Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C725B4F62811EF8ED21C64762E951A.roa
File: 35C725B4F62811EF8ED21C64762E951A.roa (raw, json)
Hash identifier: Coic8BXWhd4AwfToEG5bYwtYBD+dp4lkS9E0fwFta1Y=
Subject key identifier: 56:9D:95:5A:3D:DA:DC:A0:72:66:2E:CF:5D:44:BD:13:74:BE:8F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C725B4F62811EF8ED21C64762E951A.roa
Signing time: Fri 28 Feb 2025 23:03:23 +0000
ROA not before: Fri 28 Feb 2025 23:03:20 +0000
ROA not after: Wed 26 Mar 2025 23:03:20 +0000
asID: 62240
IP address blocks: 154.194.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93357 (0x16cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 23:03:20 2025 GMT
Not After : Mar 26 23:03:20 2025 GMT
Subject: CN=67c240bb-a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:65:45:ea:2a:94:af:aa:d0:31:7f:f7:c9:e1:
1b:59:79:42:95:76:07:9b:6f:4f:45:70:60:77:c0:
26:f7:c5:eb:63:be:4a:c7:70:7f:ca:66:e7:87:c2:
fb:50:6e:b4:ff:68:2e:c0:f8:34:0e:05:fd:11:02:
23:82:eb:43:95:3a:98:99:03:14:d5:f9:b1:f6:4c:
c4:02:31:35:7e:0e:32:cc:e3:eb:3d:56:cb:e7:9e:
ed:40:de:1a:cc:80:87:d2:67:db:52:76:3c:14:b2:
6c:f4:63:e2:0e:e8:69:4f:fa:8c:00:63:d7:20:34:
de:09:a2:d7:3c:3f:30:e7:76:f4:35:b8:04:c7:ae:
fb:a6:28:14:b1:bf:88:7a:7f:5c:1a:8e:3f:ba:c6:
32:3b:d4:0d:57:5d:f5:90:85:ab:fd:57:9f:6d:ff:
90:6c:b5:34:f9:0f:94:aa:fc:82:9d:3b:26:77:c6:
f1:64:ec:01:d3:c5:ae:eb:f7:69:6f:0b:96:f5:f9:
f1:8b:b9:fa:90:05:6e:22:ba:e7:3e:d5:e1:ce:6e:
91:02:2a:fa:de:de:0b:75:be:62:b9:0e:88:ed:ce:
95:f5:61:b3:fe:b0:a2:1a:ea:4d:ca:17:ea:b9:cf:
30:84:82:78:e6:d6:bd:e4:7b:4f:af:5c:c5:5d:53:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9D:95:5A:3D:DA:DC:A0:72:66:2E:CF:5D:44:BD:13:74:BE:8F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35C725B4F62811EF8ED21C64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.120.0/24
Signature Algorithm: sha256WithRSAEncryption
09:23:f9:6a:ba:28:9e:b0:d4:09:77:fe:05:ee:ee:47:a8:3c:
d0:5a:87:6a:a2:1c:80:3f:90:47:74:af:11:85:07:03:82:80:
c1:6d:96:6d:50:2c:e5:18:ee:33:d0:f8:49:17:2a:4b:f6:4a:
1d:d1:3e:5e:0b:66:ba:50:e8:98:58:4f:76:0f:0c:9b:d8:bb:
6a:f2:78:7e:4f:10:e8:24:a6:97:ea:bd:a4:12:0c:2b:3d:28:
94:94:9a:7e:4b:0e:a5:1b:e4:f4:41:cd:7b:f9:b3:d4:e5:6b:
23:89:f8:c7:6c:b4:61:12:e6:5c:f8:57:f6:c3:f0:74:74:13:
21:e2:41:62:66:db:43:04:db:46:17:31:07:ba:26:ee:64:32:
d3:41:f8:48:ee:a9:f4:36:6e:47:06:f7:68:bc:88:95:cd:f6:
1e:fd:81:9f:d4:0a:99:09:22:d4:29:94:5a:7b:67:54:0c:99:
bb:05:c2:b1:52:28:ae:b7:4b:33:0d:75:b4:b0:06:1c:59:2c:
1f:ce:5c:71:66:41:0c:05:e5:28:ca:69:d3:8b:3d:a0:ae:42:
0d:c2:d1:ba:e7:58:bf:ed:aa:ce:2b:e0:10:1a:e5:d5:e7:bf:
2d:fa:b1:c0:08:fe:5c:a9:7a:09:c6:ea:73:12:11:4f:a1:79:
76:17:5a:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWytMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjMwMzIwWhcNMjUwMzI2MjMwMzIwWjAYMRYw
FAYDVQQDEw02N2MyNDBiYi1hNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5mVF6iqUr6rQMX/3yeEbWXlClXYHm29PRXBgd8Am98XrY75Kx3B/ymbn
h8L7UG60/2guwPg0DgX9EQIjgutDlTqYmQMU1fmx9kzEAjE1fg4yzOPrPVbL557t
QN4azICH0mfbUnY8FLJs9GPiDuhpT/qMAGPXIDTeCaLXPD8w53b0NbgEx677pigU
sb+Ien9cGo4/usYyO9QNV131kIWr/Vefbf+QbLU0+Q+UqvyCnTsmd8bxZOwB08Wu
6/dpbwuW9fnxi7n6kAVuIrrnPtXhzm6RAir63t4Ldb5iuQ6I7c6V9WGz/rCiGupN
yhfquc8whIJ45ta95HtPr1zFXVMOhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFad
lVo92tygcmYuz11EvRN0vo//MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUM3MjVCNEY2MjgxMUVGOEVEMjFDNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ4MA0GCSqGSIb3DQEB
CwUAA4IBAQAJI/lquiiesNQJd/4F7u5HqDzQWodqohyAP5BHdK8RhQcDgoDBbZZt
UCzlGO4z0PhJFypL9kod0T5eC2a6UOiYWE92Dwyb2Ltq8nh+TxDoJKaX6r2kEgwr
PSiUlJp+Sw6lG+T0Qc17+bPU5WsjifjHbLRhEuZc+Ff2w/B0dBMh4kFiZttDBNtG
FzEHuibuZDLTQfhI7qn0Nm5HBvdovIiVzfYe/YGf1AqZCSLUKZRae2dUDJm7BcKx
Uiiut0szDXW0sAYcWSwfzlxxZkEMBeUoymnTiz2grkINwtG651i/7arOK+AQGuXV
578t+rHACP5cqXoJxupzEhFPoXl2F1pE
-----END CERTIFICATE-----
Generated at Fri May 9 06:54:45 2025 by rpki-client