Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D005786DA6411EFA8C7BC5E762E951A.roa
File: 3D005786DA6411EFA8C7BC5E762E951A.roa (raw, json)
Hash identifier: MA5xAZV/OKOFdXy2WS64+QNL4cki2Pz6Gl0Q2cbeOPA=
Subject key identifier: 37:B9:D2:6D:0E:94:27:41:F3:A1:36:95:6B:AF:08:B7:45:F8:BE:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01488E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D005786DA6411EFA8C7BC5E762E951A.roa
Signing time: Fri 24 Jan 2025 15:02:33 +0000
ROA not before: Fri 24 Jan 2025 15:02:29 +0000
ROA not after: Wed 05 Mar 2025 15:02:29 +0000
asID: 49505
IP address blocks: 154.209.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84110 (0x1488e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 15:02:29 2025 GMT
Not After : Mar 5 15:02:29 2025 GMT
Subject: CN=6793ab89-a71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:5d:5b:82:f6:49:86:fa:2a:b3:e7:b3:cc:
5e:4b:14:46:b4:cf:2e:af:55:4b:fb:6f:ab:c4:2d:
03:89:f9:fd:ee:06:93:90:6d:2a:17:66:56:91:81:
62:6b:8b:0f:d9:49:32:6e:65:0f:a0:85:c1:68:08:
a8:ff:a9:a4:a3:10:af:64:4d:66:94:ef:16:68:86:
01:c5:05:05:d7:5d:0a:43:ad:7b:f7:81:4e:e0:86:
48:d2:02:c8:f1:a6:3d:94:7d:e6:a3:4b:33:6f:82:
72:c7:c6:1e:f3:a7:d6:8d:e1:6e:5c:87:42:ae:27:
e3:fc:ac:f8:a4:66:73:33:8d:7d:a5:1f:31:52:6c:
d1:88:05:1a:1f:4f:85:de:f4:ac:75:ee:eb:cf:fb:
26:73:37:b9:1e:64:ce:ee:94:ff:8c:01:85:88:11:
21:5e:39:fc:47:ef:93:2c:22:55:8a:80:35:56:56:
16:f5:76:1d:80:1f:18:80:6b:52:d8:86:3f:ee:64:
46:62:f7:44:73:06:17:55:e0:80:a1:e8:34:42:f2:
41:6f:f1:fe:fc:4a:e7:95:34:b0:2a:4d:69:8e:97:
15:2b:f6:4a:89:35:fd:76:a0:c0:68:1f:65:96:6e:
c7:8a:3d:cd:9f:7f:8b:76:d3:8e:b2:76:f2:e5:e0:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:D2:6D:0E:94:27:41:F3:A1:36:95:6B:AF:08:B7:45:F8:BE:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D005786DA6411EFA8C7BC5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:64:49:9e:5d:26:56:7f:85:e9:7a:ef:88:33:ff:7b:29:03:
6b:3a:0c:3a:05:a7:93:ec:0f:aa:03:92:00:f5:df:8e:24:2c:
ff:2e:68:af:e5:a3:01:65:cd:2d:5b:db:b7:b2:00:ac:ed:a4:
77:0a:0c:2f:f5:b9:31:77:cd:16:95:83:26:e5:09:b6:e9:a5:
16:b5:27:a5:2e:c9:6d:91:e1:de:b0:52:c6:f5:7b:54:2c:a8:
22:6b:61:07:fb:f9:d4:5a:c9:f7:53:1c:be:db:c2:fd:c9:65:
c0:e4:8a:35:1f:2e:f6:30:d0:74:21:a8:20:4e:1d:fb:54:4b:
37:28:6a:75:e2:3c:ec:67:30:8a:b7:fa:90:24:fd:81:16:3b:
e1:5c:cb:26:63:06:f6:42:56:ab:ee:89:38:63:8b:0d:f9:92:
b4:b5:44:2e:14:13:8e:de:14:1c:5c:e4:f8:ac:04:81:9e:28:
a4:ae:e6:28:61:6d:d8:a2:82:30:82:17:3c:1b:ba:d5:40:21:
5f:fc:7e:07:8b:7c:2d:fb:14:e5:27:cf:9e:bd:b6:d5:a4:05:
85:b1:40:78:e0:60:70:91:31:da:04:8f:b6:6f:0f:d5:91:4e:
75:4e:a3:45:0d:cb:45:8b:4e:bf:75:ce:65:56:19:cd:02:4e:
67:ec:11:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUiOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTUwMjI5WhcNMjUwMzA1MTUwMjI5WjAYMRYw
FAYDVQQDEw02NzkzYWI4OS1hNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJNdW4L2SYb6KrPns8xeSxRGtM8ur1VL+2+rxC0Difn97gaTkG0qF2ZW
kYFia4sP2UkybmUPoIXBaAio/6mkoxCvZE1mlO8WaIYBxQUF110KQ61794FO4IZI
0gLI8aY9lH3mo0szb4Jyx8Ye86fWjeFuXIdCrifj/Kz4pGZzM419pR8xUmzRiAUa
H0+F3vSsde7rz/smcze5HmTO7pT/jAGFiBEhXjn8R++TLCJVioA1VlYW9XYdgB8Y
gGtS2IY/7mRGYvdEcwYXVeCAoeg0QvJBb/H+/ErnlTSwKk1pjpcVK/ZKiTX9dqDA
aB9llm7Hij3Nn3+LdtOOsnby5eCcXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDe5
0m0OlCdB86E2lWuvCLdF+L4OMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRDAwNTc4NkRBNjQxMUVGQThDN0JDNUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtHaMA0GCSqGSIb3DQEB
CwUAA4IBAQB7ZEmeXSZWf4Xpeu+IM/97KQNrOgw6BaeT7A+qA5IA9d+OJCz/Lmiv
5aMBZc0tW9u3sgCs7aR3Cgwv9bkxd80WlYMm5Qm26aUWtSelLsltkeHesFLG9XtU
LKgia2EH+/nUWsn3Uxy+28L9yWXA5Io1Hy72MNB0IaggTh37VEs3KGp14jzsZzCK
t/qQJP2BFjvhXMsmYwb2Qlar7ok4Y4sN+ZK0tUQuFBOO3hQcXOT4rASBniikruYo
YW3YooIwghc8G7rVQCFf/H4Hi3wt+xTlJ8+evbbVpAWFsUB44GBwkTHaBI+2bw/V
kU51TqNFDctFi06/dc5lVhnNAk5n7BHE
-----END CERTIFICATE-----
Generated at Mon Mar 24 18:58:31 2025 by rpki-client