This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355533C88A9A11EE97BEBA2C4AD9E6FC.roa
File:                     355533C88A9A11EE97BEBA2C4AD9E6FC.roa (raw, json)
Hash identifier:          QwDLE+D+Gd6y0rzkKxfTF/KQt0M9Q/h/k8BN0x73084=
Subject key identifier:   42:AC:C1:CC:37:6A:DD:CA:1B:7B:93:22:E1:E5:FF:58:9D:5C:4E:DE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       545C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355533C88A9A11EE97BEBA2C4AD9E6FC.roa
Signing time:             Fri 24 Nov 2023 07:22:22 +0000
ROA not before:           Fri 24 Nov 2023 07:22:19 +0000
ROA not after:            Tue 26 Dec 2023 07:22:19 +0000
asID:                     62240
IP address blocks:        154.196.42.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21596 (0x545c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 07:22:19 2023 GMT
            Not After : Dec 26 07:22:19 2023 GMT
        Subject: CN=65604f2e-89cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:fc:4d:e9:7c:02:7d:05:56:54:42:aa:66:
                    78:1a:cd:9b:69:96:61:c9:5b:0f:25:5a:38:dd:8b:
                    e0:29:eb:b3:2e:cc:df:11:d5:d3:a0:89:b1:bf:47:
                    b9:4e:4d:57:92:83:1f:4c:48:29:e4:67:b9:b1:7c:
                    28:ea:89:55:50:37:1d:03:e8:fb:80:7a:03:45:fd:
                    03:ce:c6:29:44:dd:3e:59:b2:03:09:d8:d5:68:a8:
                    2b:da:f8:60:18:f1:64:a0:6e:2c:81:44:00:dd:ac:
                    a7:21:97:5f:26:3b:38:dd:5e:ac:33:c5:08:5d:b0:
                    52:21:d3:e3:ad:1b:a9:2c:7d:23:72:2a:6d:df:1f:
                    59:29:07:6b:1d:e3:1d:19:e3:69:b8:87:24:57:22:
                    80:82:2c:ee:e3:92:96:55:dd:38:6e:83:e3:0e:f5:
                    a6:ab:80:56:7a:56:d8:b0:50:11:79:4d:cc:9e:35:
                    76:ba:d3:dc:85:8f:99:f5:33:d7:57:93:f5:64:41:
                    ad:13:79:c2:92:f0:53:54:c0:56:b1:1c:ad:2b:07:
                    f6:7c:af:3b:8b:1b:20:b4:02:6a:d5:fd:fd:91:fa:
                    9f:a1:6e:5a:4b:71:90:77:73:65:24:1a:9d:29:05:
                    6c:1b:c8:29:da:e3:ff:96:35:a6:2d:aa:0a:b4:c9:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:C1:CC:37:6A:DD:CA:1B:7B:93:22:E1:E5:FF:58:9D:5C:4E:DE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355533C88A9A11EE97BEBA2C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:71:e9:06:03:67:5f:a9:3d:b8:81:36:6b:cf:ba:c1:33:52:
         d6:a5:11:d8:a6:63:ff:bf:2e:7a:c2:ae:cb:21:7d:a7:52:3f:
         a2:a3:e5:e8:66:42:e6:0d:db:0a:5f:45:0b:dd:95:29:46:b4:
         13:e6:1b:19:c3:5e:81:59:8b:60:f4:ec:05:38:c6:9a:40:ba:
         b3:77:78:e1:f2:bf:28:ce:5c:59:24:0f:80:7f:ba:7e:f8:d8:
         71:24:e2:25:85:cc:26:c4:f5:a6:04:31:47:8f:20:31:c1:a5:
         78:7c:7f:a3:a9:f6:32:3c:56:85:8f:32:23:be:fe:95:ec:07:
         df:c1:40:e1:a2:65:c3:fa:5b:bb:0e:b7:79:34:fb:34:d6:ae:
         4d:15:34:bc:a7:f8:a8:48:69:03:0f:1a:bb:16:c6:4e:27:ed:
         60:35:83:6a:2d:64:b6:32:6c:73:bb:90:58:ef:88:0f:8b:62:
         38:11:1b:d1:87:8b:6d:9f:5c:a8:2d:a4:5a:41:ab:44:78:b5:
         64:7e:5e:65:09:00:46:77:1f:8c:ed:c8:71:39:65:26:c1:53:
         52:d8:42:de:54:08:14:77:72:10:9f:92:e6:24:5b:96:20:6b:
         00:ff:e3:a3:27:09:01:b5:ac:c7:a4:58:a0:8e:7e:b8:55:5a:
         a1:45:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----