Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4143ACF16311EF928263A6762E951A.roa
File: 3D4143ACF16311EF928263A6762E951A.roa (raw, json)
Hash identifier: GAImVHpYI0WeFOvHS9UKKTP+OZxW9x6Uf5a5w87cpYQ=
Subject key identifier: 81:40:4B:CC:D9:49:1F:D2:69:62:03:EF:B8:76:6F:4B:E1:E0:C7:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4143ACF16311EF928263A6762E951A.roa
Signing time: Sat 22 Feb 2025 21:23:20 +0000
ROA not before: Sat 22 Feb 2025 21:23:17 +0000
ROA not after: Wed 26 Mar 2025 21:23:17 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88710 (0x15a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 21:23:17 2025 GMT
Not After : Mar 26 21:23:17 2025 GMT
Subject: CN=67ba4048-e81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:51:e6:76:ba:16:56:83:3e:b8:b9:03:e1:
ba:58:0c:ca:27:94:7d:de:aa:87:e4:d1:47:c5:0e:
ae:df:9b:fc:e4:23:67:8f:b8:63:92:4c:54:4f:8b:
86:9b:71:f4:53:9e:b2:4b:fb:82:4c:fb:07:16:cd:
86:b2:78:08:55:82:74:0e:8b:72:cb:48:2a:ac:91:
cd:d3:37:d9:7d:fa:50:35:6d:d5:a5:ca:49:d3:fb:
92:11:68:c0:47:a4:3c:67:89:ff:5c:59:cb:ba:cb:
ac:1c:05:61:1d:ad:cf:71:3f:80:b5:d0:db:16:bf:
57:76:27:ab:38:ee:1f:01:90:d0:a7:fb:8e:46:9d:
fd:98:13:8c:4d:30:1a:b4:4a:71:8b:1e:d3:f7:1a:
ee:c7:22:86:9b:ab:a8:28:28:db:a4:f3:43:ab:2f:
46:be:e0:04:b8:11:65:4e:11:e0:8f:a8:18:d1:93:
d4:75:eb:16:3f:a6:7e:1a:3b:d9:a0:52:e4:fd:50:
b2:4c:bd:f0:b2:b7:d9:50:72:ce:0c:6c:eb:dd:4e:
20:c3:da:0a:f8:8e:e8:75:a5:16:24:06:81:47:f3:
69:b8:e3:c6:1f:e5:05:c7:12:c8:e8:05:99:fe:8a:
61:2a:d2:71:e5:cf:24:e7:d0:b5:e3:d2:4a:43:cb:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:4B:CC:D9:49:1F:D2:69:62:03:EF:B8:76:6F:4B:E1:E0:C7:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D4143ACF16311EF928263A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
59:a0:e1:94:42:df:a9:2d:80:37:29:4b:b2:c5:a3:39:58:33:
fc:56:d3:1c:69:9e:68:39:2b:a6:c1:75:cb:f1:51:74:1c:51:
10:77:18:5b:b8:0e:18:3b:4f:23:c0:ad:50:4a:fa:05:21:d3:
2e:a9:d3:7e:7a:97:7b:52:3c:c9:f4:d2:0a:9b:26:0c:c7:c3:
a7:21:b1:38:9f:71:0c:a5:09:e1:87:de:d0:8f:4a:a2:16:43:
ae:3d:c9:40:20:55:52:ca:49:10:d8:72:ea:17:37:90:97:21:
09:af:04:a6:97:b9:d5:bd:d2:56:ad:b8:bb:30:8b:05:bd:a0:
11:88:65:d1:99:f0:89:9b:28:37:ad:ba:ee:8b:e3:00:29:4d:
af:23:d9:5d:57:8b:75:7e:e7:09:1a:5b:7d:c4:a6:92:c9:8a:
e5:82:b0:0f:c1:b4:85:2b:79:3a:20:44:db:d6:8f:8f:39:4a:
86:a5:44:bd:4f:45:44:82:ca:2c:02:8f:35:2f:a6:14:e5:3d:
e2:ea:af:89:e5:4b:f3:ad:98:49:9e:da:84:d9:09:f4:68:c2:
fd:17:aa:0c:de:0d:16:18:f2:08:43:2d:87:dc:60:aa:ec:06:
bf:26:6a:49:bd:c5:26:6c:14:d3:4a:f1:9e:ca:9c:0a:d4:46:
0f:47:99:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVqGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIyMjEyMzE3WhcNMjUwMzI2MjEyMzE3WjAYMRYw
FAYDVQQDEw02N2JhNDA0OC1lODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA06tR5na6FlaDPri5A+G6WAzKJ5R93qqH5NFHxQ6u35v85CNnj7hjkkxU
T4uGm3H0U56yS/uCTPsHFs2GsngIVYJ0Dotyy0gqrJHN0zfZffpQNW3VpcpJ0/uS
EWjAR6Q8Z4n/XFnLususHAVhHa3PcT+AtdDbFr9XdierOO4fAZDQp/uORp39mBOM
TTAatEpxix7T9xruxyKGm6uoKCjbpPNDqy9GvuAEuBFlThHgj6gY0ZPUdesWP6Z+
GjvZoFLk/VCyTL3wsrfZUHLODGzr3U4gw9oK+I7odaUWJAaBR/NpuOPGH+UFxxLI
6AWZ/ophKtJx5c8k59C149JKQ8sQ2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIFA
S8zZSR/SaWID77h2b0vh4Mf5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRDQxNDNBQ0YxNjMxMUVGOTI4MjYzQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZoOGUQt+pLYA3KUuyxaM5WDP8VtMcaZ5oOSumwXXL8VF0HFEQdxhb
uA4YO08jwK1QSvoFIdMuqdN+epd7UjzJ9NIKmyYMx8OnIbE4n3EMpQnhh97Qj0qi
FkOuPclAIFVSykkQ2HLqFzeQlyEJrwSml7nVvdJWrbi7MIsFvaARiGXRmfCJmyg3
rbrui+MAKU2vI9ldV4t1fucJGlt9xKaSyYrlgrAPwbSFK3k6IETb1o+POUqGpUS9
T0VEgsosAo81L6YU5T3i6q+J5UvzrZhJntqE2Qn0aML9F6oM3g0WGPIIQy2H3GCq
7Aa/JmpJvcUmbBTTSvGeypwK1EYPR5nQ
-----END CERTIFICATE-----
Generated at Fri May 9 06:52:26 2025 by rpki-client