:
1c:48:71:23:e2:ec:56:50:b7:dd:6d:49:bc:40:c1:
be:4d:1e:79:d6:b0:7e:11:b6:e7:cf:c7:b0:c0:f5:
7b:88:07:a9:8c:76:00:20:c7:51:d5:47:eb:5a:6e:
bb:c9:d9:5f:4e:4c:74:a2:47:4e:48:a6:d4:e4:26:
ea:7e:1a:15:b4:9a:c4:84:04:eb:2e:46:e4:87:d4:
15:27:ad:7e:8b:c4:62:f7:2f:36:6a:ba:bd:1f:95:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:C7:6F:B9:B1:CF:D9:FA:E1:DF:A3:BE:8E:E0:AD:2D:D8:CC:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31F6FF24F52711EFAC92DC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.107.0/24
Signature Algorithm: sha256WithRSAEncryption
25:00:c9:cf:d6:98:42:13:fa:8f:ed:09:20:1c:aa:c3:05:a0:
1a:ea:93:57:bf:32:1a:f3:b7:89:5a:46:a5:63:9a:68:09:2c:
df:d5:f5:c3:57:f1:f4:e9:25:40:0b:57:7d:a0:32:31:cb:9d:
55:4e:f3:05:97:6a:91:2f:1c:67:0e:1d:6b:16:a8:10:1f:96:
15:ef:0c:bf:51:c0:7b:3d:b9:eb:c2:71:67:0f:e2:fe:e6:d5:
09:8c:5c:57:9f:79:2d:a9:40:e4:94:39:5f:4a:22:b5:34:ca:
2e:88:99:eb:6f:37:c1:0b:5d:3f:c2:92:5d:04:5d:bb:3a:4f:
b1:0e:24:65:1a:a7:d1:38:c2:b0:7c:4a:06:1a:77:cf:d4:f9:
3e:65:e2:2d:bc:c3:ab:c3:fe:11:d9:f8:6e:96:4c:41:46:45:
e2:83:91:21:60:e4:8b:a7:15:ce:bf:d5:2b:ad:92:b7:5b:25:
80:89:8d:9b:99:19:01:b4:bd:3c:60:2d:03:32:14:d9:1d:77:
56:46:af:a8:a5:eb:4b:81:24:39:e0:e3:0e:81:b6:1b:21:25:
9e:25:89:0f:ab:58:76:5b:70:d3:84:4a:5c:c2:66:77:2a:45:
72:af:a7:02:ff:10:83:94:2f:9a:c5:6c:d1:39:1d:51:ec:0e:
75:26:7a:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWlSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTYyMzMzWhcNMjUwMzI4MTYyMzMzWjAYMRYw
FAYDVQQDEw02N2MwOTE4OC0yN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyk+Z1UK8mH2EDk7r1qR3nuTkaoyPbkhGlVcp591H1v/BU48/39MxG97r
JDjRtNopxVhW/Xf3iF88vHNDwpcKGSlvsQgJaFPlbfEC2cG/9M/HEqeuLYKoNcxH
vBqOAuLdkS7YyZRpHVdmQ7XvyqHDfBWQjgnsvYjXF7bJReZrRMWp717dBla4uhvz
TdQx37gnkw8xHBqSkr6AopVQ+k2tp54p/7YcSHEj4uxWULfdbUm8QMG+TR551rB+
Ebbnz8ewwPV7iAepjHYAIMdR1UfrWm67ydlfTkx0okdOSKbU5CbqfhoVtJrEhATr
Lkbkh9QVJ61+i8Ri9y82arq9H5VBQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCV1
x2+5sc/Z+uHfo76O4K0t2MyBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMUY2RkYyNEY1MjcxMUVGQUM5MkRDODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFrMA0GCSqGSIb3DQEB
CwUAA4IBAQAlAMnP1phCE/qP7QkgHKrDBaAa6pNXvzIa87eJWkalY5poCSzf1fXD
V/H06SVAC1d9oDIxy51VTvMFl2qRLxxnDh1rFqgQH5YV7wy/UcB7PbnrwnFnD+L+
5tUJjFxXn3ktqUDklDlfSiK1NMouiJnrbzfBC10/wpJdBF27Ok+xDiRlGqfROMKw
fEoGGnfP1Pk+ZeItvMOrw/4R2fhulkxBRkXig5EhYOSLpxXOv9UrrZK3WyWAiY2b
mRkBtL08YC0DMhTZHXdWRq+opetLgSQ54OMOgbYbISWeJYkPq1h2W3DThEpcwmZ3
KkVyr6cC/xCDlC+axWzROR1R7A51JnrE
-----END CERTIFICATE-----
Generated at Fri May 9 12:01:54 2025 by rpki-client